Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
File:                     cNZU8uFv6IJuBK6W315csKJgOAo.mft (raw, json)
Hash identifier:          /YcWPbLVAAb8KxQdT7HmyAlwdViOmFHT+hrrlCMkIuc=
Subject key identifier:   EA:C5:C3:84:8A:8B:CF:19:7C:6B:50:E4:6A:4E:64:32:78:4A:75:5B
Authority key identifier: 70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A
Certificate issuer:       /CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
Certificate serial:       018F866CF6A0F1DF59E21B04784E06C55CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 12:00:38 +0000
Manifest this update:     Fri 17 May 2024 12:00:38 +0000
Manifest next update:     Sat 18 May 2024 12:00:38 +0000
Files and hashes:         1: cNZU8uFv6IJuBK6W315csKJgOAo.crl (hash: Cx4pWBEhf9BauDBWvDr0/l4n7NHsoGhWLyeLxs7+7Hs=)
                          2: w6tYpqDGwGBSR1hlUXJXzSkDNe0.roa (hash: SwnxlewQwLOfnv0H/n05ZOzDJbH5jQGTTYJGFxRWLTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:f6:a0:f1:df:59:e2:1b:04:78:4e:06:c5:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
        Validity
            Not Before: May 17 12:00:38 2024 GMT
            Not After : May 18 12:00:38 2024 GMT
        Subject: CN=eac5c3848a8bcf197c6b50e46a4e6432784a755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:9d:99:f4:a9:4f:44:39:da:7b:84:7b:83:
                    79:40:4c:8f:5e:1e:d4:3d:a5:f8:bf:9d:f1:9e:60:
                    a9:b6:7d:b2:12:a3:39:1b:22:5c:12:c3:23:0b:74:
                    48:1d:aa:a2:ce:06:b3:58:66:ef:ef:86:35:6a:40:
                    45:a1:82:46:eb:06:db:46:48:2b:b4:e5:4a:4e:9d:
                    38:26:cb:95:6b:52:6a:b7:e2:11:28:ec:30:d4:67:
                    f6:37:76:f0:a6:29:0d:08:94:de:17:30:0d:85:eb:
                    03:fa:86:ba:e0:4c:c0:5d:bc:24:fe:be:56:ea:e1:
                    87:58:a5:b8:eb:ae:50:40:78:d5:a3:a5:20:e3:c7:
                    36:4d:69:a4:56:96:07:fe:7d:48:96:e5:4e:e0:65:
                    16:85:ca:f3:ae:70:2d:7a:8f:4b:3f:36:f6:21:af:
                    d4:91:35:b5:ea:f6:0e:22:33:fd:a2:4f:50:3c:ce:
                    c0:59:3e:43:b6:d1:e8:64:92:9b:29:de:a2:44:d4:
                    9d:78:fd:a7:07:84:02:5e:ec:33:e8:93:07:44:47:
                    ea:19:42:39:94:2b:07:24:81:a1:dc:4c:de:b4:e4:
                    81:bf:78:c9:ea:ad:fe:ef:a7:dd:93:0b:c4:9e:dc:
                    81:8e:87:7e:35:ca:50:03:7a:09:c0:30:94:0b:79:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C5:C3:84:8A:8B:CF:19:7C:6B:50:E4:6A:4E:64:32:78:4A:75:5B
            X509v3 Authority Key Identifier:
                keyid:70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:71:c4:42:b7:c7:f9:d1:f1:c9:57:07:24:62:ff:35:cb:e7:
         81:01:e6:f1:90:60:74:87:6a:1a:38:f7:d2:3a:e8:bf:02:1a:
         b7:af:e9:73:6d:fc:0b:d7:1d:5f:7f:24:06:be:c0:16:2a:3d:
         d7:d7:ea:61:08:5d:20:03:92:5f:21:f1:9e:62:c5:42:c7:26:
         8e:cf:13:3b:08:6a:9f:75:d7:4e:23:01:5d:82:aa:c0:5c:2b:
         5c:19:5d:ed:4a:0c:ca:f4:6b:8d:3c:16:9d:bc:2a:8f:ea:bb:
         8d:54:cb:6d:ff:a1:98:61:20:3b:6e:ef:26:98:2b:9c:f7:61:
         ff:77:bb:e1:70:fd:c7:4d:08:31:cb:03:60:ec:92:5b:d3:97:
         28:ac:21:16:86:83:7c:97:fa:fd:9f:5a:e0:7a:02:f6:19:11:
         45:c7:1a:f1:d5:44:67:2c:80:17:93:63:1b:a9:27:2b:c6:08:
         f8:cb:a8:8e:cf:0e:70:31:5c:19:70:cf:31:71:bb:4b:a7:b7:
         c5:79:d7:c1:ed:d0:6b:56:ec:3c:04:d7:e4:8a:4c:db:41:de:
         e7:43:65:bf:2d:76:d0:03:c4:fd:1f:f1:e3:e3:37:4a:50:38:
         e5:c1:09:c3:a5:64:0c:bd:a4:e6:f0:15:a6:27:e5:a6:7a:2e:
         56:e1:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:40 2024 by rpki-client on console-ams.rpki-client.org