Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
File:                     hfyyKdh4rherMdmISIku6ivvluE.mft (raw, json)
Hash identifier:          CpJ93VDP7Q/UCqpQ95MJfY0eQOJmzuAg/W7u2TjY5qs=
Subject key identifier:   1F:6E:DB:0D:A2:67:9A:BA:B9:56:F2:34:F6:CD:3A:E0:9A:92:9F:94
Authority key identifier: 85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1
Certificate issuer:       /CN=85fcb229d878ae17ab31d98848892eea2bef96e1
Certificate serial:       018F87B6A32C276902EB191214787D1DDDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: BAS0U9mPjEuGyMwPtaYguX9Lx8M.roa (hash: OvtM+f1nrNFYqueyPV/1JlVtnnu737QmSa3TE+o+Co0=)
                          2: hfyyKdh4rherMdmISIku6ivvluE.crl (hash: xKizas9E5xUF+xM+obgusC5gLU5rPLQX8OPuTZd5fKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a3:2c:27:69:02:eb:19:12:14:78:7d:1d:dd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85fcb229d878ae17ab31d98848892eea2bef96e1
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=1f6edb0da2679abab956f234f6cd3ae09a929f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:5a:bb:0c:e7:7a:b0:5e:7d:f8:77:8b:b2:
                    70:59:fe:97:88:bd:ab:29:d9:ac:c6:90:7a:bf:4f:
                    f8:5d:01:22:ba:ab:09:21:9f:ce:ee:14:56:84:09:
                    20:3a:aa:e2:2a:5c:0b:76:70:41:f0:4b:d6:10:60:
                    d9:a8:3c:ca:ff:5e:55:12:48:87:f3:3e:44:a9:4e:
                    8f:8d:1a:80:85:1c:c2:8d:fa:b2:51:0e:ce:2b:fb:
                    81:63:b7:f8:98:67:b0:7c:b6:70:10:a1:81:ed:3e:
                    d5:f9:b3:48:cd:5d:be:e3:39:2f:66:6e:6b:96:48:
                    f0:11:5d:a6:27:b3:7c:be:ba:c9:6b:0b:39:b5:7d:
                    16:79:08:0c:1a:06:4c:d8:c0:1d:5a:65:92:25:61:
                    2c:50:31:99:36:18:ed:5e:b7:44:91:ff:a3:bb:40:
                    c8:8b:7b:e1:d7:83:1c:44:c6:04:d8:dd:0a:50:66:
                    e0:32:87:9e:fe:43:b0:8c:46:17:07:e1:95:6d:70:
                    a5:c9:34:80:30:1e:5f:24:c3:8f:5a:eb:ba:97:86:
                    6e:9d:85:8d:a3:45:f7:56:6a:ca:b6:da:f9:75:5f:
                    39:9b:72:bb:e1:dd:e5:09:02:63:99:1d:43:9b:6d:
                    58:fb:f7:64:d1:1e:eb:e6:bf:08:ff:ce:6d:f9:24:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6E:DB:0D:A2:67:9A:BA:B9:56:F2:34:F6:CD:3A:E0:9A:92:9F:94
            X509v3 Authority Key Identifier:
                keyid:85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:25:2b:92:c5:4f:88:6e:e0:c0:c8:5e:9b:68:7e:bf:a6:
         49:c3:80:e8:ab:ea:3a:8f:fe:5b:94:bd:9e:94:1c:71:31:d5:
         f8:94:fb:14:db:9c:8c:7e:1d:03:2b:4e:49:83:0a:ed:8c:77:
         b3:47:5c:6c:4c:a8:a5:06:d0:85:79:c9:8c:79:ea:30:8d:e9:
         40:b0:42:2d:6c:ca:68:7a:6c:d4:7a:9b:53:73:0e:70:55:f6:
         4e:db:f7:38:06:8e:73:eb:15:80:0f:37:35:c7:91:ee:9e:46:
         7e:db:50:61:4b:a6:2b:b6:4c:c3:72:d1:06:f0:c6:3f:f8:bf:
         e9:d0:22:8f:53:cd:a0:9a:35:70:79:2c:4d:ea:c0:aa:3f:75:
         ef:d7:b1:55:c5:06:b3:49:29:2a:fa:b1:d7:e8:ff:cb:ff:98:
         52:09:40:2d:99:4d:a8:4f:c5:5e:f0:df:31:41:87:d0:61:d9:
         e2:2f:e6:51:da:8c:d0:04:fd:01:ef:99:c1:a4:83:2f:bf:c6:
         71:b5:04:e9:3c:8a:35:ea:96:d0:26:b6:33:cb:43:e4:1c:e6:
         ff:21:b7:6b:0e:ff:10:8f:46:4b:49:2f:03:0e:77:f3:35:80:
         44:52:c2:89:db:a1:f5:fe:5a:44:11:e6:52:45:4e:a9:12:a7:
         b0:0c:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:09 2024 by rpki-client on console-ams.rpki-client.org