Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File:                     K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier:          BypYytGz1jXpsB70Mdy9/EM4cOz00vennujjT3tAN0Q=
Subject key identifier:   F1:38:F0:22:56:B5:D4:26:0D:34:6F:5C:4D:8A:27:F0:4D:22:5F:3E
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer:       /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial:       018F874A4B67B9809EE8FCBE1404D45B8B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: sJLrqnq+u7rkvcg/X4QpkMlQ+4Q5mn9M1NtDSSGcLDY=)
                          2: g_VRa83LoTd4SDytl-M0lGU4hXA.roa (hash: 0vneRhspGyTmqlKax0QAZdBREWTx7GfjSkAz2vUItMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4b:67:b9:80:9e:e8:fc:be:14:04:d4:5b:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=f138f02256b5d4260d346f5c4d8a27f04d225f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:b1:35:f0:85:67:28:ea:9f:2f:23:9e:da:
                    68:dd:bb:d7:1e:b2:4a:93:15:48:34:51:fc:65:23:
                    d5:22:88:9b:3c:31:95:7c:7c:bb:2a:1a:fd:40:ac:
                    f7:b9:96:bf:90:c0:9f:92:2b:91:af:f8:94:8b:a5:
                    3a:55:46:df:10:e7:6c:f0:b0:c2:3d:81:1e:23:57:
                    41:06:cb:7e:02:fc:9c:80:91:4c:53:e8:6f:a4:12:
                    07:93:bd:0c:68:d3:6d:e2:81:ee:9a:2e:2c:2d:c9:
                    16:27:d5:6a:28:e8:30:75:dc:89:0c:77:58:82:58:
                    bc:41:fa:a8:49:6a:b0:a5:7a:43:c5:b6:aa:f7:ae:
                    38:73:2f:9c:a6:fa:60:4c:b4:90:56:77:20:66:48:
                    0f:95:c7:40:a2:72:a9:26:02:b3:fb:9a:0c:c9:1c:
                    99:f7:25:66:cd:1c:97:2b:c5:56:8a:98:6b:76:a6:
                    df:70:02:1c:52:9b:49:ed:ea:b4:80:5b:a2:5b:78:
                    7e:b4:eb:c9:9a:7a:cb:a9:89:bf:9d:8d:fe:8e:91:
                    35:c6:29:65:6e:75:f7:0e:28:10:1d:28:ff:99:1b:
                    d5:05:93:99:94:d7:9a:61:9c:55:79:3b:03:1a:88:
                    a1:84:d6:15:75:e1:3d:85:fd:5e:8d:de:9d:4a:92:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:38:F0:22:56:B5:D4:26:0D:34:6F:5C:4D:8A:27:F0:4D:22:5F:3E
            X509v3 Authority Key Identifier:
                keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:32:71:22:26:ff:f7:c9:97:7a:27:96:cd:6c:52:23:89:f4:
         81:06:13:21:3f:f8:a0:47:f8:49:70:c5:99:1e:f7:fc:0f:55:
         e1:1c:f3:87:13:b2:bb:03:df:9e:d7:d8:17:ef:0e:56:7f:7b:
         55:fd:7e:c0:6e:e0:95:0b:d2:7c:ae:28:83:1c:ee:a7:aa:d5:
         ed:05:1c:7b:a9:30:42:05:bb:24:a7:cd:d4:f5:c1:4e:31:66:
         83:5e:3a:14:79:17:b9:f8:48:a7:a0:d6:13:99:16:4c:fa:02:
         4a:6e:88:1c:d6:79:b1:3f:73:5d:dc:27:80:81:25:75:98:be:
         c1:1b:9c:34:c8:77:d6:3b:c8:92:e7:a3:ff:1c:c1:22:2b:b2:
         fb:dc:ba:20:d1:cf:cb:67:1c:69:5f:27:cf:09:2f:f4:03:90:
         77:8c:a5:dd:c6:b3:d0:55:2c:31:95:31:ce:41:52:a5:19:53:
         81:1f:36:25:7b:0a:ab:c5:5f:a2:56:fa:f6:08:63:eb:da:bf:
         f2:0f:4c:76:1b:e2:ac:6d:00:e0:5f:0d:0f:72:f2:b9:ce:94:
         9e:7d:0f:b0:a8:80:61:83:f9:6a:ca:ac:27:1d:62:ef:01:a0:
         db:02:24:aa:64:4d:ca:32:26:49:3c:d0:f6:47:fc:7f:ea:21:
         6d:ec:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:25 2024 by rpki-client on console-ams.rpki-client.org