Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File:                     rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier:          N+7pKu4s2zerg1GTLDwJ4ctX7urqylreMH0YSf/8vmk=
Subject key identifier:   21:70:F9:0C:37:A0:EE:B7:4F:E1:F4:D7:AF:CC:DD:41:4F:F2:0C:B4
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer:       /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial:       018F87B6C53ADA8C45826DC2C76AFE75197B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:53 +0000
Manifest this update:     Fri 17 May 2024 18:00:53 +0000
Manifest next update:     Sat 18 May 2024 18:00:53 +0000
Files and hashes:         1: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: d5/th1hwUAwlGPKZnkD/IybXD9BVdL2SVgEYdSkuMfc=)
                          2: v17ddVt7a6cgiu-WYx4z58FWkts.roa (hash: vLqIaFMHwiGlTMbk1mNNtIxctw1K3Zdv8KgYodnJW4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c5:3a:da:8c:45:82:6d:c2:c7:6a:fe:75:19:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
        Validity
            Not Before: May 17 18:00:53 2024 GMT
            Not After : May 18 18:00:53 2024 GMT
        Subject: CN=2170f90c37a0eeb74fe1f4d7afccdd414ff20cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:71:72:ab:3f:fe:30:79:bf:e2:eb:7c:43:
                    e1:b1:64:e6:3e:92:7c:8b:dc:2f:f7:9f:61:03:02:
                    97:a2:a9:8c:fa:e6:de:4b:37:4e:4d:da:6d:ce:dd:
                    7e:72:9c:8f:9f:3b:d0:69:65:6b:c4:63:54:23:db:
                    1d:f6:41:48:0a:12:a3:3a:d5:0b:7a:bc:9b:d9:1c:
                    1f:d0:29:cc:96:3c:be:3d:8d:a4:0b:e4:4d:21:d5:
                    9f:21:05:f3:01:96:f0:6b:71:9c:a4:55:70:cd:fc:
                    06:e1:28:fb:ee:aa:14:40:87:91:5e:07:b8:eb:49:
                    de:6e:f0:ed:cf:94:00:ae:93:6f:e5:b3:77:3b:3f:
                    cf:4e:8f:67:cf:83:48:ed:bf:ee:0d:80:3e:fd:f7:
                    85:08:39:43:78:62:d3:ea:85:ac:0a:b7:86:d8:f9:
                    94:81:9e:13:5b:ee:9f:b4:7d:54:dd:97:0d:8f:ab:
                    f4:74:72:c6:9a:81:2c:ef:3b:c5:58:5b:c6:83:6f:
                    79:5d:48:cb:8c:5d:a5:e3:0f:0c:dd:b6:2c:ae:21:
                    e3:60:77:41:37:9f:83:25:c3:61:e0:11:f1:6e:25:
                    99:5f:8a:54:49:56:49:b5:34:fe:c1:9e:f3:78:0e:
                    dc:d6:68:33:98:1d:63:e4:f9:cd:33:e4:a9:48:c8:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:F9:0C:37:A0:EE:B7:4F:E1:F4:D7:AF:CC:DD:41:4F:F2:0C:B4
            X509v3 Authority Key Identifier:
                keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cc:16:17:ff:d9:dc:6d:f3:44:af:fe:e7:3b:3b:48:96:21:
         2a:bf:57:c7:d1:a8:cd:c8:1c:70:ed:05:d6:7e:4d:57:c7:b7:
         8a:3e:d7:5f:7b:9e:59:2a:ef:b8:70:1a:72:55:03:f7:f9:29:
         0f:2a:42:71:c7:3d:d9:e1:0c:40:a5:87:6f:41:2e:27:f6:1b:
         f8:68:31:71:b1:c9:74:c4:7f:f7:6f:57:57:c8:fc:75:b3:69:
         0a:a4:1d:a6:40:ad:3c:24:99:bf:a3:18:5e:d9:c4:f9:4c:a6:
         bd:86:ee:92:e2:62:fa:82:c7:e4:d0:50:ef:7f:35:49:53:db:
         01:81:42:6b:2e:f1:4b:39:b7:ec:a5:df:43:a8:67:38:32:c1:
         f6:07:b3:36:b8:db:d0:03:cb:8c:34:e9:c3:b9:7c:11:b7:14:
         8c:ca:1d:fc:50:5e:c0:55:26:62:0e:9f:29:e6:a0:20:fc:0c:
         81:e1:71:d9:8b:6c:4a:41:d6:35:89:8f:68:bc:5b:ca:6d:b2:
         45:77:36:e1:58:b7:97:37:9b:60:a2:2c:51:ed:89:4e:c9:47:
         ed:79:53:4c:af:49:a4:e7:2d:7d:ec:0c:97:8c:28:e8:3c:22:
         42:25:e1:5b:5e:ef:bc:69:e8:ff:5b:91:7a:73:cf:15:8d:d4:
         ee:1d:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:14 2024 by rpki-client on console-ams.rpki-client.org