Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File:                     gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier:          p2InQqDEn5GbVelAUZZpjf2pHw8jBlnG8uXShD2cUzw=
Subject key identifier:   C2:EC:A1:F4:55:B0:92:DA:AE:8E:C4:F0:34:58:9E:7E:8F:C1:E0:81
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer:       /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial:       018F87ED5C302FD66FEA9CE9262C2C3AD1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 19:00:30 +0000
Manifest this update:     Fri 17 May 2024 19:00:30 +0000
Manifest next update:     Sat 18 May 2024 19:00:30 +0000
Files and hashes:         1: OrU-ziQYoFsF0SFLj5hUR0WFYdk.roa (hash: vKvArLuRWwADD8tPRmUlOwoJpiLvqPGF1/inHuxg7/0=)
                          2: ZUyNULwW6k_EYSOqmyaJBH9CUwE.roa (hash: OBKB6M1ujqUtQeG+5bq3Oqe52d+OKl5exqEWlFHiPjc=)
                          3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: KOY7Dat0884nY0Gbqwx4RuEL9mWadEtQ2XJiyvnPaH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:5c:30:2f:d6:6f:ea:9c:e9:26:2c:2c:3a:d1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Validity
            Not Before: May 17 19:00:30 2024 GMT
            Not After : May 18 19:00:30 2024 GMT
        Subject: CN=c2eca1f455b092daae8ec4f034589e7e8fc1e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:96:01:02:c0:f3:2d:8c:51:50:eb:64:d2:
                    97:82:05:e7:87:f7:a5:61:7a:b0:18:23:50:eb:36:
                    b5:65:e9:00:38:49:ad:af:6b:a3:c1:66:74:c8:ed:
                    0d:8d:13:b1:ae:90:cd:59:d6:30:93:77:81:f1:8b:
                    a8:3f:af:f6:65:d4:fc:8b:61:fb:55:d5:b9:10:b5:
                    1f:e7:90:0a:c1:82:7d:49:ed:11:8e:c7:4f:30:6a:
                    19:0b:9a:1c:3c:21:1c:f1:d6:9e:33:f9:fe:e9:de:
                    7a:80:84:c3:a3:b2:ee:96:da:af:9b:77:b7:31:90:
                    04:06:0d:3a:aa:e9:fd:83:3c:e5:2b:df:12:18:ec:
                    bc:fe:bf:c1:46:14:75:da:98:a1:0e:57:b7:70:9c:
                    04:0b:f9:ca:58:9a:48:25:31:61:38:50:f4:a9:3d:
                    0b:76:51:a9:fa:1e:61:c5:b0:f5:79:34:c5:bf:d1:
                    a3:11:0a:f5:56:5b:8f:41:5f:11:59:b0:23:69:83:
                    7e:47:b7:a0:6a:69:99:71:85:a5:b7:f6:c9:df:97:
                    5d:7a:7c:74:15:94:47:ea:6d:d0:db:1a:7d:bd:d2:
                    a8:1d:e9:fc:ac:80:70:00:35:a6:53:dc:64:02:6b:
                    ee:27:74:ee:7a:66:ec:e6:3e:b8:3e:07:ee:a4:e3:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:A1:F4:55:B0:92:DA:AE:8E:C4:F0:34:58:9E:7E:8F:C1:E0:81
            X509v3 Authority Key Identifier:
                keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:83:0c:70:4b:4b:b7:95:81:a2:a7:ce:ec:e0:75:9a:b6:5b:
         46:e8:4a:c8:46:bd:d5:dc:d7:b3:96:d2:38:87:1a:67:98:69:
         76:27:9d:65:b7:01:be:f4:de:1a:be:0d:ea:20:b2:59:44:e8:
         bf:6d:22:f6:08:ed:7f:2a:ea:4f:58:44:aa:fd:d6:c0:f5:c8:
         b4:03:8c:97:e3:e8:a9:34:e0:99:dc:15:51:aa:fa:f3:25:d5:
         78:82:14:82:d0:22:a8:a1:6b:16:42:d5:76:d5:f0:a1:6f:69:
         54:c9:60:d2:f2:0c:d7:53:2b:9f:7c:01:c7:59:23:44:1d:b7:
         f0:75:c7:1d:df:94:fc:7b:80:ea:2d:59:98:68:c9:05:53:bd:
         c7:22:1c:0e:cf:24:ed:2a:d0:95:83:58:d2:7e:6a:a7:1b:c1:
         12:3e:6c:dd:0d:67:a5:15:90:26:3d:94:78:28:2b:68:68:c4:
         f0:b2:0e:04:94:7a:3d:6f:52:6a:7e:89:9e:6f:bd:66:97:90:
         c2:a0:dc:37:eb:5f:ce:43:4d:33:84:26:0c:45:56:d8:f5:b5:
         cc:a9:6d:b3:d8:25:b5:f8:13:12:ee:a9:e8:95:8f:94:12:8e:
         5e:dc:0f:e6:f7:01:21:58:dd:53:43:db:09:fd:c2:0d:7b:35:
         00:57:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:36 2024 by rpki-client on console-fra.rpki-client.org