Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          nHEE7me8XuDVE8ftNyFEC6hmEYAMYeFiOs/YyF7zP+I=
Subject key identifier:   C1:FF:A2:84:28:98:CF:95:44:47:8E:48:FE:E1:0E:35:74:2B:89:15
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       018F8749671DF3787BC9857CB414719570AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:25 +0000
Manifest this update:     Fri 17 May 2024 16:01:25 +0000
Manifest next update:     Sat 18 May 2024 16:01:25 +0000
Files and hashes:         1: Mlf_PecUVHK1vvNW7HZijtWK0XQ.roa (hash: KKuxSXLf7Ozcjmrx74aZhMNS/8zyxS4jSDVE120/Frk=)
                          2: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: cqsdW9GCrCMo9VrKsIHh7LHlgljkSns0RYTor/vSg2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:67:1d:f3:78:7b:c9:85:7c:b4:14:71:95:70:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: May 17 16:01:25 2024 GMT
            Not After : May 18 16:01:25 2024 GMT
        Subject: CN=c1ffa2842898cf9544478e48fee10e35742b8915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:4a:c6:f6:c3:0f:63:21:4f:cb:9e:7e:60:
                    7d:ad:ac:c8:d2:de:1e:21:57:90:7d:b7:0c:f9:83:
                    8e:f5:c9:af:5f:a0:c5:6b:46:d5:a4:0d:94:cd:cb:
                    88:a8:0f:dc:ee:37:19:26:77:fa:4f:70:82:b0:d8:
                    aa:8f:16:95:d6:f5:3c:f5:41:c6:0c:23:bb:ba:6a:
                    e9:1a:7c:c8:8d:47:78:d0:d0:fe:5d:5a:ac:ec:97:
                    f2:8d:28:b2:ac:a1:16:81:6d:5e:f7:49:73:86:a6:
                    04:96:67:8e:ee:3b:fc:cf:cc:e3:c7:33:66:56:1a:
                    e4:5c:4e:19:54:9d:5b:d6:f4:e6:db:7e:de:bb:4b:
                    e2:a0:fe:7d:44:e0:af:48:73:e3:7a:44:57:17:1e:
                    17:c7:d7:7d:f0:37:0c:ad:1b:58:cf:86:a4:c5:ad:
                    9f:b3:9a:b1:db:ef:f2:f7:54:7d:8d:0c:98:5a:23:
                    a4:0c:51:60:30:30:fa:3a:ea:94:2a:8b:d7:3c:87:
                    ea:bf:cc:3d:ac:d8:74:e8:f4:a4:b0:16:e4:30:ad:
                    b9:12:5d:d4:06:b2:1d:de:7d:92:00:88:9d:9b:51:
                    b8:63:d1:35:e8:6f:83:bc:5e:f1:f8:df:8f:ec:df:
                    af:e6:a7:7e:8d:cb:ec:84:4a:1a:13:51:97:99:e4:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:A2:84:28:98:CF:95:44:47:8E:48:FE:E1:0E:35:74:2B:89:15
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:85:d0:87:72:ad:12:98:bb:81:14:a3:6d:e7:41:aa:aa:a5:
         b1:28:1d:62:87:a1:08:9f:a7:23:d5:7d:59:21:15:63:ad:72:
         07:de:32:c1:70:87:38:02:f3:ba:8e:01:9b:e7:0f:8b:ca:ef:
         9d:be:8e:e8:4a:04:43:ef:78:7f:72:1d:3d:17:c3:a6:e1:2e:
         19:35:79:1e:88:a1:7a:f7:d4:73:78:36:3c:04:33:c9:56:ff:
         73:3e:3a:de:f0:7c:b2:9f:1e:00:f6:29:a8:43:d7:11:99:1e:
         ae:61:f3:ab:81:a7:e0:52:0f:30:64:e8:5c:fb:0a:ab:66:ed:
         3b:f3:ba:81:02:2a:9f:e3:82:1b:fb:a5:bf:1f:8d:b0:85:ef:
         5a:c5:05:d2:db:db:d3:6c:b6:6f:f3:d5:9c:2e:14:1c:b3:a8:
         ec:4d:ea:69:bb:a4:42:23:43:47:4d:46:82:02:ec:af:10:da:
         7d:45:fd:b6:b1:5f:15:be:d0:2f:e4:36:f4:f9:f1:91:08:b8:
         a5:20:8c:13:1c:71:3f:42:db:f1:09:e6:1c:97:83:09:c8:36:
         9e:c8:54:6a:1b:71:80:cb:ca:81:9e:6d:45:3f:6c:ea:be:6d:
         26:4b:33:81:cb:f5:34:b1:63:e7:d2:4b:a9:c5:18:01:89:23:
         f5:32:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:24 2024 by rpki-client on console-ams.rpki-client.org