Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File:                     rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier:          cLnZYz0Z9dcIrbNSZ5Wi9Re/5UXN9dBO70ukLIDdmUQ=
Subject key identifier:   30:E3:A3:F3:30:8C:4C:42:FA:29:53:F2:BE:78:E4:E0:29:D8:67:7A
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer:       /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial:       018F87ED3450E8E90C0CF675CB8412937964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: 4tid_d8uupJds-2nEk67KXxKdiM.roa (hash: fwB3mHaZfVqnTof35x/TtV29sVq2Vh5ZGjusqY57QiI=)
                          2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: 0d+ssqvocKBDvsFX1YQC1HLIChFbSsuh/+vhBfagZE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:34:50:e8:e9:0c:0c:f6:75:cb:84:12:93:79:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=30e3a3f3308c4c42fa2953f2be78e4e029d8677a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:ea:5a:02:09:8c:b0:01:a2:06:ae:13:60:
                    e2:32:5d:37:18:b5:9a:22:ab:8d:f0:e9:0e:75:14:
                    88:49:0d:aa:a1:f4:27:bf:d5:11:f1:f8:ec:da:db:
                    2f:36:58:e4:8e:06:a6:1e:74:f7:be:92:84:50:f3:
                    ea:d6:13:f8:66:9f:64:d9:73:77:16:35:23:b0:48:
                    19:70:25:d8:db:ad:35:ee:8f:ca:aa:90:8c:47:8e:
                    9c:4a:f4:a7:b9:cd:71:bf:00:73:9e:5f:f9:0e:00:
                    61:c1:f7:31:cf:24:ca:5f:a0:90:6c:ae:2f:20:65:
                    15:9f:d8:1c:37:40:11:f7:f3:4b:9d:6f:ff:98:6a:
                    72:23:83:85:2d:d9:94:8f:06:a8:53:2e:75:39:a4:
                    de:fd:ec:9f:3f:c3:1e:30:1e:2a:a1:a0:3f:97:d7:
                    3a:f1:fc:ef:9c:4f:ec:c9:f4:10:ec:e4:46:2c:94:
                    08:39:9c:43:70:bc:4e:7a:cd:18:01:38:80:7f:cc:
                    8e:b4:7b:4a:d4:4e:24:f4:a6:9b:d4:0e:00:96:4f:
                    93:b8:e5:fe:1d:34:65:80:2d:86:9d:21:c8:cd:f1:
                    9b:f4:12:f6:b4:ef:51:3f:90:17:36:fa:99:07:c9:
                    6c:b3:bf:a0:44:8e:e5:e1:d5:02:0b:4a:a1:1a:bd:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:A3:F3:30:8C:4C:42:FA:29:53:F2:BE:78:E4:E0:29:D8:67:7A
            X509v3 Authority Key Identifier:
                keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:da:18:50:ec:c5:e6:fc:e0:ec:a9:2d:1c:ad:ac:45:ab:
         1d:bf:c0:e8:a1:05:74:42:e3:c2:a7:34:41:d9:aa:5d:58:78:
         80:fc:b8:dc:76:20:b5:88:eb:ac:bf:78:42:de:35:12:78:3a:
         9b:86:c0:62:1d:c5:ce:ba:12:31:64:bb:96:34:a6:8e:df:1a:
         c7:a7:4a:ba:ea:5a:77:e9:a9:ca:d4:cb:cc:52:d3:df:cc:ee:
         5c:f0:fd:bd:e2:e8:f8:20:7e:eb:3f:7b:f4:2d:19:e9:3f:52:
         38:35:75:9d:c6:06:4e:9b:93:31:52:de:8f:b3:7f:0b:47:57:
         df:fb:2e:00:17:18:ed:bb:07:89:76:34:b9:fc:d5:3a:8d:a9:
         b5:72:0e:1f:04:46:e4:0e:e1:7c:82:d9:20:c3:d7:aa:d4:1e:
         ff:cc:d8:93:3d:e9:c9:c2:80:3c:4c:48:9e:30:7d:ec:a7:3b:
         a9:4a:8e:b6:ce:64:7e:49:9b:b2:ca:91:6e:29:cb:d9:62:f4:
         ac:b4:f6:32:1e:0b:75:82:d1:5d:d6:33:67:89:5a:48:bd:a0:
         76:2e:ee:24:68:e9:0a:f0:fa:ac:d9:9c:95:12:45:90:fb:99:
         e2:62:a4:7e:24:04:e8:b1:a8:93:a1:48:f4:a3:bf:23:f3:7b:
         f7:df:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:48 2024 by rpki-client on console-fra.rpki-client.org