Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File:                     v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier:          vOeOpcjeUuqseEr+Fb7dd53RejLQCgBsGjHjVkfxTvk=
Subject key identifier:   69:F4:50:C6:87:49:8F:AA:A7:25:9A:C7:CA:14:15:64:47:36:DA:4C
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer:       /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial:       018F874B4BCAA877E8426F7752128F2392DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:29 +0000
Manifest this update:     Fri 17 May 2024 16:03:29 +0000
Manifest next update:     Sat 18 May 2024 16:03:29 +0000
Files and hashes:         1: biD68GzpmRQvSDB6URmS3KDjIKs.roa (hash: zwP0ssoIo+JoOP6v78VKowdNr2iTxzZUiT9+/32t2X4=)
                          2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: d74T9jNugTjzoHwMWL8y3Z2vTIeH9H57MosQvm6V4EY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:4b:ca:a8:77:e8:42:6f:77:52:12:8f:23:92:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
        Validity
            Not Before: May 17 16:03:29 2024 GMT
            Not After : May 18 16:03:29 2024 GMT
        Subject: CN=69f450c687498faaa7259ac7ca1415644736da4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:b4:9a:53:e2:2d:0d:46:07:16:e4:83:26:
                    4e:ff:94:9a:b2:74:79:31:a1:a7:02:24:d4:59:7f:
                    4e:14:3f:70:b2:eb:a8:c4:25:89:14:ef:6b:21:98:
                    77:0d:4c:c6:6e:5e:fd:de:4c:6f:05:d1:5d:20:c5:
                    da:fb:68:12:e4:41:86:21:9b:f7:bc:ce:f1:72:ba:
                    f6:7c:96:10:57:9a:c3:d2:ec:e6:ca:d5:1f:97:58:
                    b6:e4:d7:de:ea:dd:e4:70:fe:69:33:a0:10:d7:5e:
                    be:0f:ce:3b:b8:65:f4:98:1a:97:3b:44:bd:18:29:
                    58:8d:da:c9:28:60:b5:b7:f1:07:96:03:e8:63:7e:
                    8b:3a:ad:e7:0e:92:c3:0d:05:b9:5d:74:ab:c9:e0:
                    90:48:84:ed:91:22:0d:4c:59:6b:7a:fc:c1:ec:85:
                    55:9d:ca:af:e6:10:3d:bb:78:cd:7f:b8:e7:95:27:
                    bb:90:43:41:6b:09:6d:f6:3c:d0:0b:52:18:3d:7c:
                    f4:a1:8f:f4:7d:61:c8:3a:26:f7:71:9a:6d:b5:16:
                    79:bd:c9:41:3a:c6:4c:eb:95:76:5c:55:02:ed:b6:
                    e6:fa:11:73:6a:15:b2:b8:93:9f:e7:3d:7e:4f:04:
                    9b:54:3e:89:be:50:ea:86:2e:ff:9c:9f:7c:5c:74:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:50:C6:87:49:8F:AA:A7:25:9A:C7:CA:14:15:64:47:36:DA:4C
            X509v3 Authority Key Identifier:
                keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:cf:ab:99:ce:92:fa:1e:7f:3a:82:63:45:07:ee:08:16:
         d7:fe:52:c5:46:d3:f4:56:bf:42:4d:f8:3d:34:8c:04:d3:24:
         08:5e:69:00:ac:0c:0c:80:c8:73:44:65:1e:22:ef:b0:78:5c:
         99:18:da:4b:d5:d1:86:ad:0c:7a:27:fb:00:59:16:e7:c0:f7:
         b6:8f:a1:8d:3c:19:4b:2d:fd:ad:97:4e:b9:48:39:96:ae:21:
         2a:5c:77:34:87:8d:1a:89:ef:aa:76:75:f3:4a:47:69:8b:fb:
         f9:77:f9:fb:5c:db:29:65:ef:95:f3:25:b9:84:88:be:a5:bd:
         50:2c:09:fc:fc:a3:89:53:0d:ed:41:23:23:11:f1:3e:b2:a3:
         2b:e9:49:0d:9f:91:97:b9:ba:04:bb:3a:aa:03:6c:f3:b4:4d:
         f5:ff:47:b8:87:31:06:c7:e2:f1:ab:c7:91:cc:97:19:1c:fc:
         57:1a:57:43:b4:42:e1:eb:92:af:9b:17:7f:fe:7f:2b:3c:cd:
         06:32:47:2a:e4:f4:ec:be:85:85:d2:40:b1:7c:0f:51:73:f2:
         67:a9:db:bf:c4:17:ff:b3:a1:c2:00:2c:f7:5f:7a:2e:5d:44:
         e6:3e:94:a5:2f:4a:98:ad:c4:ed:7a:d6:8c:6a:8b:50:5a:12:
         07:d1:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:52 2024 by rpki-client on console-fra.rpki-client.org