Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          CM7k67qwr7wP416tyYOaUk/0lgSa1K0FfgMrvmsJMsE=
Subject key identifier:   E4:EE:01:29:F2:00:58:C1:AF:C9:82:C1:37:6E:A1:43:CB:C5:B2:93
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       018F4A58765A73CCB8BD58FB9AA0E500720D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 20:01:02 +0000
Manifest this update:     Sun 05 May 2024 20:01:02 +0000
Manifest next update:     Mon 06 May 2024 20:01:02 +0000
Files and hashes:         1: 9quk3TI1LGHwJx2vKibwrnjeTpw.roa (hash: j/TsrRnCSuWDr9RRmswcXj7GfDQJwtQ6nX3EIHALuk0=)
                          2: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: MHDTd2GCVGIkepyz4ypwohim0n1iKzc2V2cN/3gdZXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:76:5a:73:cc:b8:bd:58:fb:9a:a0:e5:00:72:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: May  5 20:01:02 2024 GMT
            Not After : May  6 20:01:02 2024 GMT
        Subject: CN=e4ee0129f20058c1afc982c1376ea143cbc5b293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:2d:23:14:08:2b:2b:3f:69:71:9d:ce:d1:
                    22:9c:a0:6a:f8:7a:25:f9:f5:5d:a9:44:45:fe:4a:
                    01:85:ca:a8:92:7c:93:ee:5c:91:12:e8:42:1c:58:
                    83:67:34:ff:67:57:2e:5b:48:3f:99:79:c1:7c:39:
                    48:d7:0c:64:69:f0:97:14:76:92:bb:1e:04:40:4e:
                    49:5e:fc:06:b3:40:f2:9d:d6:1d:18:bc:0f:27:19:
                    a6:60:66:d3:2a:34:f5:e5:fb:0e:3c:b5:2a:08:55:
                    c0:24:df:83:0e:c9:a8:73:8a:12:4d:15:94:fe:4b:
                    3f:7d:58:1b:8b:b7:c2:35:fd:cc:0c:0d:25:c3:0a:
                    a9:3f:62:86:15:3d:77:be:48:e5:83:64:48:3d:1c:
                    1f:7c:36:80:da:4f:56:c5:97:f8:8f:78:38:99:9f:
                    ce:04:37:b3:fa:5b:4e:2c:9e:9e:ff:33:ed:95:69:
                    2f:3f:45:3b:fa:73:60:e6:dd:e3:0c:9d:85:b6:91:
                    82:4c:94:8a:e1:55:d8:bc:14:36:c6:c3:89:a6:e8:
                    ce:01:8d:d9:7e:50:90:0f:10:ba:59:6f:2c:bc:f2:
                    43:15:28:a5:11:0c:a0:16:e8:e7:49:bd:87:79:57:
                    2b:f4:41:b5:24:bb:21:98:7a:db:4e:d8:f9:89:b9:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:01:29:F2:00:58:C1:AF:C9:82:C1:37:6E:A1:43:CB:C5:B2:93
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:6a:01:3d:d2:5b:5d:37:c2:3f:04:08:1d:15:4f:bb:cc:
         3a:6f:70:c7:0e:76:58:53:f1:0a:77:81:63:9a:37:ea:30:af:
         a4:d6:60:c5:b6:65:e5:48:5e:70:0b:54:30:fc:65:98:0d:f9:
         17:04:31:42:50:14:71:a1:ce:22:d3:4e:90:9b:06:c3:d0:55:
         63:4d:1b:3d:a8:5d:9a:b0:d0:72:82:f6:43:65:6c:eb:8f:93:
         12:04:5c:df:3c:70:63:8e:25:80:04:42:b3:83:75:6a:a5:d5:
         29:7b:5d:5c:e5:c2:c9:f6:82:9c:26:e8:e2:24:43:c3:a3:39:
         1b:46:1f:d7:43:4d:e1:f2:e9:fb:ee:fe:89:f3:05:f1:79:ec:
         d5:07:f2:20:ea:09:e8:e4:7a:95:c5:c5:3b:9f:61:df:c6:e7:
         74:f2:9d:1e:e6:ed:4a:a3:bc:34:36:1b:ca:21:54:52:ed:fd:
         c3:a5:dd:a7:15:4c:11:7d:67:6a:36:40:e4:ef:fb:2b:c9:53:
         3f:7f:dd:25:a7:12:81:e9:d0:eb:8f:3f:7e:d6:8f:1f:e3:f0:
         fa:f3:d1:ae:ca:85:3c:8c:c3:0a:29:cf:fa:43:74:1c:5d:60:
         e4:84:8a:dc:1a:53:52:95:66:13:e2:62:b5:80:9c:b8:52:12:
         12:aa:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:10:46 2024 by rpki-client on console-fra.rpki-client.org