Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File:                     mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier:          lBm9slolXH+bFvs2nR2TFIaCkhegyCcaMaiQpVq4f1c=
Subject key identifier:   5E:39:3C:EC:97:BD:F9:43:60:4B:33:BA:AD:A6:87:F6:55:18:2E:D2
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer:       /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial:       018F874AAC01CEB7ACF229531C65087F13E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:48 +0000
Manifest this update:     Fri 17 May 2024 16:02:48 +0000
Manifest next update:     Sat 18 May 2024 16:02:48 +0000
Files and hashes:         1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: UqTnSWALH9a94DAMMoXjQJa6P14LM736kthoO5xhgSE=)
                          2: sk-64RvVm6CpefBvEKIW3vczuJY.roa (hash: 7W6DR0K5kk2WVZ4T+J1uEyC0hqzhcmpEUo3AjOm2gPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ac:01:ce:b7:ac:f2:29:53:1c:65:08:7f:13:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
        Validity
            Not Before: May 17 16:02:48 2024 GMT
            Not After : May 18 16:02:48 2024 GMT
        Subject: CN=5e393cec97bdf943604b33baada687f655182ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:14:e3:ca:26:85:1d:99:4c:7e:67:dd:ec:
                    d2:6a:ad:b9:bb:2a:0e:2b:86:cc:78:28:4c:d0:5f:
                    29:8d:8e:99:1b:ec:4c:43:0e:bc:de:e8:aa:05:73:
                    ff:a2:c0:22:71:1f:a4:93:77:80:6b:3c:ae:bd:72:
                    b8:6b:17:90:15:67:e1:48:ae:fe:12:b2:7a:37:1c:
                    69:e5:f1:02:22:56:4b:35:aa:ff:1c:c5:eb:1a:21:
                    c3:b1:f1:2d:80:02:71:ec:39:93:39:67:f3:3e:d5:
                    3d:31:8a:fb:48:ed:e4:45:59:b8:6c:21:59:44:b1:
                    82:3c:17:24:e3:4f:76:b2:2b:5d:d4:6d:1a:8f:f8:
                    bb:83:80:70:f4:71:14:c8:ff:49:00:4c:5f:f4:19:
                    6c:85:8c:a1:7f:d9:7a:73:df:e9:30:20:86:3a:fd:
                    a8:19:0d:32:11:b6:2a:18:d3:68:d3:69:df:02:73:
                    e9:f6:96:52:17:5d:a8:c9:5f:3c:17:55:c0:88:0b:
                    94:a9:f9:95:c5:ab:ac:58:a0:43:da:3d:ec:b3:24:
                    6b:a8:84:0d:e9:96:b5:80:20:f9:d3:4f:fb:8b:e1:
                    51:e1:20:c6:ec:df:0a:a4:de:bd:02:09:55:47:e6:
                    f1:6c:78:fd:ae:67:ec:f4:bf:e4:52:c4:9d:f2:7a:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:3C:EC:97:BD:F9:43:60:4B:33:BA:AD:A6:87:F6:55:18:2E:D2
            X509v3 Authority Key Identifier:
                keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:fb:a7:6a:4b:eb:d7:6f:82:18:3b:df:0a:55:32:83:fb:
         08:82:40:ca:8d:ed:20:04:de:a3:d1:22:8d:88:47:34:96:95:
         56:f4:b2:8c:b4:40:d6:98:a8:9d:fc:bb:4b:e2:bd:60:69:71:
         5e:c4:fa:72:15:e9:d0:39:a8:fa:fd:83:52:8e:4a:50:ad:b7:
         59:dd:0d:22:42:44:04:c7:e2:8b:f4:74:2c:95:a6:5b:ce:c5:
         a7:04:aa:07:a7:a8:55:87:04:dc:21:2d:a6:48:70:c2:79:cd:
         dd:16:1a:59:cf:a2:2c:31:4e:c0:6d:aa:e7:b6:6c:9d:5f:e1:
         0d:85:4a:84:95:e1:f0:9e:67:10:7e:7f:f7:a2:00:42:e1:3c:
         44:fe:04:53:50:c2:c6:86:f6:4b:76:0e:25:ab:90:dd:26:02:
         fa:6d:38:cd:84:d5:0f:43:0f:97:12:e1:af:4a:a7:60:62:f8:
         cd:dc:5c:8e:79:b6:1b:64:7e:4c:76:98:7c:71:d0:e3:7e:68:
         f7:5d:10:03:86:18:68:14:3f:7d:9a:29:8f:d4:aa:58:8c:8e:
         21:52:e8:c4:14:d6:79:de:b5:b9:9a:11:62:09:6e:fa:57:16:
         a9:2b:43:8e:69:fa:b8:be:e0:df:8c:cb:92:c5:d7:a5:b9:ba:
         ff:0c:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:29 2024 by rpki-client on console-ams.rpki-client.org