Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File:                     MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier:          naVur5WSRcyYakA7VUlmW5ua5oUqwl2fruEhS64Rat8=
Subject key identifier:   39:CF:C4:67:BD:0F:AC:BB:FF:9D:B9:A8:ED:3E:C7:BA:FD:BE:9F:4B
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer:       /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial:       018F8824110035E88096D4A853F580D17ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:15 +0000
Manifest this update:     Fri 17 May 2024 20:00:15 +0000
Manifest next update:     Sat 18 May 2024 20:00:15 +0000
Files and hashes:         1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: iebPZovPBV3Dmdc2hN3D2c/tcS4cbwWD3eu3njCo+H8=)
                          2: Rt6DZuJJ7DXsSoO8BpWCjwL4ROQ.roa (hash: 7fspFwNz9WSNTD2rN5KehUecbLu2dRo1WLmoZbxBXDs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:11:00:35:e8:80:96:d4:a8:53:f5:80:d1:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
        Validity
            Not Before: May 17 20:00:15 2024 GMT
            Not After : May 18 20:00:15 2024 GMT
        Subject: CN=39cfc467bd0facbbff9db9a8ed3ec7bafdbe9f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:bb:49:8a:e3:ea:b6:41:93:4c:c6:e8:46:
                    00:17:bc:f4:95:86:65:5a:1f:96:be:d9:e0:9a:9d:
                    cd:67:47:db:da:23:3b:57:b5:4e:b1:62:8c:9c:ca:
                    6d:d9:63:98:f9:89:e5:8c:69:9f:07:cf:dc:a2:88:
                    d2:e6:59:d7:6a:4d:ab:28:d6:e1:e7:11:c4:5b:99:
                    7a:a3:30:ce:b2:77:6f:9e:8b:10:53:83:23:ea:34:
                    9c:b2:5b:9b:9d:e5:9f:07:61:21:cb:54:9c:aa:30:
                    73:9c:67:47:37:14:24:97:6e:3f:7a:9c:0d:36:b8:
                    d3:b7:35:ac:35:7a:91:80:aa:62:fd:8f:f7:a1:96:
                    8a:00:88:a8:dd:00:f6:cc:77:e9:6a:8a:00:15:96:
                    91:21:1c:49:c0:a5:2f:8c:a5:1e:bc:cf:f4:11:ec:
                    a5:35:9a:e1:b3:8b:40:b4:ce:09:ea:7f:b2:1b:2d:
                    39:fe:6e:8b:a5:b5:e4:90:06:bf:9b:36:65:2c:6a:
                    5c:42:6b:18:e1:8c:81:b2:32:70:3f:0d:16:e3:1e:
                    56:1a:09:78:a8:3c:47:e8:38:74:e7:c9:79:48:23:
                    d8:8c:e0:78:47:ed:69:2b:65:80:48:ee:89:14:af:
                    70:ae:f5:99:f2:82:25:af:bc:32:cf:fd:9a:79:00:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CF:C4:67:BD:0F:AC:BB:FF:9D:B9:A8:ED:3E:C7:BA:FD:BE:9F:4B
            X509v3 Authority Key Identifier:
                keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:39:ef:5e:5e:0d:d7:f3:d8:43:87:53:aa:12:e9:38:85:4a:
         0f:69:23:40:60:5e:a0:29:fb:21:fd:0b:3c:6d:1c:da:82:35:
         97:da:7d:9b:1a:aa:bc:b3:26:a3:7e:f8:1e:eb:01:e1:10:89:
         2b:38:73:bd:1b:e9:78:81:72:8a:26:14:4d:1d:bf:4d:cf:5e:
         53:bf:a6:26:54:13:60:63:75:84:fd:a6:47:15:26:71:bd:71:
         70:ef:03:4f:b4:a7:41:25:75:aa:6b:f4:f1:ee:9b:50:23:5d:
         9e:9e:9d:0f:74:b5:83:3d:63:d5:0e:43:12:a7:33:4c:f5:dc:
         55:47:22:9c:c2:08:6a:71:a5:b2:02:5e:a5:22:15:be:c5:59:
         bd:aa:21:77:49:bd:bd:e5:13:c4:99:21:5f:0a:1b:58:2d:45:
         4e:5e:67:f9:b9:be:75:80:18:97:81:7e:d5:8d:81:f1:44:a6:
         a7:54:aa:ec:53:db:8e:c3:11:3c:2a:8f:b8:1c:e5:1c:da:06:
         9f:61:5e:fc:0b:a1:3d:e1:42:7d:c7:0d:81:3e:66:ec:f7:8d:
         36:99:f0:5d:95:24:27:62:38:1d:fa:71:1f:7d:c1:6d:10:65:
         d7:2d:e1:71:7e:c0:92:9a:37:12:c7:37:c9:b5:13:1c:ef:7b:
         68:ff:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:10 2024 by rpki-client on console-fra.rpki-client.org