Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File:                     RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier:          EkjLU4fbfPYT1aietJsdmPJ7gFQJUouGT0QdPo883Gk=
Subject key identifier:   F3:70:A7:B9:7E:95:76:70:AF:43:D2:60:CA:CF:E9:86:CB:9D:E6:22
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer:       /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial:       018F88925C783A77FA4FA83674AA34467C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:44 +0000
Manifest this update:     Fri 17 May 2024 22:00:44 +0000
Manifest next update:     Sat 18 May 2024 22:00:44 +0000
Files and hashes:         1: KXFcL43HYalSbX-PesxVKAgHl-0.roa (hash: 52MQye4EhqReIoAkom+SXe691vHyhnUo+ipW2W1C/vI=)
                          2: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: VhvX97/t3oB9a+cEe7LZO8zuAwocyhk1uozGpHMdknY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:5c:78:3a:77:fa:4f:a8:36:74:aa:34:46:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
        Validity
            Not Before: May 17 22:00:44 2024 GMT
            Not After : May 18 22:00:44 2024 GMT
        Subject: CN=f370a7b97e957670af43d260cacfe986cb9de622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:93:06:ff:7f:ea:7a:4c:77:80:8b:6a:eb:
                    cf:37:81:49:fd:2b:30:d2:05:a4:5b:32:e0:34:f2:
                    a4:05:21:18:c3:d7:0f:e9:0e:b7:c4:aa:c7:21:31:
                    68:fb:84:57:ab:6b:79:14:ad:b1:26:d5:d2:83:a5:
                    4e:69:81:2e:35:af:f2:69:5b:72:76:4f:90:d4:01:
                    e0:5b:b9:22:c9:75:3a:48:1c:5f:59:6b:60:8e:be:
                    ac:45:b8:2f:cd:8d:c9:88:bb:d4:1e:95:51:f1:bb:
                    b4:33:9a:42:7f:b1:5e:c7:e1:1d:f6:5d:51:f2:72:
                    7b:49:1a:c9:03:5e:5d:16:5b:c3:b6:2d:19:03:77:
                    e5:af:03:c0:90:4f:9f:8f:57:69:d5:48:44:53:4c:
                    7c:a1:d5:09:31:12:78:27:e4:2c:82:36:73:29:50:
                    47:88:64:7f:d6:82:76:67:87:c6:24:25:a0:ac:ce:
                    da:8e:74:ab:6c:21:02:88:57:60:45:fc:8a:7b:e0:
                    f2:f3:4b:4f:b3:92:b9:80:98:f9:d8:a7:3e:91:27:
                    c8:08:ca:49:5b:0c:57:0b:ea:02:e3:75:66:b8:6b:
                    88:06:9e:a8:a6:3d:e1:b7:b3:53:6c:f7:7e:60:58:
                    ae:42:1d:a7:7c:54:e6:3d:40:f6:98:d4:93:7f:a9:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:70:A7:B9:7E:95:76:70:AF:43:D2:60:CA:CF:E9:86:CB:9D:E6:22
            X509v3 Authority Key Identifier:
                keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:09:1e:0a:ba:6a:3c:4e:79:d3:aa:b4:57:76:32:e5:ba:
         09:a5:72:90:90:41:dd:70:10:8e:38:0f:26:9f:87:a2:28:60:
         12:d8:fb:42:dd:40:46:c5:ec:71:52:91:9b:6d:7f:db:33:16:
         c5:10:cd:90:7b:7a:c6:d7:8a:ff:91:9f:a7:f6:c0:12:e4:18:
         49:74:ab:c8:69:9b:5d:42:06:8b:b1:47:ba:d9:1d:d1:d1:b3:
         8c:2c:7f:bf:fb:2a:94:f2:03:41:3b:02:85:00:8e:85:39:e6:
         2b:b5:ac:9e:b2:4e:4d:6a:62:01:c1:77:a3:85:30:4f:47:3d:
         e4:0c:6a:67:f9:9b:65:8b:df:47:13:6b:5c:c5:3c:c5:21:2f:
         54:d0:b4:19:56:a7:f1:02:c1:5f:71:23:bb:a6:18:d5:b8:16:
         fe:a0:fb:9b:85:a3:ef:1a:f9:18:d9:7c:35:24:44:f6:87:6f:
         8e:ba:d9:aa:f7:7f:c2:ff:7e:2b:03:34:a1:79:06:b3:a4:c7:
         58:8e:a1:5e:d0:73:04:89:ba:19:9f:ef:bb:be:53:ba:57:1d:
         49:e1:d8:80:5a:36:99:55:d5:f6:a9:8a:1b:d8:c2:90:8d:1b:
         34:9c:21:52:13:88:e6:9f:20:7e:f0:18:eb:b2:72:34:50:76:
         96:b8:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:58:32 2024 by rpki-client on console-fra.rpki-client.org