Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
File:                     ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft (raw, json)
Hash identifier:          mr6oVKSS2H8D8Z1sis9eWiq38CPlhUqNXTkZ5vwQekU=
Subject key identifier:   78:F9:AE:D9:44:05:06:AB:79:13:A5:6A:9E:F6:90:42:6E:8B:EB:0A
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Certificate issuer:       /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial:       018F4A2231BD73361D3511FDD97AF6786204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 19:01:45 +0000
Manifest this update:     Sun 05 May 2024 19:01:45 +0000
Manifest next update:     Mon 06 May 2024 19:01:45 +0000
Files and hashes:         1: 1NIBu1RauToeaCBWeHNdxq6cA_8.roa (hash: PfjiGG1NyZl3GitJ6dnhkBlwVLh4NFpUfJlvnU6vM04=)
                          2: ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl (hash: NHph0gfabdxfOACn7RyNai80piIdGVdWOf3H+EO9dIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:22:31:bd:73:36:1d:35:11:fd:d9:7a:f6:78:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
        Validity
            Not Before: May  5 19:01:45 2024 GMT
            Not After : May  6 19:01:45 2024 GMT
        Subject: CN=78f9aed9440506ab7913a56a9ef690426e8beb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:02:f3:d7:b7:98:15:8e:e1:dc:af:db:e6:
                    3d:e6:0b:2a:b1:7b:82:03:39:b6:34:e6:44:93:6c:
                    8c:85:ac:e3:a1:2f:ad:a4:bd:c7:e8:40:a6:56:b5:
                    62:37:73:6d:28:5e:c6:ae:71:f7:18:27:47:dc:c4:
                    03:eb:bb:7a:42:6d:dc:8c:6c:5e:e5:2e:93:ec:09:
                    01:ec:28:05:1e:12:57:bd:9f:a8:a7:9e:c0:8a:d7:
                    72:c4:8d:0d:d9:4c:c4:40:b0:c4:a8:20:be:a7:6f:
                    03:8a:ba:b1:8b:b2:e3:a2:59:4c:f2:37:7b:02:8c:
                    4e:fa:33:e4:de:ec:c5:1d:cc:f9:e3:3a:db:e1:cd:
                    a1:2e:0b:9a:65:b6:b4:09:ea:bd:4e:85:9a:b4:b0:
                    3e:26:c3:4b:e0:6e:a5:06:00:7b:4d:a8:0a:c4:b4:
                    d9:cc:09:8f:43:83:85:6e:a9:6c:bd:77:69:1c:8c:
                    78:18:e5:22:8f:e8:90:05:fc:c8:ef:5e:7f:8d:83:
                    d7:e0:d3:d3:72:bb:25:92:81:6a:10:5e:c3:68:81:
                    ed:91:bf:92:cd:8d:12:95:62:13:83:5d:2b:4b:c4:
                    10:df:dd:72:1c:9a:d3:ff:f7:43:ad:63:9d:b1:ba:
                    87:41:ef:37:ea:6e:ca:f5:eb:e6:a3:1e:0c:c1:7f:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F9:AE:D9:44:05:06:AB:79:13:A5:6A:9E:F6:90:42:6E:8B:EB:0A
            X509v3 Authority Key Identifier:
                keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:56:74:ad:f3:d2:53:7d:02:81:ac:2f:35:1d:48:f3:ee:
         a5:dc:32:63:41:2d:cf:19:7b:a0:36:49:1a:12:c1:54:af:de:
         ea:bc:21:18:ab:ec:42:c6:3a:18:97:7c:6f:56:a1:82:0d:f0:
         b5:45:64:63:0c:66:40:bf:35:7b:12:d4:d1:34:41:43:78:b0:
         09:38:06:ec:64:b7:56:08:a9:eb:91:03:04:e1:21:c9:18:34:
         8b:58:7a:92:2b:fb:e2:41:44:8a:79:dd:dd:6e:ff:e8:b5:26:
         6c:27:3a:1e:b6:fd:26:bf:53:9f:43:97:e7:61:bc:0a:56:c3:
         8f:a3:3c:e8:b2:6d:89:97:82:4d:c0:48:7f:ac:df:ea:0f:ec:
         49:fa:01:cb:19:93:a1:3d:31:fb:47:6e:98:51:95:f7:d0:54:
         82:f1:79:83:dc:5a:fa:5f:18:6d:a4:10:ce:0c:78:c6:48:a0:
         2d:df:d8:a1:48:5a:04:75:1d:5d:0e:a1:cc:80:21:32:66:7b:
         72:6d:c6:23:57:76:a7:b5:ea:40:a9:43:98:8e:9d:7b:81:d5:
         c1:ab:e9:5f:26:57:87:90:f4:21:0a:11:93:5f:ee:1b:5a:64:
         ac:45:9d:64:c9:9d:36:f1:8f:71:46:79:e6:cd:4b:9a:16:9a:
         22:65:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:18:11 2024 by rpki-client on console-fra.rpki-client.org