Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File:                     rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier:          UMYD+mAVc/+xnfjfdt3Of2RZO74XYdLYhcmOPe1JVRg=
Subject key identifier:   87:95:26:6C:36:9D:F9:CA:9B:64:B5:84:14:CE:4E:08:EC:98:6A:69
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer:       /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial:       018F87489BFC7470D7BCDE7F93CF11B76333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: LS_KuG8XGNos9rCKAJaEtvFggCE.roa (hash: RtEXUIvYwPUwxBcvuiVO4sGPQWPQQK/uTmp17syEQb4=)
                          2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: VCLKtA56viRFNu/OAPMkO4D6HPjFywFswPlO0mN2vnA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9b:fc:74:70:d7:bc:de:7f:93:cf:11:b7:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=8795266c369df9ca9b64b58414ce4e08ec986a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:f3:df:45:ea:3c:07:10:3d:a8:74:8b:b4:
                    a5:b5:d1:77:0a:77:b9:e7:2e:79:58:40:47:15:32:
                    05:c7:3b:a3:d1:b4:c2:b2:5b:78:94:37:20:e5:67:
                    01:19:8b:47:43:6b:09:3b:1a:d5:94:5c:e0:d8:c7:
                    3d:58:21:fa:aa:3c:8e:5c:d8:af:2a:93:2f:07:3b:
                    c4:30:e3:24:0d:e6:f5:a8:60:5b:d9:8a:ba:7f:44:
                    e8:d4:ba:bf:6a:6e:ec:84:c1:5c:86:a6:5d:90:5c:
                    f1:0d:64:cd:b3:8b:06:07:d7:f2:fc:52:ef:66:03:
                    74:c2:eb:3f:9e:63:d4:d4:bf:d0:80:11:04:2a:57:
                    a3:76:55:23:2d:2d:5f:33:ba:51:13:2f:17:e9:84:
                    f4:b9:73:ca:7d:77:ee:b7:8c:f2:5f:16:45:83:88:
                    6a:f8:a4:eb:68:77:62:90:d4:cf:74:10:e6:ce:db:
                    87:00:0d:16:5f:10:29:7a:0c:7a:a0:26:21:4b:6b:
                    8b:92:47:7f:cd:ce:b4:e7:20:58:68:09:65:a0:21:
                    bb:dd:01:a5:e7:9a:fa:3a:0b:9b:87:d0:2b:6a:94:
                    92:09:d1:a1:0c:e6:56:1e:98:69:42:ef:4c:f1:e7:
                    37:68:59:fa:d0:d4:00:c7:72:0f:3e:65:fe:5f:84:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:26:6C:36:9D:F9:CA:9B:64:B5:84:14:CE:4E:08:EC:98:6A:69
            X509v3 Authority Key Identifier:
                keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:08:e3:69:1d:3b:93:b4:5a:c3:b7:bf:27:77:ee:41:b7:41:
         94:99:69:05:5f:09:23:fe:0b:ab:7f:1b:c8:c9:60:6c:ed:36:
         a6:aa:2a:a0:a9:cd:48:9d:50:5f:10:bb:bb:0c:95:4b:3f:b8:
         62:6d:d2:f4:21:34:39:d6:f3:e8:55:b2:ff:21:99:93:2e:47:
         66:19:36:76:ab:98:bc:be:67:03:d2:08:4f:ef:b5:25:eb:af:
         47:41:ec:f1:69:05:79:0f:b4:7f:15:ce:c9:c2:be:6d:30:5f:
         e9:80:85:6c:6a:c8:af:95:f1:8d:a2:a7:b2:40:26:85:de:cb:
         a1:b0:9b:4e:2d:94:64:73:8f:c4:0b:48:0f:d9:fb:80:8c:7c:
         49:27:ce:9c:d5:55:95:d9:36:79:8e:e9:40:7a:b5:07:65:dd:
         23:18:88:6e:16:36:40:33:fe:4e:6b:c0:1a:49:34:11:05:2a:
         8a:22:30:87:af:0a:c2:3a:81:7e:f7:66:95:bc:31:48:d5:28:
         02:a0:81:86:30:a7:7d:c4:6c:28:0a:1b:46:3a:08:9e:92:93:
         72:80:cd:7b:22:c6:d5:0e:40:ed:1f:25:71:c8:36:01:35:4b:
         ba:d7:04:70:fc:49:ee:a2:b2:0c:f6:65:4d:7f:1c:cc:63:bc:
         95:08:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:05 2024 by rpki-client on console-ams.rpki-client.org