Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File:                     nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier:          Bbb3cwc6I2MP6DqzjQyhdXycKbXNPtG+z5ExYm4ON44=
Subject key identifier:   B2:87:10:D3:64:DB:D2:CE:70:4C:87:53:80:97:69:08:B6:91:F8:7B
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer:       /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial:       018F874AFE637509983069059C2A89FB7ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:03:09 +0000
Manifest this update:     Fri 17 May 2024 16:03:09 +0000
Manifest next update:     Sat 18 May 2024 16:03:09 +0000
Files and hashes:         1: mxli_m-Z8XYc0U1D8BPUdOB3au4.roa (hash: bVmYC04Aa44GtGL5MErW2NcK0TccOTAShaONSwrwZJ0=)
                          2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: 0ix/MEXrE7oeEVvPEED8uMHtcELKdDzwTIS01Tbm2YU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fe:63:75:09:98:30:69:05:9c:2a:89:fb:7e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
        Validity
            Not Before: May 17 16:03:09 2024 GMT
            Not After : May 18 16:03:09 2024 GMT
        Subject: CN=b28710d364dbd2ce704c875380976908b691f87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:2e:c7:9e:93:19:05:20:32:f3:c4:0e:a6:
                    19:d7:c2:7b:e5:10:03:83:1b:6f:ac:aa:d3:9b:24:
                    0f:55:da:af:95:0d:54:f9:0a:c0:c9:7d:c0:9e:60:
                    c5:d0:79:2f:65:b3:65:06:4c:16:8f:47:d3:18:70:
                    7d:92:2c:ae:6a:55:fe:0f:1e:96:c5:ad:49:9e:31:
                    da:eb:a9:26:f6:a0:67:d7:2a:a6:c7:71:51:1f:26:
                    4c:ca:db:18:97:ee:91:cc:ec:20:83:b5:f7:ab:b8:
                    0c:b3:1a:76:6c:d7:5a:69:3b:84:0b:08:f2:44:95:
                    17:1a:bc:3a:99:23:d3:cb:53:53:b2:e0:a4:e9:c7:
                    90:17:40:8f:7d:45:14:fc:d2:31:76:5b:9b:30:25:
                    f4:de:bc:1b:0b:48:50:fe:ba:7d:12:38:ad:a9:69:
                    64:f1:96:b3:13:96:36:ff:81:b0:7a:23:a4:d9:c0:
                    36:d1:95:43:fd:bb:79:6c:a1:c6:28:2a:c7:58:f6:
                    14:dd:a8:88:1a:98:80:9b:7c:3d:fd:06:06:72:98:
                    50:31:ad:44:de:91:3e:b2:fe:63:c0:57:1d:14:7d:
                    12:ad:db:87:e4:e2:7c:3b:20:ae:0d:5d:7b:eb:02:
                    39:a4:d6:f4:33:30:82:cf:f3:78:35:60:57:74:d1:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:10:D3:64:DB:D2:CE:70:4C:87:53:80:97:69:08:B6:91:F8:7B
            X509v3 Authority Key Identifier:
                keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:1f:6c:93:b5:9a:7b:ff:b2:97:e6:55:4a:6d:61:a1:d7:
         0a:21:f7:f0:a6:25:96:ee:b1:d0:41:29:3f:2e:02:32:c9:d0:
         76:fa:23:11:9c:4a:b9:4a:e7:51:1a:0c:47:c8:d5:1b:9e:81:
         67:12:66:2c:04:54:34:15:98:9b:78:c6:c6:e8:7d:4b:6d:86:
         86:39:46:38:db:5f:fc:28:54:73:3f:3c:5d:2b:37:3b:d4:ee:
         b9:29:d2:0a:09:ba:29:1b:66:75:33:2e:e4:2f:84:5a:7d:2a:
         f5:57:25:3e:6d:2f:1b:62:a7:2d:af:08:d0:68:36:c0:d4:05:
         8a:60:fe:23:89:df:dc:25:44:e6:5b:c3:de:da:5b:74:3e:66:
         bf:4d:ec:ef:92:e7:4e:75:ed:69:93:1b:7f:e1:4a:74:d2:51:
         97:26:93:de:10:11:b9:c2:70:fa:39:01:9a:19:38:86:c8:02:
         eb:0a:f5:b0:dc:85:8c:5e:45:b1:af:20:e1:f4:61:ef:c6:30:
         bb:39:d9:24:63:95:4f:f1:50:0b:f2:55:1a:b4:7d:31:ba:2b:
         e0:2a:4a:10:c7:05:a1:92:ef:19:e8:5e:2a:9a:14:11:56:93:
         47:cb:94:14:18:69:23:34:02:f7:b8:8c:b2:4e:58:94:86:79:
         eb:f2:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:23 2024 by rpki-client on console-ams.rpki-client.org