Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File:                     X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier:          tBYlCARXwjWkETQip/2vUASvYiZo+J7GvYn6CuqCvcw=
Subject key identifier:   87:FB:39:5C:0C:FB:A7:C7:36:87:54:A5:FC:D7:57:DE:1E:9F:D7:D6
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer:       /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial:       018F885AE80752146245EFF1F3173E4F33BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 21:00:10 +0000
Manifest this update:     Fri 17 May 2024 21:00:10 +0000
Manifest next update:     Sat 18 May 2024 21:00:10 +0000
Files and hashes:         1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: YRzoVQCBLSXVUUXxHlcrcQdd4w0MDsKhpHHVDOdOOc4=)
                          2: _l0XUJR_w-lqpHk2m9rB85p4dCA.roa (hash: FnXsJymPwa3kqAWJHA+eiiBByW1yc3j5bsFhW30bmSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:e8:07:52:14:62:45:ef:f1:f3:17:3e:4f:33:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
        Validity
            Not Before: May 17 21:00:10 2024 GMT
            Not After : May 18 21:00:10 2024 GMT
        Subject: CN=87fb395c0cfba7c7368754a5fcd757de1e9fd7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:17:ec:c2:0f:aa:d0:f8:ce:af:d7:2c:42:
                    87:89:1f:8a:03:0b:59:b7:2e:ea:5b:06:bc:9b:b0:
                    36:62:d0:3b:4e:92:2f:d4:1e:45:01:7d:19:f3:4c:
                    09:16:ac:6c:6d:b7:d7:cc:b8:30:d7:b0:45:52:6e:
                    25:a4:58:a2:3a:b9:06:c6:a3:cf:12:19:bf:b7:29:
                    90:b1:68:34:b8:4a:83:88:e5:4d:05:32:90:2f:ac:
                    fd:2f:c6:3e:c4:f1:07:c2:b5:70:99:12:4f:ea:27:
                    d1:86:6a:0c:83:5a:df:0c:e2:2b:f4:22:d2:3a:8d:
                    64:d0:93:71:46:b1:71:b3:14:c7:4a:93:24:5e:bb:
                    07:88:8f:a4:5f:c5:63:83:9b:09:a5:61:f7:34:d8:
                    24:47:f7:58:a5:0e:7c:2c:b2:18:3c:d3:e0:d5:69:
                    1b:db:33:6e:0b:67:0c:4e:58:11:6f:26:1a:66:0b:
                    ce:5b:24:ed:df:81:57:44:62:c7:b8:cd:f7:df:82:
                    15:76:2b:ac:84:7d:92:df:1b:05:ba:ab:e2:2a:93:
                    10:2e:d3:e8:ad:d7:dc:64:13:46:c4:99:4a:27:de:
                    ce:7b:b2:00:1d:75:2b:d0:5c:80:96:7f:47:20:4b:
                    ae:02:95:9b:78:2e:5d:12:4f:b5:0e:3a:22:9a:b1:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:39:5C:0C:FB:A7:C7:36:87:54:A5:FC:D7:57:DE:1E:9F:D7:D6
            X509v3 Authority Key Identifier:
                keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8e:b5:86:04:eb:df:43:9b:b5:fa:0b:e8:9c:72:87:7d:55:
         8c:37:c4:4b:fe:00:81:2d:3f:4c:55:b2:68:a7:2b:da:51:f0:
         72:0d:01:67:c6:e1:28:b8:31:b4:93:1e:12:06:ff:52:fa:29:
         23:12:56:a5:6b:cd:e5:f3:5c:b6:9c:fa:fb:8e:cb:0b:d9:36:
         d2:14:59:9d:3f:04:91:72:78:51:57:f6:66:30:f7:80:91:23:
         0f:04:5c:53:9e:8d:a0:95:c3:f8:0e:87:ec:96:2c:9d:5a:8c:
         f6:37:d3:a3:e3:7d:1a:b7:4b:19:7f:ef:39:ee:d7:c5:d9:dd:
         4a:44:75:84:34:e4:51:96:e5:41:8d:59:74:50:34:e7:d0:4a:
         a4:68:87:d6:2c:f4:19:dd:43:bc:fa:06:dd:5d:37:ce:2f:f7:
         75:a9:f5:e2:5a:e6:03:87:08:67:fb:31:a4:4a:cb:00:c7:70:
         8a:13:ac:9d:ec:28:3c:5d:17:b8:36:c3:a9:3c:0f:d9:c5:11:
         9c:db:6c:e5:66:6c:07:e1:be:5c:55:cf:26:47:ac:e6:86:b4:
         ad:0c:14:b6:08:fa:90:77:29:cb:1a:0a:cb:bd:00:ea:c6:10:
         51:1e:ad:a4:19:52:a3:51:70:05:01:ac:e8:cb:42:cf:ad:4d:
         d5:6a:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:37 2024 by rpki-client on console-ams.rpki-client.org