Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
File:                     tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json)
Hash identifier:          qtqxX+GgXbC2brrfDeN+DT3dWOgh29MbSIws6uGGy64=
Subject key identifier:   97:60:22:BD:A1:03:2A:78:93:76:C3:1A:80:BE:AC:E1:5C:6C:E4:4F
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Certificate issuer:       /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial:       018F874AAB0D20FA0B19483EB3CA177DD3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:48 +0000
Manifest this update:     Fri 17 May 2024 16:02:48 +0000
Manifest next update:     Sat 18 May 2024 16:02:48 +0000
Files and hashes:         1: ljRLFUNQbVQjBBx8QYNbnOij7Ao.roa (hash: tdZhlGYlhzJ+Ocu5nU8c7K0jWByKiIHNIevyo9VB49o=)
                          2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: 6SuYAAZkF+U4dlDz6ctx9wryZqx9CKi/v9YMljjNF+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ab:0d:20:fa:0b:19:48:3e:b3:ca:17:7d:d3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
        Validity
            Not Before: May 17 16:02:48 2024 GMT
            Not After : May 18 16:02:48 2024 GMT
        Subject: CN=976022bda1032a789376c31a80beace15c6ce44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:92:0f:22:6d:0b:8b:99:b3:ec:ec:08:e7:
                    0c:1f:9d:13:97:7d:67:fa:2c:1a:27:89:02:d8:6a:
                    3a:64:85:ee:84:76:5b:2f:a8:28:52:47:49:bb:cb:
                    1e:54:ef:04:fd:9c:8c:72:ff:4d:81:9f:fc:cc:43:
                    db:c4:6b:c3:85:a2:31:2b:21:96:b0:80:20:23:43:
                    cb:1a:c6:1f:c2:75:e9:75:64:2c:53:71:3d:f9:bd:
                    10:6c:23:cd:50:10:f6:b8:38:ce:08:3a:94:bf:60:
                    53:03:31:d3:10:cc:6a:b5:28:39:33:b9:1c:6b:f8:
                    88:a0:8c:ba:74:50:be:84:24:4b:a4:61:f3:89:47:
                    e1:0c:38:8b:00:86:3a:f6:3b:91:a0:98:46:b1:fb:
                    4b:24:dc:06:94:72:1a:d4:22:69:d4:6e:4d:db:bf:
                    18:ef:6e:39:01:41:7f:7d:c3:86:6a:5c:a6:24:f5:
                    4e:8e:1e:c5:2c:5d:da:27:e3:69:be:b4:d1:b6:08:
                    50:5b:e2:c0:3d:38:b0:14:b5:79:eb:ea:fc:e1:7f:
                    4e:7b:aa:da:10:3e:52:a1:c9:63:25:38:3c:bb:03:
                    6e:4f:d0:8b:ca:2e:59:6b:7d:55:37:01:ce:49:3f:
                    70:a1:a6:e1:d5:d4:d9:1e:df:08:04:01:c3:a6:e9:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:22:BD:A1:03:2A:78:93:76:C3:1A:80:BE:AC:E1:5C:6C:E4:4F
            X509v3 Authority Key Identifier:
                keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:df:dc:52:4c:69:b4:3b:54:4d:c9:99:92:33:28:01:cb:e7:
         92:3c:80:5c:44:a5:50:17:2d:5f:f1:12:24:c5:a4:3e:95:f7:
         58:14:7b:47:df:15:76:30:41:c0:65:b1:03:a8:8f:bd:e2:b9:
         20:c6:27:c4:d5:9c:a3:33:07:54:4f:87:0d:5d:08:e0:90:2f:
         4f:58:5e:e5:ff:a8:92:e6:a8:2f:ee:a2:e7:5f:b2:63:89:91:
         a2:98:6d:54:7c:c2:da:aa:c1:08:d0:65:95:95:5b:97:45:6e:
         5b:c2:e3:0e:a2:ee:1a:63:e3:8a:68:1b:00:36:d2:8c:3b:62:
         15:c3:53:91:07:87:f6:7a:5a:c9:08:52:0b:cb:99:75:94:88:
         b2:92:df:cd:f0:2d:0e:55:00:fb:33:e2:4d:ce:10:d0:9e:00:
         72:50:7c:59:8c:19:f7:0c:40:9d:35:73:ed:d4:55:74:8c:67:
         ca:07:d6:b1:6e:e8:f3:e0:6b:d8:60:6f:d0:44:c3:5d:1a:da:
         48:bf:da:c2:d6:3d:7a:ee:d4:2e:ea:ec:e8:50:5c:de:a5:b0:
         34:4b:44:9e:19:8e:07:27:2a:12:25:f3:06:dc:cb:82:66:18:
         83:11:7c:b3:23:1c:68:c9:b8:89:ca:04:35:47:a5:a5:62:6a:
         f5:db:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:07 2024 by rpki-client on console-fra.rpki-client.org