Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File:                     zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier:          zzvEww3M/74XOnCiMCEGhNDbh82McvM9sHf1hfR4XT4=
Subject key identifier:   B5:1F:77:51:D9:53:FD:14:42:70:33:8C:F5:28:31:3C:4A:23:EC:3D
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer:       /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial:       018F88241308FF204A5847DEAC61D58A42A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:16 +0000
Manifest this update:     Fri 17 May 2024 20:00:16 +0000
Manifest next update:     Sat 18 May 2024 20:00:16 +0000
Files and hashes:         1: EbIxv8Mbor0gp8NLTEK0333rqrs.roa (hash: JfqFfjCnf88vmQFDeePbibONPVQ+SXgQUYzFEhkodfE=)
                          2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: v+QnIwLSlq0WF3c5VUSnTDK5LgN8qOXEpEVBRPtVnic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:13:08:ff:20:4a:58:47:de:ac:61:d5:8a:42:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
        Validity
            Not Before: May 17 20:00:16 2024 GMT
            Not After : May 18 20:00:16 2024 GMT
        Subject: CN=b51f7751d953fd144270338cf528313c4a23ec3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:f8:02:cf:d2:02:3f:18:98:70:ee:36:ac:
                    e4:8a:97:83:f7:6a:dc:4b:f5:68:7f:26:06:ea:2a:
                    82:62:89:c4:43:99:03:1b:33:b2:b0:f5:fa:29:3f:
                    0d:0c:a6:f4:52:2d:65:a7:42:07:2b:07:9a:af:f9:
                    1b:70:16:a7:f8:ec:66:2d:14:70:6b:64:36:04:03:
                    e0:88:89:87:fd:8d:13:9e:b4:2d:2b:57:7c:10:e7:
                    4a:91:25:d0:7b:69:ee:71:7c:94:c4:ba:28:af:3d:
                    6f:c8:bc:9b:f7:cb:ad:90:a9:6b:80:e1:b9:ad:7a:
                    62:0f:f5:2a:0e:60:a7:41:50:98:fe:c7:ca:9e:3d:
                    49:81:a9:b1:82:3b:f2:18:39:1a:c1:6d:a2:90:44:
                    0f:5b:75:88:3c:0c:e5:7d:41:cd:c3:36:e9:6a:d6:
                    20:fc:00:ee:d1:07:84:cf:de:36:f7:61:e1:36:ad:
                    48:62:3c:06:b5:90:a5:24:af:37:f2:82:52:d7:7e:
                    cf:b9:da:ff:c9:fa:11:c2:ff:72:c3:44:f6:8a:44:
                    31:31:a0:25:4c:69:bc:fc:27:82:14:f4:12:93:a4:
                    5a:04:b3:c9:0a:42:4d:b1:10:22:79:b8:6d:3e:0f:
                    54:f9:93:81:4a:fc:42:52:93:3e:a6:c7:5d:c9:66:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:77:51:D9:53:FD:14:42:70:33:8C:F5:28:31:3C:4A:23:EC:3D
            X509v3 Authority Key Identifier:
                keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:82:a6:fc:da:b2:05:56:ef:10:76:0b:7e:65:cb:09:74:6d:
         99:34:ae:a1:e2:d0:b8:29:96:8a:fc:47:fd:3f:f0:5f:17:bd:
         2f:3f:81:55:57:47:14:bb:e7:65:db:1e:c3:c5:75:99:63:59:
         15:7f:64:32:3f:c6:a8:1f:2a:1f:99:bf:b5:4c:74:f1:08:62:
         e2:75:56:78:e6:12:74:ab:ba:04:0a:c2:54:a1:b8:fe:e1:90:
         5d:7b:d6:fe:87:0d:b4:ca:2a:c0:b5:e4:57:8b:ef:e5:d0:f3:
         61:56:32:11:73:a9:70:21:f3:78:83:92:dc:ee:4d:ea:fb:14:
         39:ca:ed:c6:19:3a:68:94:6c:e2:84:46:f2:22:e8:9c:e4:f0:
         ea:7f:1b:c8:db:8a:ff:85:40:b4:8c:4b:fa:23:0c:dd:b1:d0:
         50:59:3d:46:1c:dc:68:bd:e4:36:af:2b:ae:83:6d:6f:61:a5:
         16:b2:91:09:0c:05:78:1c:27:be:9e:92:b9:c4:76:1d:8f:cb:
         3c:0b:0b:fb:34:a8:40:63:98:71:cc:a2:c1:25:74:ab:0f:ac:
         ef:24:6a:21:6c:b8:a3:3b:29:93:2a:c4:89:6b:8c:36:cb:a4:
         f2:b6:4a:25:2c:50:8c:9e:99:81:7c:9e:1b:0b:78:30:ef:fa:
         68:38:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:24 2024 by rpki-client on console-fra.rpki-client.org