Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File:                     pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier:          XXQrXkad23OXsc9wZNUSD2dA4Ggtrrm//dyk5XLui5Y=
Subject key identifier:   DC:7D:2A:13:7A:B1:73:84:DB:3A:2D:B9:DD:B5:EB:4F:DF:2F:DE:01
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer:       /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial:       018F874892EB94488107913BE14F4F998C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:31 +0000
Manifest this update:     Fri 17 May 2024 16:00:31 +0000
Manifest next update:     Sat 18 May 2024 16:00:31 +0000
Files and hashes:         1: fLx6ARp_XELZuUhU7kDXAjpPuwk.roa (hash: uTCowJPAT95hr4395tl8GegbA7fdKD/i94UzJqvmAWc=)
                          2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: KMLX1uaAXytQdLpzfT4Z76w3aEcxif2UDevEkMhBp2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:92:eb:94:48:81:07:91:3b:e1:4f:4f:99:8c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
        Validity
            Not Before: May 17 16:00:31 2024 GMT
            Not After : May 18 16:00:31 2024 GMT
        Subject: CN=dc7d2a137ab17384db3a2db9ddb5eb4fdf2fde01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:4c:87:f3:ac:4c:3c:28:31:6f:3a:fe:d7:
                    68:5d:75:ba:09:2d:6c:4f:f8:23:5f:11:c5:34:f3:
                    69:6e:f3:d9:7e:2b:40:2e:32:e0:47:dc:cd:de:f3:
                    08:0f:57:3c:22:52:19:d8:7a:f7:42:1c:ab:dc:0f:
                    b2:15:99:2c:e1:94:92:45:9c:1b:8c:68:4d:ed:f0:
                    76:ef:e5:c1:9e:8f:df:27:8b:c3:92:9b:c5:c8:8c:
                    af:61:d2:57:7a:fd:7d:fd:2c:04:cb:4f:5f:ff:2d:
                    f9:44:c0:22:fb:c3:43:24:43:80:9d:3e:c8:82:a3:
                    5c:d2:3c:7d:b2:e8:6c:84:7c:97:f8:0e:06:50:3c:
                    af:eb:5a:f3:62:b8:27:95:3b:79:24:d1:ff:eb:58:
                    d5:be:c4:cb:67:2d:ae:be:aa:84:25:42:ef:6c:05:
                    b0:ad:01:88:df:8b:cb:3c:8d:3c:60:88:bc:cb:36:
                    22:23:4d:22:c0:19:2f:74:47:d2:2d:c5:2d:08:9d:
                    04:7b:cd:bc:e6:fa:fa:61:ca:16:de:63:d9:92:af:
                    c8:61:18:52:69:d7:f0:32:bc:82:61:c4:11:c2:62:
                    d0:c8:9b:5f:a8:18:91:fc:4d:0a:8b:61:cf:30:9e:
                    ca:f7:a9:45:c7:f4:d3:a8:56:40:a4:25:ae:0b:84:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7D:2A:13:7A:B1:73:84:DB:3A:2D:B9:DD:B5:EB:4F:DF:2F:DE:01
            X509v3 Authority Key Identifier:
                keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:cb:12:3e:4d:2e:d9:fc:47:14:86:94:77:c8:69:1e:10:
         8e:d6:7a:ef:bb:8e:5e:c2:57:78:46:7d:96:4b:bf:53:31:54:
         0d:d3:28:1c:f5:df:75:d4:68:49:de:d0:73:ac:a7:e0:ec:f5:
         cd:5b:ee:88:06:b2:46:dc:79:9a:8d:20:8f:14:f1:76:45:40:
         88:42:99:62:8f:41:37:ea:eb:05:d6:2c:47:3b:a5:37:5f:82:
         22:1e:d5:b6:05:0a:4c:e5:29:fc:26:5b:3f:20:ef:2c:ac:6f:
         90:51:bd:c4:ad:3b:28:4f:ec:10:bb:7a:da:0a:2f:7c:ff:b4:
         9a:27:ab:2d:50:b2:38:56:4a:fa:48:5a:b7:7f:cc:e1:18:87:
         f9:4f:61:89:ba:06:c1:fa:cf:40:09:d2:c3:13:eb:8b:da:75:
         38:54:1e:9e:66:92:80:f6:91:d8:9c:f7:e7:73:d0:53:ee:ee:
         87:3a:75:19:2a:bf:ef:6b:37:80:95:9f:10:9d:aa:83:15:28:
         bd:1b:88:36:40:58:4e:0d:0c:df:53:91:92:7e:d7:a6:8e:c8:
         47:e2:09:db:c7:f8:38:34:f7:7a:cf:bf:c1:79:7b:7d:e7:85:
         34:4e:54:25:02:eb:d5:5c:07:ed:5a:84:21:ca:2c:24:de:48:
         fa:a9:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:23 2024 by rpki-client on console-ams.rpki-client.org