Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          zU52Uiv1PF9UkCc3yr0SpvFwh9bR+arnbjheyrLGbqc=
Subject key identifier:   D7:DF:AF:5C:87:BC:99:60:92:BE:A3:C6:84:15:62:6D:CC:E6:05:52
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       018F87B68EA1A6AF8BB00F9C4DBABBCE0C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: 42d6itdweYbOeboduZZUhteIWM4.roa (hash: Sr+NB3zV1RK5KkJitj4ASpmW70qrWRx7kDP4RJEAbH0=)
                          2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: xur3GoTVHVaMW3wcXn2sduI7YBp8gnj6HTXJmSpMTVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8e:a1:a6:af:8b:b0:0f:9c:4d:ba:bb:ce:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=d7dfaf5c87bc996092bea3c68415626dcce60552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:4c:08:06:c9:57:75:96:de:cd:b3:3e:aa:
                    f8:be:d1:2b:24:48:bf:46:f8:d5:58:1f:1c:92:c9:
                    01:81:c2:5d:89:6b:e1:30:72:3e:ba:3a:68:f5:9d:
                    85:f6:ee:1c:24:1d:be:c1:98:c5:3b:3b:ce:c8:f8:
                    19:73:72:41:5f:60:32:f3:fe:a7:da:ee:b0:6a:20:
                    4b:44:39:72:f0:59:d7:22:a6:20:3d:e6:24:27:66:
                    b2:1a:86:8f:b8:00:ba:d9:e2:47:e3:02:11:2d:45:
                    ae:35:41:51:68:76:ae:cd:e3:79:0d:eb:0f:24:f4:
                    c5:e2:65:91:07:96:be:c3:d2:21:04:80:b2:57:54:
                    1e:4f:7c:67:d5:2b:a4:85:eb:f2:06:65:c5:f8:be:
                    0e:01:e8:08:99:98:38:ae:c3:ac:e3:72:50:52:fc:
                    20:7f:ed:93:b4:ac:d2:d9:2b:bf:30:cf:45:c8:78:
                    25:63:44:ee:7b:0b:03:e7:e2:de:69:8a:92:38:7e:
                    82:e4:29:3f:1d:8d:e6:6c:a3:7b:39:1c:d1:88:25:
                    dd:57:a5:01:1d:8d:85:70:d7:82:d5:fc:20:f0:19:
                    cb:37:ea:a6:23:30:a1:82:05:63:22:c0:b1:b2:a4:
                    ee:68:42:0a:5e:69:d5:db:69:83:89:fc:02:5a:ef:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:AF:5C:87:BC:99:60:92:BE:A3:C6:84:15:62:6D:CC:E6:05:52
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d8:d9:b1:ea:b0:70:36:29:87:26:7a:2f:ab:9a:fb:94:96:
         a7:90:cc:81:0d:8e:05:8b:43:b2:86:7e:21:83:c2:c0:a3:b3:
         1f:ba:3a:49:55:63:9e:3e:f5:02:a4:ae:24:d6:38:58:6f:dc:
         09:47:c9:13:59:50:70:b1:56:27:73:4d:98:0e:25:a9:a1:61:
         89:94:12:b6:79:7e:c1:2a:f9:44:0b:7c:09:8a:cc:1d:db:d9:
         39:49:b7:41:5d:8c:d6:b8:06:10:a8:75:58:f4:75:08:9c:b7:
         c1:74:0f:f2:51:8b:76:a0:cd:29:fe:1d:35:5f:b0:33:d0:28:
         25:92:77:db:70:57:a0:99:7c:2c:93:2f:76:84:89:78:3c:c6:
         4a:40:9c:66:6b:10:a9:fb:db:1a:60:e8:a9:0c:72:15:37:f1:
         79:7f:9d:a6:ef:a8:bf:e4:d5:d8:ec:b7:a1:22:80:73:8a:b9:
         b3:17:76:53:44:f0:a7:b8:53:48:f2:ed:12:6b:e1:a2:01:37:
         68:6a:1c:f6:0f:89:73:43:96:df:ef:6f:61:f3:5c:88:da:91:
         36:b5:3f:e5:fd:7c:b3:ac:cd:08:e9:ae:97:0e:72:ec:8e:2d:
         2e:68:1d:a5:f1:51:4f:33:ee:a3:5b:ca:fd:82:d9:78:d2:1b:
         25:1d:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:47 2024 by rpki-client on console-fra.rpki-client.org