Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
File:                     tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json)
Hash identifier:          GM40qk7LAtdAk/bFLp7Dg8KtyZtfBcyN5XtEUE5LFnw=
Subject key identifier:   26:87:3E:AB:81:FB:2A:8B:C3:5F:22:7B:B2:C7:50:5B:F1:67:38:59
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Certificate issuer:       /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial:       018F882439E6E58CFF8BC6FE1115000CCC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: UV87Q5z65vMSycNlO55TIQ1LRp8.roa (hash: Ri2Q1mGRbzSDKTcY4vn7yRNt/LqqtMItZnGOmQgiY8M=)
                          2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: 82gvdsK5QTX/mqTxvmqMJMN7yDiF5Lc6xa2R1r1ubc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:39:e6:e5:8c:ff:8b:c6:fe:11:15:00:0c:cc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=26873eab81fb2a8bc35f227bb2c7505bf1673859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:1e:1b:b0:e9:32:94:6c:43:43:39:f8:5d:
                    66:60:5d:07:3c:44:d5:b0:b1:77:25:df:c5:cd:09:
                    53:84:68:13:04:a0:19:1b:f4:f2:8a:52:63:96:06:
                    65:47:05:5c:fa:63:91:1a:43:69:52:36:45:b6:e8:
                    90:97:90:d6:89:11:99:63:32:03:2a:5b:d0:1f:03:
                    a9:71:2d:3e:a5:69:13:50:59:05:70:39:4d:74:9b:
                    37:1b:44:1c:6f:e2:f4:f1:63:a5:51:bf:92:6b:ca:
                    50:d9:45:ee:9e:7d:50:5f:dd:b7:cd:23:49:db:84:
                    e7:0f:68:84:c5:c5:5d:11:f4:62:85:b4:73:b6:99:
                    57:6b:13:fc:b1:84:7b:07:3c:86:d7:12:ea:11:2c:
                    af:9b:70:fc:74:e6:5e:19:8f:2f:04:57:44:0c:2a:
                    fc:64:da:1c:16:ca:1c:df:e3:a8:12:0f:39:45:68:
                    30:e6:55:7d:44:c3:26:cb:e0:0f:be:3c:56:cd:e6:
                    8d:48:12:45:d8:43:c2:65:d8:be:43:ff:c5:69:c0:
                    ac:30:b0:c8:3a:79:cd:5c:d7:eb:22:bc:8a:d6:31:
                    48:f6:33:78:43:c4:e6:6a:4c:b5:30:8a:9c:b6:8d:
                    95:99:d9:8e:d4:cf:d8:a7:e7:50:3a:e8:b4:4d:c4:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:3E:AB:81:FB:2A:8B:C3:5F:22:7B:B2:C7:50:5B:F1:67:38:59
            X509v3 Authority Key Identifier:
                keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0d:1d:be:f1:fe:56:60:23:b5:43:3c:47:fb:54:ad:9d:4a:
         e9:cb:b7:c2:d9:bf:bd:62:61:73:9a:45:24:d7:04:49:9b:4f:
         38:ff:20:c7:61:de:4e:f8:07:ef:8a:a9:a6:10:40:10:e6:ca:
         dc:68:d3:6e:b4:e2:a5:8a:4f:8a:18:e0:ef:2d:0e:42:4e:e7:
         61:b0:ae:d6:6d:1f:f5:48:e7:6a:51:f9:5e:e5:2b:4c:11:0d:
         76:6b:4b:e8:fd:aa:fa:43:b3:5a:4d:e3:5e:3b:2d:02:e0:7b:
         1d:60:1e:b4:ee:2b:28:dd:50:0c:f9:31:a0:45:11:b1:da:d1:
         56:ac:a5:d0:fa:c2:b7:76:77:88:fe:3b:c2:53:59:a9:8a:08:
         82:a9:9f:3b:58:47:e3:c8:5c:d3:5b:f6:f6:6d:5e:ae:3f:8e:
         51:a8:48:6d:01:58:82:19:36:47:f1:ef:32:9a:d4:e3:97:1c:
         be:50:d2:0c:0f:b0:15:1c:6e:74:1e:34:90:88:30:64:f5:6d:
         0d:0b:a4:70:d8:66:b3:ac:95:f6:f8:ea:c3:06:af:3d:a7:6f:
         49:ce:45:e2:a9:b5:e7:58:a2:41:ac:c4:4c:b1:0a:40:9e:a6:
         7f:23:82:5b:43:3c:af:3d:ba:b0:21:ad:61:00:cc:6c:92:0b:
         cf:b3:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:27 2024 by rpki-client on console-fra.rpki-client.org