Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File:                     lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier:          di7Z2G/VG38vRbpQcmGYxi6sl9lXiyoAR5ZnT6+dazA=
Subject key identifier:   88:80:EB:04:E7:AC:A7:41:21:6C:89:98:F3:ED:E1:30:37:0F:BF:99
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer:       /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial:       018F93840A4D97FFCEF086D4CD84270988A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 01:00:55 +0000
Manifest this update:     Mon 20 May 2024 01:00:55 +0000
Manifest next update:     Tue 21 May 2024 01:00:55 +0000
Files and hashes:         1: 1n6WtssH9LMHR7CBNlKGRAwI7Oc.roa (hash: JAgsS6xyQZ82zrSC9+KNirl7dtcfgzaUBodOlnbT2RY=)
                          2: BEHSdhZw70lna7yHBqMNWBbgCro.roa (hash: 9n8XbDjEEdgQygnEK0FJrpVdV41Qh/8fo2JB7O0xXao=)
                          3: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: g9Z+5wgi93Gf1BQI0PdV7yphY6/hc9kfF568TJVtxdc=)
                          4: ogWOf9bTQe_2f3k_b04UkLXohNQ.roa (hash: bgvU2zf3tsBQoXPVvkwb23EGiwRi7NPGScTQkkgsPEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:84:0a:4d:97:ff:ce:f0:86:d4:cd:84:27:09:88:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
        Validity
            Not Before: May 20 01:00:55 2024 GMT
            Not After : May 21 01:00:55 2024 GMT
        Subject: CN=8880eb04e7aca741216c8998f3ede130370fbf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:b4:c2:18:87:32:2e:56:cb:3d:64:21:4a:
                    ec:66:ce:25:03:39:52:c3:c5:e3:5c:4b:39:da:d7:
                    95:72:82:d7:43:f3:f2:33:78:dd:88:be:44:e8:57:
                    a8:b3:b5:c5:34:9a:2a:dc:55:b9:d1:62:26:21:3e:
                    d8:67:d1:70:09:7c:9e:46:70:d9:cc:60:d9:8e:05:
                    ac:e6:0c:e8:e9:be:54:61:73:aa:d3:20:66:f5:b6:
                    70:d7:51:9f:0a:fe:67:36:20:0a:c0:b6:37:95:51:
                    b3:71:02:0d:9c:30:01:39:38:b3:0d:c8:7b:7a:87:
                    47:f4:29:2d:b8:7b:28:a7:00:f7:14:a7:d5:89:4f:
                    f2:c2:44:9b:8e:82:a5:3c:15:09:51:d3:e8:50:20:
                    64:b2:2e:f5:61:35:e6:ef:dd:00:b7:b0:3f:d6:25:
                    5b:a5:a5:99:de:56:e3:ed:9a:96:9e:53:7e:91:a4:
                    5e:da:3a:d2:68:7e:ca:bb:de:a2:95:33:a8:e2:e9:
                    da:02:40:57:28:53:5c:68:c2:c8:d7:10:c6:f2:d3:
                    f7:66:9c:b3:5e:c2:1f:3f:32:a9:a2:f4:12:c7:ca:
                    a2:53:51:75:7a:e9:2a:dd:59:f8:11:6d:6d:f9:80:
                    fc:cb:59:9c:2d:9b:7e:c3:66:58:17:74:22:7d:8d:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:EB:04:E7:AC:A7:41:21:6C:89:98:F3:ED:E1:30:37:0F:BF:99
            X509v3 Authority Key Identifier:
                keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:92:80:64:db:74:31:17:cc:04:63:dd:75:85:2f:94:dd:
         65:43:a5:e3:fd:1c:19:ee:90:7f:6a:72:e0:55:53:ff:20:b3:
         93:b3:c9:b7:cc:75:72:72:38:42:a6:dc:5e:c7:d6:71:30:a2:
         89:de:b6:02:02:62:52:a3:66:44:77:f6:ae:b0:32:71:cb:19:
         52:81:4b:81:b2:9f:39:c1:d4:81:92:64:11:77:2b:f9:d1:cd:
         21:05:69:52:93:a8:e5:fc:96:07:29:59:2a:ba:3e:24:bc:1a:
         17:53:5e:9e:cd:b9:5d:89:b4:7a:0b:d5:04:5d:69:db:32:27:
         ea:fb:06:ff:fa:2e:c9:2f:df:85:aa:27:06:0a:91:5a:ae:29:
         05:98:d5:42:90:a7:06:77:c6:6a:ff:ec:db:d6:07:91:53:f5:
         89:5d:18:d6:e0:38:49:8a:a0:88:d3:a9:7d:f5:d0:b5:fd:ba:
         8e:9b:3a:c2:73:14:71:ab:ac:c2:e6:f3:31:98:a3:9e:e1:8d:
         96:57:ba:ea:bc:4e:a4:0b:c6:56:b4:67:a4:7f:82:31:62:d1:
         55:f5:8b:63:34:da:1f:fb:24:47:63:5e:9e:45:34:bd:9a:63:
         cc:ba:52:1f:bb:3e:86:6c:2f:77:ab:bf:8b:f0:95:34:22:c6:
         d3:24:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:55:54 2024 by rpki-client on console-fra.rpki-client.org