Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File:                     _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier:          rNq5Ri89MAyprDbf6NRDaghjqbsdSWhExLEW5nktkOg=
Subject key identifier:   88:1C:74:0E:9E:A3:07:C1:51:F4:7F:84:8E:19:67:2E:1F:36:07:AB
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer:       /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial:       018F866CD92D6B0053DE9A2D49B289CDC5D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 12:00:31 +0000
Manifest this update:     Fri 17 May 2024 12:00:31 +0000
Manifest next update:     Sat 18 May 2024 12:00:31 +0000
Files and hashes:         1: MWXMdG44hujpCr4XXbUTxL2HaMg.roa (hash: Fs9s/7zurZSNa5jlO+oG5NZ3ox7fMNJ7kHL159q33Rg=)
                          2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: P5d+1PJvWEGFvumYuwFJqDvlMNwk0OFdDDWxxo+QmoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:d9:2d:6b:00:53:de:9a:2d:49:b2:89:cd:c5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
        Validity
            Not Before: May 17 12:00:31 2024 GMT
            Not After : May 18 12:00:31 2024 GMT
        Subject: CN=881c740e9ea307c151f47f848e19672e1f3607ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:a1:31:b2:d3:94:16:d0:68:3e:14:0a:1d:
                    e6:ab:f6:99:89:b8:32:d7:9d:c0:79:9c:f1:45:10:
                    06:62:55:84:34:46:d1:26:4e:0b:fc:65:f0:0f:4a:
                    cd:96:08:2b:22:f6:8c:2a:83:00:b0:3d:96:3d:36:
                    27:65:d5:a8:f3:2b:57:85:61:d1:33:0a:40:e1:cc:
                    42:b3:fb:97:dc:8d:ea:92:ae:38:d6:41:1c:c4:38:
                    87:8b:cb:72:88:21:31:c9:0f:51:17:54:8a:ba:24:
                    a8:88:4a:48:ce:44:de:f3:2a:38:13:c2:e0:26:bc:
                    2c:ae:bc:d7:8d:8c:07:c3:71:35:48:c0:bc:6f:62:
                    d9:c9:8f:4d:30:90:8b:46:2e:d1:66:eb:b7:26:31:
                    53:f1:87:2b:e2:a6:4c:37:28:07:dc:8d:3c:7d:a0:
                    cf:14:c6:9d:5c:7f:c5:5c:eb:40:8f:75:b3:cf:c9:
                    de:55:4d:95:ee:ff:6b:9f:45:5b:e7:b4:67:4c:b3:
                    24:e7:65:3d:80:22:d7:28:90:d3:84:a8:22:f2:c5:
                    dc:87:63:7c:bd:fd:45:04:fd:80:2e:9f:7b:49:c5:
                    9c:e9:9d:86:cf:fd:c2:78:f3:cd:09:58:11:0f:1e:
                    11:dd:da:2e:e4:98:95:3e:ab:ee:f5:a1:26:45:89:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1C:74:0E:9E:A3:07:C1:51:F4:7F:84:8E:19:67:2E:1F:36:07:AB
            X509v3 Authority Key Identifier:
                keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:ad:cf:a1:38:f5:c1:63:96:72:60:f4:de:69:85:43:a0:
         f3:25:b2:14:0d:88:8d:93:81:e0:f5:ba:ba:32:87:82:fa:42:
         8c:bd:0b:93:bd:4f:aa:6f:ab:6f:e0:d4:ca:8c:03:3a:61:00:
         f5:4b:d4:28:0f:00:fc:66:ec:64:51:d5:aa:3e:00:50:8a:72:
         a7:7b:5e:a6:2a:8a:5d:53:95:e1:63:5b:63:6e:30:db:5e:17:
         57:d2:bd:d6:28:bf:36:d3:dc:fa:1a:39:a7:d7:49:5c:cb:7e:
         72:b8:16:8f:15:65:15:91:f4:3e:5a:56:53:34:71:bd:8a:42:
         f8:f0:f8:6e:26:a1:fd:96:52:34:dc:eb:0e:57:01:eb:e4:4d:
         95:3e:93:c0:e5:31:ec:a7:b7:0f:86:bc:4b:6d:df:df:75:f7:
         f8:cc:66:ad:82:57:6a:00:93:3b:cb:9d:54:a9:99:16:70:bb:
         a4:00:94:72:02:32:4e:04:67:16:6b:56:97:9a:2c:0b:0f:07:
         ef:c9:ce:d3:f7:0d:a0:0b:c1:fc:8c:4b:72:b8:84:21:6e:84:
         f6:1b:2a:36:45:42:af:23:53:62:b3:ce:7f:46:db:9b:a3:74:
         26:87:c9:9b:cc:4e:ac:f7:0e:45:5b:8c:f3:33:e8:9b:6d:7f:
         ca:e9:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:08 2024 by rpki-client on console-fra.rpki-client.org