Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File:                     x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier:          Y9brZm4QONHRot+sS6vXyWUBmRLIFBDptqMPlN2Iiu4=
Subject key identifier:   79:9F:74:B9:C4:B2:A4:B1:34:CE:B5:3C:22:29:20:A0:15:23:E2:58
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer:       /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial:       018F885B37E67FA5A1BC5E910580D6E8E25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 21:00:30 +0000
Manifest this update:     Fri 17 May 2024 21:00:30 +0000
Manifest next update:     Sat 18 May 2024 21:00:30 +0000
Files and hashes:         1: QzCWfKkIlTsn7OABmpPfVZdjA08.roa (hash: 1exvlOb88X97bceqP4vdNjyHuPQ8qEkX7JXwHu4JOCE=)
                          2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: pRcbxUEwzM/nVHF+KV3/hTftBnxTX57g/KsTrOLb7MA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:37:e6:7f:a5:a1:bc:5e:91:05:80:d6:e8:e2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
        Validity
            Not Before: May 17 21:00:30 2024 GMT
            Not After : May 18 21:00:30 2024 GMT
        Subject: CN=799f74b9c4b2a4b134ceb53c222920a01523e258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:27:1d:00:e5:88:ab:5a:c2:8f:b2:c2:8d:
                    29:8b:ee:36:02:64:01:ec:4f:58:8d:a3:8a:22:16:
                    93:d3:c4:1d:fd:35:a3:51:85:78:bb:4b:ab:9a:84:
                    0e:28:1c:3b:e9:8b:df:72:6a:91:de:75:0d:cc:0c:
                    75:8c:b7:a7:2b:e6:d6:cf:2d:cc:a7:68:53:9a:40:
                    50:14:70:7d:e7:d0:5d:d1:6a:b9:c7:a1:56:a4:ba:
                    44:7a:a1:7e:16:26:27:90:18:8c:09:06:ce:29:04:
                    fb:67:e1:b9:ea:e6:bc:a9:69:05:ec:5d:bd:bb:62:
                    3f:e9:b4:e8:63:1e:4d:24:1f:f8:61:28:b1:30:23:
                    60:39:e8:5b:bb:cb:9e:2d:cb:d4:fb:5a:5e:1c:5a:
                    9e:1a:c5:d8:cb:2c:59:01:bd:71:68:68:27:fb:99:
                    7e:8d:5f:51:63:85:e7:47:e0:9d:0b:e4:ac:f8:e2:
                    2f:0f:3a:ab:31:42:96:2e:3b:9f:96:0c:ca:aa:3a:
                    d5:54:31:a3:bf:0e:2d:d0:f4:d9:e5:1a:7e:69:cb:
                    47:68:bd:a0:80:ec:7d:b8:a3:c8:e0:f4:63:b3:33:
                    27:2c:42:78:42:58:40:93:66:97:66:4d:42:fd:e8:
                    47:4c:1e:da:55:59:f4:0f:e4:77:c4:29:6f:4e:b7:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9F:74:B9:C4:B2:A4:B1:34:CE:B5:3C:22:29:20:A0:15:23:E2:58
            X509v3 Authority Key Identifier:
                keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:bd:97:13:f2:c6:4f:36:fb:70:4b:e8:44:e4:d8:84:92:
         4c:bb:a2:13:72:fb:85:68:61:aa:a0:e7:98:7d:28:b8:71:12:
         56:b2:28:62:3c:bb:4f:41:26:b0:4b:17:27:19:ac:9d:3b:68:
         28:e4:8e:f6:dd:9a:2b:ae:75:c1:24:44:5f:fd:0d:95:f4:9e:
         14:49:50:13:d0:2c:d3:22:61:f0:50:71:74:da:f0:66:d5:b8:
         6f:78:e8:79:fc:a3:24:e0:2c:1b:0a:b6:e0:65:88:ed:18:20:
         85:5c:5b:c1:b2:ff:8a:c3:4c:82:b7:56:ec:bb:29:2d:24:51:
         a7:7e:40:e3:69:4c:ed:49:96:59:bd:12:d1:c5:e6:db:aa:ed:
         31:1a:34:c6:8d:89:71:f8:28:a6:a5:87:2e:c9:ca:ad:88:c3:
         56:6f:c5:b1:a2:d7:8a:47:0f:6f:db:3d:55:7c:75:3c:5e:b0:
         d7:69:9f:12:91:15:f7:49:0c:98:26:9d:57:3c:96:8a:fd:83:
         05:45:4d:3d:4c:1b:55:34:b2:ab:20:c9:d6:53:4a:4e:b0:c6:
         5c:f0:72:66:b9:22:3e:5e:06:ff:fd:00:e7:c7:91:14:0d:58:
         c5:f7:72:83:8d:43:b2:1d:b9:c8:91:76:d4:c1:50:d3:7b:70:
         47:ad:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:05 2024 by rpki-client on console-fra.rpki-client.org