Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File:                     n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier:          4toDOCujJqyaTfuKt9HY3jgOta3X+4qlUe7HhG8jFto=
Subject key identifier:   10:4A:14:A1:63:39:89:C8:55:B5:59:97:13:E6:E8:E1:A6:EF:B6:4F
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer:       /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial:       018F8749589835EC446F90F92B41420CECDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: 90U86PlrkiLbSKbASJqXAaGGlYBZo0LWEKmmCop+lY4=)
                          2: z1M_MRMlo5t9BTFM_jByhLtd-Cw.roa (hash: 2fDb79hyYJGc8WUw79fioMBL2NpcgDjZb1O1mLFn8+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:58:98:35:ec:44:6f:90:f9:2b:41:42:0c:ec:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=104a14a1633989c855b5599713e6e8e1a6efb64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:a9:48:65:87:78:1d:4a:29:45:17:a4:37:
                    8e:f4:16:33:df:78:9e:9e:f1:0a:49:53:be:51:18:
                    fc:c3:56:6e:36:f8:8d:49:8c:e1:ba:c1:0a:28:d8:
                    3b:9f:39:54:ed:3d:fc:cc:27:fb:0d:b1:f4:1b:b2:
                    71:a0:e1:ec:41:ec:f5:a8:dc:7a:73:84:99:12:90:
                    ac:83:a8:10:a8:e0:25:1a:43:17:3f:01:54:99:a7:
                    3e:cb:12:93:63:f6:19:30:06:e8:1f:e0:49:0d:34:
                    cb:9e:56:96:24:2f:7b:42:33:ca:ff:ee:da:32:e9:
                    a6:34:f0:fb:c0:00:5e:a6:7c:5a:7a:6e:82:8b:68:
                    f3:a3:7a:ad:83:10:99:9b:33:7b:3f:78:53:4e:9b:
                    f6:d3:57:ab:6d:7d:4c:99:20:6d:af:07:47:a9:6f:
                    7f:47:3a:ce:04:d4:cd:f6:19:24:a7:c5:38:74:b0:
                    33:a7:a8:2f:9a:8c:2e:2a:63:f7:d1:db:f4:39:50:
                    0d:17:5a:c3:ae:0c:f6:c1:ff:87:ac:98:0b:a8:70:
                    3a:64:8e:bd:cc:e2:eb:3b:94:1e:69:75:8a:a1:f0:
                    67:75:e0:e2:ca:4f:8b:1f:91:45:e2:9d:8d:83:6f:
                    3f:d6:0d:94:c3:62:eb:fb:41:95:3b:35:2b:98:80:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:14:A1:63:39:89:C8:55:B5:59:97:13:E6:E8:E1:A6:EF:B6:4F
            X509v3 Authority Key Identifier:
                keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:df:29:4d:5e:7a:5d:e1:cc:b3:28:26:0c:b9:1d:c0:d9:
         13:e0:26:3a:ca:38:fa:6e:69:1b:e0:f1:fa:04:a9:e4:29:05:
         4b:03:42:2d:50:98:50:45:d0:13:10:18:9b:7d:a1:f4:12:93:
         d5:33:22:53:d9:8a:a4:97:48:d9:a1:b7:e8:f6:fd:ff:54:44:
         e6:c8:94:f6:fd:40:2c:87:dc:f3:a7:7f:08:89:f7:ad:60:8c:
         a7:f7:bb:af:5a:d7:e2:1c:22:8a:81:4a:1e:8b:d5:e7:d4:60:
         9b:e0:10:e4:d8:73:3b:f2:9e:b9:67:85:7e:29:18:b6:4f:2b:
         28:d2:77:48:0b:57:bb:d2:62:5a:bd:20:14:f7:13:27:d1:6c:
         d2:99:eb:d9:63:d6:fa:23:95:b5:f6:55:5f:4e:9e:83:2a:6e:
         47:e7:18:9c:18:b8:6f:58:e5:a6:88:c3:d1:ac:04:ce:4b:b5:
         9e:be:16:64:8d:bc:7a:5c:4b:87:e4:ad:bc:0c:46:64:44:d4:
         66:ff:ad:e3:02:77:1b:9b:00:5a:a6:62:a7:20:5b:f3:52:ee:
         7e:b2:a3:b7:15:5e:87:b9:c5:9d:b4:6d:6a:28:62:e8:04:de:
         6c:01:12:0f:05:d6:20:89:f7:b0:1a:ef:44:82:a3:70:89:7e:
         5c:91:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:31 2024 by rpki-client on console-ams.rpki-client.org