Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File:                     r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier:          IFWFeKzdxXNvm8dqJriN9Z/zaCuhX0m7AeUWuLtKxkI=
Subject key identifier:   87:8A:9C:C0:7E:A7:AF:30:63:17:16:EE:F0:3A:AB:0E:1A:16:12:5A
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer:       /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial:       018F874A5AAC96E7DF13716C5ACAF8C6113F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: B0ckMvjCQjEeplhT6t4X0foApLU.roa (hash: O/PQXBukE9k04M9ezvt3OCAKRteUouuLJ/5PB3Ipp/Q=)
                          2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: m8k0TFa/VVJ1cEWwMYhnXTuRarKnf5/21fn805aPPwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5a:ac:96:e7:df:13:71:6c:5a:ca:f8:c6:11:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=878a9cc07ea7af30631716eef03aab0e1a16125a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:3b:3f:11:ba:8d:26:6a:29:fa:43:be:88:
                    91:c4:48:f3:15:24:92:f6:94:d9:0e:d8:7d:82:71:
                    dc:35:d9:89:a6:67:22:c4:e8:13:cd:ee:45:5d:b0:
                    03:ee:e7:58:1f:87:75:49:20:02:cc:fa:01:36:af:
                    00:75:dd:4d:f6:0a:63:ef:30:87:ae:43:25:e2:bd:
                    a9:42:0f:bb:c5:c4:9a:7b:5e:8f:c4:10:11:53:c6:
                    c8:e0:e7:f4:71:ca:0e:f7:c5:2a:9b:24:a2:ab:50:
                    27:9e:08:2a:fa:6c:49:c1:a1:f2:ee:09:c7:85:9b:
                    72:31:8b:48:6e:18:83:ff:e0:61:f9:88:92:a5:a9:
                    93:cf:7b:0d:cb:42:28:d2:2c:45:9c:96:ac:dc:83:
                    5a:42:aa:ed:7e:5d:22:6c:94:96:c4:11:a2:8d:90:
                    e1:1e:d6:82:39:2a:d8:52:e5:05:2c:bf:2d:0d:62:
                    36:13:c8:e8:97:a1:11:e9:f0:72:f8:b5:61:58:ff:
                    69:41:2e:a9:37:19:85:6e:ba:28:36:cd:d5:32:1e:
                    6e:08:e3:d6:68:cb:8b:88:c7:0f:7f:34:31:f2:e7:
                    c2:20:43:44:04:ad:82:11:15:77:21:f7:29:25:65:
                    d1:b6:63:7a:05:55:bc:66:28:17:9c:1a:57:de:6e:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:9C:C0:7E:A7:AF:30:63:17:16:EE:F0:3A:AB:0E:1A:16:12:5A
            X509v3 Authority Key Identifier:
                keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:7e:fe:ab:f4:ea:68:2d:50:48:49:54:1b:a2:b4:f3:6d:
         58:d9:71:61:5a:45:d8:00:26:0c:64:3b:52:b5:6a:9e:c8:f8:
         42:1f:49:ce:01:f4:ea:ac:8b:79:cf:87:8d:6d:25:b9:17:e0:
         3d:92:a8:7f:55:00:84:18:fe:60:7c:43:b3:0f:42:76:d9:dd:
         07:9f:b1:29:16:c4:3b:90:8f:24:45:fd:dc:15:87:97:d2:4c:
         ac:09:e7:18:c6:01:10:b8:4d:3d:28:40:77:d0:29:38:db:56:
         96:64:b4:49:56:5b:c2:1e:77:a9:c6:66:d6:ab:71:28:a7:b8:
         9a:9d:2f:df:89:3b:c6:a7:5e:64:4f:eb:ae:9a:7c:5c:d4:aa:
         8f:cb:2a:e1:fa:ec:4c:14:6c:ea:c1:aa:30:5d:a6:3a:3b:67:
         37:bc:64:b0:32:93:87:75:20:f5:99:1b:94:54:5f:36:b7:58:
         0d:79:29:7f:69:dd:ef:22:e7:1c:53:06:f8:0a:c8:1c:23:8a:
         64:19:75:7e:5c:c3:f2:28:ba:52:c2:64:90:57:fa:67:03:0f:
         c0:08:9b:06:8b:35:9f:a3:ed:10:9b:13:69:88:f9:73:69:a1:
         21:bc:05:8b:96:50:ae:41:64:bd:be:ce:5c:2c:6e:d2:28:8c:
         52:24:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:29 2024 by rpki-client on console-ams.rpki-client.org