Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File:                     wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier:          1SRisSSqM9LhMwF/6X4auwdnUJzDOvp9nBlEAthpyag=
Subject key identifier:   B2:74:DB:31:DA:05:D4:86:C0:D9:C4:6D:54:F1:2C:F3:40:F7:57:BF
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer:       /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial:       018F87ED812A62E66881538C0422AAB41523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:40 +0000
Manifest this update:     Fri 17 May 2024 19:00:40 +0000
Manifest next update:     Sat 18 May 2024 19:00:40 +0000
Files and hashes:         1: K9O_AUAjluDbeKtudj19f-t7EVc.roa (hash: OU0eez9gPmMhzMQhPUFhmYrJEMpOaT65EQovM9Ubnjo=)
                          2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: VqHYg/1bP4uugYvtpkIEqNm1jMFw2BsEOYqwN2p4VK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:81:2a:62:e6:68:81:53:8c:04:22:aa:b4:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
        Validity
            Not Before: May 17 19:00:40 2024 GMT
            Not After : May 18 19:00:40 2024 GMT
        Subject: CN=b274db31da05d486c0d9c46d54f12cf340f757bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:76:3e:d0:7a:c2:d3:70:4a:0f:ae:b8:7f:
                    20:b8:de:18:d1:ca:ae:85:12:b3:03:3b:1c:8e:22:
                    ce:d7:9b:c8:91:84:76:eb:c8:58:d0:b1:bc:45:68:
                    67:12:ab:f2:23:64:9d:8c:29:fc:0a:62:31:92:2d:
                    20:e2:b1:bd:cb:d7:66:0c:9f:16:2c:9e:42:68:d7:
                    80:5b:30:34:05:c1:2f:85:23:be:f7:fd:49:1f:83:
                    33:57:bd:36:46:1a:9e:93:3a:1b:61:6e:38:fe:23:
                    b2:c3:0d:e9:67:9d:a5:d4:23:fa:5b:a2:6a:35:5e:
                    9b:a5:ff:e0:8f:89:c0:da:c8:7d:95:94:d0:1f:e7:
                    1e:1a:74:77:1a:32:ab:6e:9d:34:91:26:e8:fc:a1:
                    aa:c0:71:92:f2:27:5a:87:13:a6:af:6b:6d:cd:77:
                    60:da:76:7e:57:bd:22:22:88:62:e1:58:01:eb:1a:
                    7c:6c:ef:47:44:8c:34:6f:e5:28:39:58:20:97:5a:
                    5d:a6:9e:b8:03:46:e4:8a:6e:46:1d:8b:ca:7c:0b:
                    05:3b:19:92:ea:0b:49:de:e8:10:c3:a9:5b:bd:8b:
                    1c:a2:8f:ea:76:2f:62:1c:5f:17:59:50:f8:c9:32:
                    6f:01:a3:0e:65:e0:55:5c:f2:7c:c5:ce:0c:60:7a:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:74:DB:31:DA:05:D4:86:C0:D9:C4:6D:54:F1:2C:F3:40:F7:57:BF
            X509v3 Authority Key Identifier:
                keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:a2:a2:36:18:c9:69:a5:ea:31:b0:48:a6:1a:88:c7:26:
         7f:f4:ad:93:39:ac:f0:02:3f:d3:6e:e1:9d:2c:f8:51:d4:26:
         99:d4:24:34:49:ce:f3:5a:8b:d1:70:5e:62:67:7e:f7:b8:9d:
         19:14:a2:ea:89:f3:65:68:ea:19:ac:f3:7b:5a:23:55:c0:77:
         88:de:25:8a:9f:f5:eb:e9:13:e3:96:a3:3f:b5:ff:a9:c8:00:
         36:34:79:56:17:5a:1a:d5:5c:81:10:6a:4e:75:57:6b:af:95:
         cb:35:c8:8b:19:31:5d:75:cc:64:06:46:82:d3:f8:d0:e5:cc:
         fe:bf:77:43:b6:b7:cc:f4:ea:76:40:ff:1c:2e:f3:c0:37:6a:
         6f:14:73:90:86:f4:5e:d8:f2:70:fe:a3:c7:04:63:c7:e9:e1:
         8f:d1:f6:0d:68:2c:59:72:05:2d:0c:5b:3f:e3:b4:76:40:5f:
         e5:a7:5d:f2:15:db:75:17:da:ca:5f:ee:44:93:e3:0d:8d:59:
         57:85:52:ff:f1:f1:3f:ad:b3:df:b8:77:01:bf:1a:21:8b:67:
         c6:8f:37:cd:13:70:a3:7a:fe:a1:d9:2e:f7:44:25:66:a1:df:
         42:8f:96:21:57:e2:54:78:ab:d0:cd:e8:53:e1:1f:72:d5:4e:
         fe:03:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:13 2024 by rpki-client on console-fra.rpki-client.org