Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File:                     Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier:          PEe1JwvTj/wRq/NeMKaFOqlN7eOYLdH2lz/+AdhUs28=
Subject key identifier:   70:18:07:02:E9:51:AD:8B:3B:64:F8:D6:FA:F6:37:53:F0:2A:1D:13
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer:       /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial:       018F836D74CE82633846218A8ECBD6F79DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number:          1176
Signing time:             Thu 16 May 2024 22:02:19 +0000
Manifest this update:     Thu 16 May 2024 22:02:19 +0000
Manifest next update:     Fri 17 May 2024 22:02:19 +0000
Files and hashes:         1: Czi28_UqSlX3DD8bfCsTEyQJNAY.roa (hash: U3usmIUZJ5/S09+4kHHMMVDGMYSxW4/mpuj56A3xGKE=)
                          2: Q2LvLIGmJKtctOAlQIuyCV1_KNQ.roa (hash: IR5VEnnRTWrl0Dc4nezJsU2FEwjyh+6Rz7X9BuCOPb4=)
                          3: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: gyy6H7kvNIbyiHSA2LBKUvU47SgLiHIFvGmg5orfomE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:74:ce:82:63:38:46:21:8a:8e:cb:d6:f7:9d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
        Validity
            Not Before: May 16 22:02:19 2024 GMT
            Not After : May 17 22:02:19 2024 GMT
        Subject: CN=70180702e951ad8b3b64f8d6faf63753f02a1d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:4e:e4:10:11:3e:73:ba:08:1e:49:c7:df:
                    5a:a0:cf:2a:a6:81:a2:a0:bc:f2:f2:96:ee:50:cc:
                    da:2b:ae:92:ca:9c:1c:6c:05:32:9d:f4:4f:c7:ff:
                    f7:e0:66:43:8f:ac:53:4e:ce:64:7b:07:00:d0:67:
                    0d:43:2b:72:36:2a:b8:ef:88:a2:ab:4d:06:1c:ba:
                    6d:c9:07:61:2a:62:26:5b:3b:c3:c0:65:7b:51:41:
                    a1:7c:80:2d:e3:88:8d:ea:78:98:59:f4:94:cf:f0:
                    e2:0a:ee:ae:2e:bf:14:0f:33:d8:77:a2:0b:3b:01:
                    6b:84:60:f1:f1:58:91:be:ac:3d:2e:98:8e:d2:08:
                    2c:1f:1f:2c:71:16:78:cc:d1:96:e1:ad:1b:99:da:
                    27:f0:33:5f:a0:17:28:39:f7:68:92:4c:f9:dd:8d:
                    1f:c6:e8:41:58:7e:64:a5:f7:df:f4:d6:66:7a:1f:
                    5b:d2:6a:5a:ca:58:fe:cc:49:2e:5d:3b:5e:fc:01:
                    1b:ff:82:44:c4:89:2c:a6:83:7e:5f:e2:28:48:c9:
                    0e:43:74:f4:dd:86:c2:39:21:85:45:01:bc:2e:85:
                    e7:4a:da:c0:30:15:b6:82:fb:46:06:a7:0d:b2:f1:
                    4d:e0:60:71:08:8f:c5:77:f8:e7:1d:2f:11:62:c4:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:18:07:02:E9:51:AD:8B:3B:64:F8:D6:FA:F6:37:53:F0:2A:1D:13
            X509v3 Authority Key Identifier:
                keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:69:11:39:6a:a5:f8:e6:b9:a0:97:f7:95:08:6e:ba:e3:00:
         31:31:e7:ec:33:8d:4f:54:53:08:62:7d:de:b9:f5:e4:31:f9:
         c5:7a:95:16:d6:c5:47:ad:62:f5:90:13:d0:90:84:1b:ac:62:
         bc:f1:24:1e:6d:1c:01:c1:e3:65:a1:12:b3:1f:8e:85:19:19:
         87:5d:c0:90:29:38:8a:47:a4:64:e9:25:1f:cf:58:15:25:f2:
         67:6b:8d:9e:a2:43:87:94:42:bc:2e:a0:b9:ed:7f:23:d4:d5:
         50:0c:54:ca:bd:5c:a4:9f:3e:52:31:02:1b:d0:b8:ef:ab:f5:
         0d:2b:eb:09:a9:58:f5:78:4a:38:b9:8f:eb:05:3a:28:89:b6:
         c3:c2:ad:86:e2:30:93:3f:d4:c8:22:33:38:03:d4:d3:68:be:
         74:a7:03:71:c4:bf:6b:2a:91:3d:ae:15:35:ef:f4:9e:78:c1:
         84:96:11:8f:4e:dc:74:66:f6:84:2f:c3:81:25:54:57:6f:9b:
         f3:68:3a:30:4e:de:fb:5a:74:21:0b:f1:00:e0:93:25:63:77:
         a8:f5:94:d9:78:16:0d:01:a5:a8:86:a2:e6:ba:2d:f1:bf:e7:
         b5:bb:78:87:57:46:2e:32:e9:f1:c3:d9:e5:96:3f:1e:17:18:
         5d:25:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:52:24 2024 by rpki-client on console-ams.rpki-client.org