Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File:                     cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier:          S+/CLpUzAsBfWWIiihwCdormmvES+Qz/yVMhnJtaeDo=
Subject key identifier:   97:4E:83:AA:36:C9:60:89:A1:21:D8:3A:D6:FB:E1:CE:57:75:58:B4
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer:       /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial:       018F8891F551A585202534AC9D4EA5479BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: YlSGgT2x9P7-UNtLUU2W1LplRXo.roa (hash: tGPr5PtecoHkpBQ+OlYvjsBTWBXZVGYhOuxdtFFXiTI=)
                          2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: B+Ixz6597S1US/E/NAd3PSfPZ/eb7B2lZ51J7jHEMiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f5:51:a5:85:20:25:34:ac:9d:4e:a5:47:9b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=974e83aa36c96089a121d83ad6fbe1ce577558b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:28:eb:f6:7b:37:d2:6e:a8:39:37:86:c7:
                    a1:30:37:c8:55:b8:6a:6f:31:53:a0:4b:d4:91:cc:
                    c4:fd:47:c0:44:58:96:19:7a:56:74:30:a5:f3:28:
                    6e:74:c0:0e:0a:4b:e1:d4:da:62:b8:44:a9:43:f7:
                    44:6e:58:fd:b6:7b:c9:72:87:81:9e:97:28:a8:6c:
                    03:31:23:3e:62:7e:dc:bb:72:79:fe:91:46:cd:c7:
                    9a:a4:05:a2:45:c4:4a:90:9b:12:17:a3:cf:5e:f8:
                    87:66:07:d0:41:b0:e9:5f:b3:7a:20:e8:f4:57:b1:
                    8a:83:2e:7c:ed:c5:7a:c1:f9:75:76:8f:42:e3:41:
                    7e:cd:3b:f8:9a:6e:e9:d8:18:7c:f2:c7:ed:9c:e2:
                    25:ed:d0:80:01:70:bd:ef:c5:87:c8:e0:aa:41:f1:
                    25:95:4e:6e:b0:1c:5a:58:b4:db:72:72:9a:bd:83:
                    e5:6b:6e:cd:b6:c0:56:f2:eb:5c:ee:5b:ec:cb:fb:
                    12:75:98:2d:8f:fb:08:e4:3c:6d:03:38:dc:d7:81:
                    cb:f6:b9:9e:36:da:52:e2:5d:1a:fa:25:6e:07:17:
                    67:9f:f1:ba:3a:1a:0d:a6:25:9b:b1:52:62:d3:99:
                    ab:97:10:7a:4c:08:e3:9c:9e:9a:6d:d2:cf:3c:f1:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4E:83:AA:36:C9:60:89:A1:21:D8:3A:D6:FB:E1:CE:57:75:58:B4
            X509v3 Authority Key Identifier:
                keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:bd:0a:15:63:4c:c3:ae:b7:cb:14:fd:fe:0f:3d:42:13:
         2b:18:93:0e:f5:78:aa:a6:2c:87:6e:4d:45:6b:1b:23:85:40:
         1d:f2:02:98:64:55:e2:da:3b:c9:05:b3:0d:9d:71:b0:62:d9:
         52:77:89:99:c4:71:c8:22:99:55:b7:6f:16:74:50:43:4f:a8:
         79:da:2f:f3:2f:92:8a:b2:44:99:5b:87:8c:2b:f7:4d:b3:7a:
         31:7b:0f:0c:bb:a9:03:91:64:41:ed:e9:74:f6:3f:4e:5a:42:
         4f:45:64:b2:01:ee:ec:7e:ae:02:3f:17:25:83:25:a1:38:5d:
         1e:67:51:da:07:8f:36:cb:c0:a2:56:41:81:1c:03:47:21:3a:
         99:1f:01:2a:1e:7c:a0:4f:8a:fd:48:93:c6:df:7f:17:38:d4:
         e6:e6:27:a2:0e:32:fa:04:c2:1c:8f:28:8d:bd:17:9a:78:53:
         28:d6:1e:ac:33:a0:c6:e2:52:9f:db:86:46:92:db:b2:dc:42:
         26:66:df:e1:8a:57:fe:9d:8b:99:26:bd:9f:0c:d0:44:e5:69:
         d4:d7:37:3c:fb:f3:b5:ed:da:73:39:4e:8f:6a:45:1a:dd:59:
         a8:5e:0c:2f:6f:ca:5a:af:03:d2:14:0d:ff:66:9a:c7:38:35:
         05:2a:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:51:53 2024 by rpki-client on console-ams.rpki-client.org