Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
File:                     lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft (raw, json)
Hash identifier:          s9yLZivNqkWtKK0hZRjtAdkRg2FgMbPbzUORefEUPdU=
Subject key identifier:   37:BA:10:CF:29:DB:BB:09:C8:B4:15:01:06:9F:8C:E8:D7:D3:3A:64
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Certificate issuer:       /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial:       018F866D08976B26C5AF1B6AC9CD4C50D727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 12:00:43 +0000
Manifest this update:     Fri 17 May 2024 12:00:43 +0000
Manifest next update:     Sat 18 May 2024 12:00:43 +0000
Files and hashes:         1: OwFZcocb5WMDzw0fFISz1Tkfy6E.roa (hash: ts08NJWE1XMXY/G5wA0nLhhai2bPkd24RT4miIKsIdg=)
                          2: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl (hash: QxkwTQPHpFcCeyf5jYaq17pRHM4IXUJu1CcdCDSrt5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6d:08:97:6b:26:c5:af:1b:6a:c9:cd:4c:50:d7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
        Validity
            Not Before: May 17 12:00:43 2024 GMT
            Not After : May 18 12:00:43 2024 GMT
        Subject: CN=37ba10cf29dbbb09c8b41501069f8ce8d7d33a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:90:08:6c:58:2e:c3:ab:37:e2:92:6a:bd:
                    76:8f:24:41:a8:2c:f3:d9:0f:75:1b:43:79:91:1f:
                    96:40:65:17:16:85:96:5f:a8:b2:f6:9e:27:96:cf:
                    42:cf:ab:8b:b0:ca:5e:1f:33:84:a9:03:16:58:f7:
                    2b:49:17:bb:4e:a4:b4:5a:29:bc:fa:6d:8c:15:3d:
                    4c:88:bb:e2:1b:28:f7:a9:58:2c:04:c3:8c:a9:ed:
                    60:19:19:f1:57:f7:f0:b3:3b:37:5a:fb:78:2a:f2:
                    23:db:f1:78:f7:da:fa:8a:98:97:96:b4:b4:54:73:
                    03:70:04:fb:21:d6:ad:bc:32:6c:69:0a:07:93:b4:
                    c4:a6:ac:d8:a3:5a:6c:b3:7e:73:84:aa:91:5c:7e:
                    1b:5b:8c:d5:9c:99:73:5b:4a:8f:d3:93:66:88:e9:
                    3d:2d:0a:87:56:42:ce:ea:af:b0:88:02:70:c8:06:
                    5c:a4:d6:fb:1f:9a:3d:71:ca:95:ae:fa:99:ed:d3:
                    23:41:e0:47:36:45:b7:99:bc:dd:cf:89:30:b7:87:
                    8f:ec:bc:80:e5:cb:4a:5a:08:a3:c6:a1:a6:01:06:
                    79:44:c6:7c:34:0e:5f:58:72:5f:23:6e:ca:2c:90:
                    05:bd:45:bf:c7:15:61:7f:7a:79:7b:ac:99:20:68:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:10:CF:29:DB:BB:09:C8:B4:15:01:06:9F:8C:E8:D7:D3:3A:64
            X509v3 Authority Key Identifier:
                keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:41:26:6b:02:5c:76:07:cd:7a:b4:c4:75:ae:70:fe:f3:07:
         7f:08:92:4d:8a:6a:5e:45:66:2f:6c:bf:a8:ee:cb:a6:47:bc:
         63:c4:13:95:10:ed:8b:65:73:0a:f6:f8:56:86:ee:3f:d5:83:
         60:1c:69:a2:59:da:f1:83:ca:71:a1:5a:f9:0b:29:2b:d7:8e:
         58:e4:ca:28:89:95:68:8a:0d:77:ff:06:ac:b5:4e:51:54:cd:
         29:d0:76:05:f1:08:84:da:a4:ba:3a:2f:5f:b7:60:83:5e:3c:
         3a:e2:cf:b9:90:47:65:cb:f4:29:ff:54:e6:be:67:f2:93:9e:
         f8:47:08:32:0d:d2:de:ae:08:c2:12:e2:5e:dc:72:ce:c8:a6:
         06:1b:59:b4:b1:aa:fc:e2:85:b8:db:1e:7c:a2:6e:eb:28:ce:
         c2:31:a3:fa:11:84:a5:9a:85:ae:9a:99:dd:52:be:63:5c:a2:
         78:56:80:09:a5:12:19:86:7a:c6:96:e7:f5:66:7a:f0:79:91:
         f3:5c:77:1d:b4:20:2a:bf:60:dc:e6:e8:3b:80:70:1e:7d:c3:
         9a:20:88:52:2f:5c:f5:04:46:f0:17:59:51:c1:6d:5a:96:ad:
         81:fe:14:41:6c:04:49:2a:8b:ba:92:c6:f2:39:c2:32:bb:e5:
         96:43:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:02 2024 by rpki-client on console-fra.rpki-client.org