Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File:                     Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier:          +36Cag12mDmPk7Q4u6NyAQo3OfaF7IreDfEPWGTkKvg=
Subject key identifier:   B5:4B:A6:4F:56:84:FE:0C:50:66:04:23:EA:98:2F:BA:72:8E:BB:9A
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer:       /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial:       018F885B4E8DB554620F1D1DAD831BE9C1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number:          1186
Signing time:             Fri 17 May 2024 21:00:36 +0000
Manifest this update:     Fri 17 May 2024 21:00:36 +0000
Manifest next update:     Sat 18 May 2024 21:00:36 +0000
Files and hashes:         1: 69uTurT2ow4gjTi1On2zUvXfZmo.roa (hash: D9Iuhd5S4tNZn2g9x2RkNzFimGcVt47IAY1vvWMYr+8=)
                          2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 4SP7J532EnhQ8aqjYNFCsC9Jy+pGYJU6jPynexHAr38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:4e:8d:b5:54:62:0f:1d:1d:ad:83:1b:e9:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
        Validity
            Not Before: May 17 21:00:36 2024 GMT
            Not After : May 18 21:00:36 2024 GMT
        Subject: CN=b54ba64f5684fe0c50660423ea982fba728ebb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:ef:62:d6:cf:97:f5:f6:a0:d1:c8:29:b1:
                    60:a8:08:d5:a2:48:f8:8d:10:ce:f6:ee:63:75:70:
                    8c:0e:1e:af:69:ff:a8:6f:f4:86:4b:37:9b:7d:a7:
                    3b:f0:95:ae:44:d3:9c:f9:9a:fe:17:67:00:c0:89:
                    da:ae:6d:ee:ce:09:3c:9c:68:78:8d:82:7b:ff:41:
                    0e:97:71:1a:c2:36:8d:c1:a9:d7:d2:2b:44:86:80:
                    96:97:d7:bc:38:85:4b:f0:b2:44:0b:b1:fa:c1:9d:
                    d2:34:e9:52:4e:37:5c:1b:56:1c:10:2b:c9:f6:e4:
                    a2:c5:cf:c6:6e:ac:dd:71:77:31:7a:30:96:bd:23:
                    c3:d8:df:af:97:ca:58:f4:59:3e:5d:d4:b3:8e:c8:
                    01:b1:c2:77:7a:6e:57:32:fe:5a:e9:a3:3d:9a:1a:
                    33:26:ac:48:28:00:95:87:4f:38:9b:63:db:14:2d:
                    ac:c1:e1:fa:08:f7:4f:c3:75:4f:04:d5:68:ee:e0:
                    dc:a6:c9:e4:b8:75:f6:4f:02:0b:15:44:e2:a7:29:
                    8e:07:fb:d7:21:70:32:d1:94:17:55:91:79:41:9c:
                    d8:60:a6:b9:44:19:67:f6:cd:1e:04:10:ad:e4:9d:
                    33:0c:b3:2d:93:7b:85:a0:d8:36:57:0f:2c:39:37:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:A6:4F:56:84:FE:0C:50:66:04:23:EA:98:2F:BA:72:8E:BB:9A
            X509v3 Authority Key Identifier:
                keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:3f:7a:1d:dc:e7:a8:a7:f3:c3:64:54:17:2c:52:2c:30:
         e4:40:f7:8a:91:57:df:fd:4c:ae:b7:57:cb:f0:61:57:0c:6d:
         ea:b2:c6:31:a3:9a:3a:58:f3:d6:bb:bb:79:da:7e:cc:d1:2f:
         ff:7e:01:7f:7d:28:cb:b1:5a:94:28:1d:70:ac:d1:62:37:17:
         93:10:e8:0a:b0:53:82:39:37:3a:d3:fb:de:b4:e1:ab:fc:02:
         c7:e6:79:b5:5f:c7:da:e1:83:5b:f2:f7:5e:19:7b:96:2a:3f:
         79:67:16:21:a3:c7:fb:a2:f9:9d:4e:d2:b0:09:15:69:97:62:
         c5:a0:40:5c:48:ff:ab:52:23:15:4b:e6:c0:a4:07:a8:01:3a:
         50:66:d3:4e:d7:6d:cc:d5:7e:bf:2e:15:74:6e:ba:e7:e5:e0:
         bc:8a:3d:af:ce:a6:20:43:58:e1:45:3f:fc:0d:79:d7:82:52:
         e6:11:8e:be:57:77:ad:e8:43:91:9a:90:39:30:47:4a:ad:1c:
         9a:2c:8d:4c:a1:a9:15:81:11:6f:89:9c:7d:dc:7f:be:2b:2d:
         c7:7b:eb:05:59:c9:31:3a:3a:9e:9a:f6:0c:59:69:b7:25:61:
         f2:02:e3:14:0f:46:83:63:d9:dd:80:32:b1:73:db:ed:1d:9a:
         a9:44:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:51 2024 by rpki-client on console-fra.rpki-client.org