Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File:                     cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier:          LzDkZ2NLnA5AP+bHivt/PUNICv463dtF1QL5g1hUwxw=
Subject key identifier:   E6:E0:13:4A:EF:D1:78:9B:5C:FE:07:1B:22:73:8F:97:CA:30:94:9F
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer:       /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial:       018F8748E2A197E46B9FF2FD9D5FB6B36816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:51 +0000
Manifest this update:     Fri 17 May 2024 16:00:51 +0000
Manifest next update:     Sat 18 May 2024 16:00:51 +0000
Files and hashes:         1: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: peZv3rKhaqIcbotEmep9li+4w/yPQsT4Uol3G4VV7so=)
                          2: dHT8-R1bz3eDGWgJ6Ac9zd36ww8.roa (hash: vIVB7GGBVgoJYK+8emfj0bVpN02LwuqX4kqWDiRFaBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e2:a1:97:e4:6b:9f:f2:fd:9d:5f:b6:b3:68:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
        Validity
            Not Before: May 17 16:00:51 2024 GMT
            Not After : May 18 16:00:51 2024 GMT
        Subject: CN=e6e0134aefd1789b5cfe071b22738f97ca30949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:0d:b5:60:df:15:bf:27:0f:ec:88:81:71:
                    d0:48:c2:bd:98:42:2d:1a:81:d7:20:33:1c:99:55:
                    d1:3c:f6:cd:9a:d1:95:97:8d:6c:ad:34:fa:c8:e3:
                    72:46:43:f2:2d:f0:1c:85:c6:fd:66:a0:04:9d:db:
                    00:f6:86:06:4c:f2:3d:b9:db:80:ec:7c:43:c0:fc:
                    27:f8:22:00:06:66:f9:cc:52:45:08:1c:f6:57:eb:
                    d6:d4:24:61:9a:29:3d:80:53:e1:5a:ba:42:f8:06:
                    fb:a7:48:d1:cd:48:03:16:fe:87:b3:6f:6a:2d:23:
                    7e:91:df:a7:cf:b4:a2:1e:91:df:b2:95:2d:5a:0b:
                    25:c2:ea:60:0e:85:34:8c:06:81:34:fa:7f:53:23:
                    58:2f:c1:fa:78:4f:f7:b0:85:f1:f7:2a:cd:21:2c:
                    8b:0e:a6:86:81:4e:3e:7c:45:9c:3a:90:64:05:55:
                    96:1b:4d:9f:ec:ab:7d:6a:c5:67:ab:10:c1:6d:ee:
                    ed:84:68:1e:1f:93:27:eb:24:3e:24:3e:d0:85:bd:
                    19:01:bf:b2:49:ea:55:f1:38:ab:56:f2:d4:ff:dc:
                    f7:07:d7:f5:50:c8:14:14:fb:b8:bd:21:ea:7f:be:
                    fc:5a:51:09:e6:71:dd:44:af:10:d5:fa:e7:df:9f:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:13:4A:EF:D1:78:9B:5C:FE:07:1B:22:73:8F:97:CA:30:94:9F
            X509v3 Authority Key Identifier:
                keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:13:c1:6e:48:1f:a6:2b:5c:b3:e8:67:65:18:94:ec:1f:
         cb:93:54:40:1a:f5:b8:eb:b0:7d:d8:7c:7a:73:dd:b3:02:8c:
         6a:ae:0c:88:dc:9b:20:4c:d4:95:9c:14:36:f2:01:ec:06:21:
         ab:c1:8d:18:05:5d:c1:35:98:40:c4:83:12:e4:c8:cf:47:9d:
         bd:1f:40:86:3e:e5:63:36:70:d9:c5:0e:00:14:17:89:45:ee:
         de:20:1f:44:2c:61:83:fa:8d:a2:00:3d:8f:54:8e:17:18:02:
         65:08:36:f8:31:6b:80:de:f5:e0:d6:b6:58:0f:20:40:09:ef:
         44:d3:60:86:b2:58:bd:59:71:2e:89:b7:4f:85:cf:09:85:55:
         eb:6e:40:a7:b2:4b:d7:2f:a6:dc:c1:f0:c3:7f:19:6e:56:3e:
         b0:2e:56:ba:40:e6:fe:0e:ca:00:2a:d7:88:55:3e:6e:02:6c:
         40:3e:b1:03:a8:47:93:ad:a2:19:44:ab:c8:86:7d:d8:81:48:
         d5:12:09:a0:f1:09:d3:b1:43:a4:73:c8:b2:4e:61:a4:2c:42:
         6a:80:40:c9:98:e3:64:de:ef:ef:2b:24:a8:ea:6a:c2:45:37:
         54:ea:1e:7d:8d:a1:99:8a:d3:ee:a0:d9:30:5a:2d:86:ad:6a:
         e8:a7:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:32 2024 by rpki-client on console-ams.rpki-client.org