Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File:                     oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier:          FHS6FF1buE2TTIH0G8wsAVrRM1vSbp0Q2501WK+DuxU=
Subject key identifier:   87:83:BC:C5:62:40:F1:3D:C7:AD:B7:B0:6D:28:DF:E0:8A:5D:92:17
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer:       /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial:       018F874AC63AA6D272A7121F2EE288B1486E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: T7AFiULZY1v4ocogHV4_WcRhzWs.roa (hash: mHCeVdKJSBeM0aZhbicQr5voYAXOTOWlAx6vEReYFTQ=)
                          2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: IHFa+hXQBmmX2pXkvlPNw7EppPn96JvRqeYD2cKDsDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c6:3a:a6:d2:72:a7:12:1f:2e:e2:88:b1:48:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=8783bcc56240f13dc7adb7b06d28dfe08a5d9217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:8e:47:70:0b:03:a3:21:fe:f7:6a:11:a4:
                    13:dd:7a:f1:ce:99:f4:3c:71:cf:6c:4d:18:2b:1c:
                    f8:86:7a:33:43:bc:a4:bb:20:c4:48:84:d9:d9:a9:
                    66:a3:72:fc:f8:23:d4:88:34:c5:c1:d7:61:5e:0e:
                    6d:e6:8d:51:26:4a:df:d8:93:66:0a:2a:e7:a6:2b:
                    28:c8:47:ee:87:ff:ea:ad:db:d0:3d:4e:c7:7d:01:
                    34:76:37:55:a0:3f:23:2d:27:68:ce:fd:8a:d2:89:
                    86:48:df:c0:33:30:82:70:22:38:86:3c:e5:1d:10:
                    6b:5f:c5:7a:42:12:97:f5:21:8c:9a:7b:ba:ba:9c:
                    0b:55:70:be:5e:b9:f1:c2:d2:8b:b9:08:b8:b5:02:
                    c3:77:dc:c3:1a:c5:ee:86:72:09:91:3e:fb:13:c4:
                    4c:87:3d:92:22:c9:40:15:2e:22:d2:49:1b:cb:4c:
                    48:d8:01:74:59:d5:93:19:f9:14:09:da:76:63:52:
                    a3:1e:59:37:10:a9:89:49:b6:0f:2b:f4:ae:af:61:
                    5b:4d:9a:32:52:75:94:ad:e6:e6:1a:cd:c9:f7:70:
                    36:da:d9:70:62:e8:e1:7a:e8:61:8a:d1:d6:11:25:
                    96:74:99:b4:23:1e:df:3c:58:7e:49:07:27:cb:7a:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:BC:C5:62:40:F1:3D:C7:AD:B7:B0:6D:28:DF:E0:8A:5D:92:17
            X509v3 Authority Key Identifier:
                keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:2b:e4:ad:64:e8:29:57:f6:ff:ee:ae:72:78:3b:4c:fb:
         5b:ee:61:45:4b:b7:af:93:58:51:b7:cc:67:17:75:b6:bb:d9:
         7c:6b:d9:16:c5:f6:0d:64:80:05:76:76:c3:d5:74:23:f6:8b:
         20:3a:ac:91:f9:b9:77:52:f7:02:a5:5e:43:6e:18:c2:97:3c:
         69:64:fe:8f:0f:e8:0c:4d:c4:f1:a6:21:c2:ac:d9:c2:4a:ca:
         48:7c:58:b4:3d:f3:e7:9a:fe:7c:37:42:c7:ba:2e:81:91:9e:
         b9:75:37:d4:ed:2f:39:bb:42:2e:6d:28:1c:94:53:85:b2:64:
         86:2a:6d:02:dc:52:df:a8:5a:cb:80:ad:01:9a:66:d3:59:b5:
         79:17:4a:6a:fa:47:7d:03:2f:6c:3e:27:70:b2:86:ed:0e:b9:
         41:27:ad:2d:48:02:00:36:ab:2b:9f:a8:ea:65:df:23:3c:95:
         96:3d:e7:49:09:03:57:4d:3d:e7:47:13:e0:0e:48:52:31:35:
         ea:19:ab:f9:f8:4d:2f:3a:c8:7e:66:a5:ce:1a:75:40:98:96:
         3a:bd:b7:ea:22:1d:2e:20:c9:f7:c3:b0:08:ba:e9:71:7a:22:
         d7:d1:7c:f3:ab:df:80:31:9a:14:40:74:4d:bd:de:ae:46:c3:
         26:89:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:49:49 2024 by rpki-client on console-ams.rpki-client.org