Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File:                     mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier:          9L91fQKth6zLMzDQ1RJvcYUpWOnSm6TFcAUWIzYfyE8=
Subject key identifier:   E4:EE:E7:02:A0:13:D1:5A:18:DE:CA:80:26:A0:9E:3D:91:06:3F:72
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer:       /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial:       018F9D6281DE9CDFA6AC88310B1DC29BFD8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number:          1183
Signing time:             Tue 21 May 2024 23:00:29 +0000
Manifest this update:     Tue 21 May 2024 23:00:29 +0000
Manifest next update:     Wed 22 May 2024 23:00:29 +0000
Files and hashes:         1: bXEGo9EY24Bt7NsW4IfhHivU5dM.roa (hash: ibqOaX3BzInk7XxM/EJbzODeP8uTjE3EQ7g10OWU4Fg=)
                          2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: /oEvvzRB91A+zSIJNuJaIWrDZ+pJ9mib0Mq/FVzTjjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 17:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9d:62:81:de:9c:df:a6:ac:88:31:0b:1d:c2:9b:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
        Validity
            Not Before: May 21 23:00:29 2024 GMT
            Not After : May 22 23:00:29 2024 GMT
        Subject: CN=e4eee702a013d15a18deca8026a09e3d91063f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:7d:c4:bf:f4:e0:67:ee:99:bf:2b:f9:c1:
                    69:fd:7d:56:7e:2b:ec:6a:f5:4d:a9:85:f6:d3:c1:
                    d5:6e:ab:ab:a9:5c:3b:5a:f3:31:10:a7:e8:5c:a3:
                    13:34:22:25:ed:c5:09:d5:51:2b:72:85:56:48:4e:
                    ad:61:e8:1c:0b:0b:bb:7a:16:61:37:2d:e3:fa:58:
                    71:07:2d:75:b0:6e:2f:d4:24:70:8d:72:57:42:b2:
                    fa:44:6c:3b:a6:8b:19:27:1f:73:f0:e8:2f:41:fa:
                    e1:69:a2:47:dc:fb:34:71:ef:7b:70:e6:96:4d:29:
                    4d:ef:dc:a2:78:e9:8d:9d:43:89:d8:28:7d:b5:cf:
                    ac:08:ed:bc:f1:95:d5:c8:22:3b:04:28:86:e5:35:
                    96:c0:3e:12:ea:6e:fe:c7:6d:c6:b4:ff:b5:7d:1f:
                    ea:4f:b6:91:94:ff:ba:fb:59:e1:48:14:1b:17:72:
                    9c:1c:c5:21:26:86:89:60:d4:5f:a1:a7:75:4e:98:
                    c9:6b:e5:51:91:2f:e5:5e:4f:8a:3e:23:6b:f4:9a:
                    e1:3c:79:05:50:cc:b4:d6:ce:ff:13:17:5f:be:21:
                    d8:ec:88:52:24:93:7a:c1:09:5e:64:61:0d:c6:fe:
                    46:f0:d5:26:c1:6e:08:82:d2:a7:ab:68:16:6d:74:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:E7:02:A0:13:D1:5A:18:DE:CA:80:26:A0:9E:3D:91:06:3F:72
            X509v3 Authority Key Identifier:
                keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:05:57:ee:7c:43:33:0d:c6:07:14:de:c4:05:bf:39:0a:42:
         eb:04:c2:a4:19:4a:85:38:bc:4c:a8:a7:e2:76:49:0f:bd:f5:
         ba:5d:b1:44:9e:16:06:08:40:b9:41:9b:bd:a7:18:d1:b6:81:
         71:25:8e:b8:00:6d:01:e0:ea:04:03:8c:30:cc:39:44:3b:dc:
         ea:56:7c:2f:63:73:9a:5f:50:10:9e:c6:e2:13:10:8c:ad:7f:
         e8:f9:b2:02:5b:7d:23:da:09:cd:bb:93:9e:ca:b8:1a:f7:40:
         18:cd:76:39:04:e9:f4:c4:75:a5:54:d0:1b:39:82:fc:f3:82:
         0a:49:55:ac:f3:c3:be:28:dd:a6:2e:a1:ef:d2:86:be:6d:7b:
         8f:f4:0d:2a:9c:dc:e8:9c:f3:61:6d:b5:c9:ed:48:85:dd:d8:
         e0:86:7a:54:6a:59:d4:16:91:bd:52:83:9f:93:0a:eb:22:1e:
         40:5a:4f:8a:fa:39:f8:5d:fb:98:b3:4f:31:7a:a5:d9:fc:7f:
         ee:49:33:92:4f:aa:28:9d:40:8d:b8:4b:40:1a:b6:0c:66:af:
         54:e9:77:35:cc:8b:d9:f3:48:89:24:4e:16:12:78:73:0b:ac:
         82:20:7c:0e:b0:05:16:72:a1:be:1a:1a:14:98:b4:e5:82:d9:
         aa:2f:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:47:13 2024 by rpki-client on console-fra.rpki-client.org