Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File:                     pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier:          vJGvDqdBA2BZ51ASs126D1V8yZyWDOuje4doj4gsSW8=
Subject key identifier:   25:CF:A1:FE:7E:17:D9:25:DE:B3:5E:EF:58:B2:5B:8C:9A:DC:B2:8E
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer:       /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial:       018F874ADE31B038A24BC50EB33BF5AC81B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:03:01 +0000
Manifest this update:     Fri 17 May 2024 16:03:01 +0000
Manifest next update:     Sat 18 May 2024 16:03:01 +0000
Files and hashes:         1: NX4CwZtOHmt9KIU-f3qE-xYf1Wo.roa (hash: Ihgg0aXvfXr83Bh+bt2O5XpJ6YGD4KQNjZ4wQQti82M=)
                          2: Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa (hash: mhXyHsXPmhWpl/VcKHp3T3YKxB8INMZB27A3b6/DaRM=)
                          3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: K4GAV8GNwhgopRI3NHoCJB/GMNlTGWswkhVGUlpsVVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:de:31:b0:38:a2:4b:c5:0e:b3:3b:f5:ac:81:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
        Validity
            Not Before: May 17 16:03:01 2024 GMT
            Not After : May 18 16:03:01 2024 GMT
        Subject: CN=25cfa1fe7e17d925deb35eef58b25b8c9adcb28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:fb:e3:91:f7:58:d7:43:11:48:3f:5a:f1:
                    d7:6c:bf:90:17:72:af:b2:23:4b:06:3e:1b:85:2a:
                    97:ba:3c:da:b6:ef:44:e4:61:b9:dd:9e:f5:57:1b:
                    54:c1:47:fb:2f:65:d8:a0:57:cb:32:44:87:d0:a1:
                    03:98:e1:9b:99:07:f0:1b:d9:e6:b9:9e:f8:26:63:
                    e8:34:ab:02:ad:09:19:33:f3:66:3e:cc:a1:ac:22:
                    bc:37:47:48:a6:25:4a:e5:1c:d0:68:fe:8a:48:25:
                    db:b0:43:b0:b0:b5:07:eb:f0:f0:6c:9c:60:cb:48:
                    e0:76:c9:b4:c9:9d:ad:a6:4e:dd:15:8c:41:7c:ff:
                    7d:53:5a:4f:62:45:9f:96:3b:5f:2f:a8:25:d0:39:
                    e5:45:0e:19:ad:92:5c:e9:39:08:df:b2:ee:04:4a:
                    cb:a2:e4:65:c2:d1:40:16:91:6b:5a:6b:91:2c:da:
                    01:70:1c:e5:d4:3e:b0:34:f8:36:04:40:13:76:90:
                    b8:75:99:b6:7f:93:5f:7f:0c:bf:c9:07:f8:93:3c:
                    3a:57:24:d5:ef:59:5f:79:1e:0a:c9:96:5f:ee:ee:
                    f0:ee:50:ee:e3:ad:55:44:7f:55:88:8a:76:19:d1:
                    87:e9:36:e6:aa:63:7b:85:09:cd:02:ed:27:69:e9:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:A1:FE:7E:17:D9:25:DE:B3:5E:EF:58:B2:5B:8C:9A:DC:B2:8E
            X509v3 Authority Key Identifier:
                keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:71:77:67:5d:ca:03:a6:8a:bd:a9:c3:75:af:ca:09:2c:
         9b:6f:f0:73:49:ec:b1:91:27:a9:db:70:c2:3b:a1:64:31:4d:
         48:7e:20:cc:1d:4e:61:b7:fe:d9:2a:ab:73:bb:de:27:04:59:
         d7:d3:9d:7c:2e:c3:4e:0b:4b:c5:7e:53:1c:95:54:be:52:04:
         75:1a:f9:b3:3c:b1:3c:d9:5a:25:04:3e:2f:f1:b2:21:0d:1c:
         e3:51:51:6e:e5:69:15:57:16:d5:83:d6:a6:81:28:7f:41:e5:
         a1:6e:5e:fc:15:b5:43:b2:43:9d:a9:75:27:c2:c2:0e:56:95:
         7b:40:2d:2b:88:e6:66:30:f1:4a:21:54:25:1e:14:f6:7b:7b:
         b2:54:70:33:27:71:b5:24:05:1a:ce:fb:a5:22:0f:42:fd:a2:
         48:b4:e6:51:8b:7d:3d:a5:fd:8e:03:0e:eb:d5:f1:af:7f:86:
         2b:6b:8c:f7:3c:a3:6d:1e:a4:1a:46:30:3d:47:15:a9:25:d9:
         51:bc:f3:11:fc:7e:fa:fe:30:4a:78:e8:67:d8:07:7b:80:2d:
         5a:9b:9d:d9:37:1f:d6:cd:33:61:f5:43:3b:d3:3e:27:ab:07:
         65:4a:aa:dc:b3:bb:da:50:24:f2:ac:b6:90:8c:a7:0c:f7:97:
         88:2c:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:37 2024 by rpki-client on console-fra.rpki-client.org