Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File:                     kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier:          znENUbEVa4E8TeV9bmNQ5lDWSS1AojEyjwiVPgyAlNI=
Subject key identifier:   01:7E:CF:9D:FD:95:25:7F:AC:45:11:50:AB:0A:84:B5:32:92:AF:13
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer:       /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial:       018F87B6AF719F99F7E8C39FA0B283275ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: AjOuCJyXQ10AFVM5FxxJqGwF_xY.roa (hash: fvsoZHundr5WgSaOuIq+PAxDspNpypqcHTBZ14qU004=)
                          2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: FRiOkbh1sW9v6F58sDqukBWkCprGSm58S7bwHl1pt9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:af:71:9f:99:f7:e8:c3:9f:a0:b2:83:27:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=017ecf9dfd95257fac451150ab0a84b53292af13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:ca:3f:d9:7e:f2:f2:c5:f2:27:9a:31:c9:
                    eb:d1:c9:d7:4b:6b:5f:11:3e:20:5b:7d:15:51:a6:
                    c7:36:f6:64:a0:87:69:e0:6d:d0:a6:26:47:15:a9:
                    52:64:f0:3f:a0:e6:b4:7d:16:5e:b5:08:59:93:00:
                    65:8e:5b:31:5f:77:55:5a:d9:87:35:43:45:07:7b:
                    4f:79:ac:17:10:cc:c8:2d:04:1c:4f:a6:26:6d:58:
                    43:6c:12:dd:32:d8:f1:62:87:92:ed:23:8d:85:a6:
                    8b:ca:58:d9:91:8d:76:0d:83:46:74:2e:ee:48:0b:
                    40:0d:78:d1:bc:00:6b:d2:8c:92:5e:56:c3:1f:d5:
                    c6:3e:7a:5a:8b:f7:fc:27:e3:99:29:21:0b:11:88:
                    cf:81:53:c0:80:b6:be:3c:89:cb:63:e3:35:cf:cf:
                    4b:61:29:3c:a0:05:8a:46:04:d9:ff:7f:a4:e9:74:
                    ef:86:9e:a9:0b:1e:2e:5d:e5:58:43:cf:57:f0:f7:
                    8f:fd:66:a6:86:e5:26:28:5f:db:fb:7d:47:21:98:
                    12:23:e6:d8:0e:a6:59:eb:4e:bf:05:35:e2:cb:a0:
                    20:c2:59:22:20:5e:61:42:90:33:dd:e2:4c:62:d2:
                    95:b8:21:56:29:49:4e:90:bb:11:1f:8a:30:b5:8e:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7E:CF:9D:FD:95:25:7F:AC:45:11:50:AB:0A:84:B5:32:92:AF:13
            X509v3 Authority Key Identifier:
                keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:1e:28:d2:77:bd:04:45:86:96:35:30:ba:04:7e:f3:19:
         3b:10:d0:f3:7e:ea:e7:58:84:da:d5:38:75:c9:7f:9d:ef:69:
         f1:43:1b:87:a9:06:e7:75:2f:47:78:d4:6d:0f:73:48:d3:dc:
         ef:a1:30:ac:74:c1:20:6f:2c:cd:cf:42:81:72:f9:37:28:66:
         7e:b0:a4:2c:a7:fd:1b:3c:86:f7:e7:f5:2c:7e:b3:10:d3:6d:
         b2:e9:16:6a:e4:82:99:33:9d:2e:00:4e:09:9a:32:24:f2:4b:
         88:db:ea:13:8c:5b:72:52:c8:17:86:74:f0:e4:4e:a5:af:cb:
         60:c0:6b:a9:5e:8b:e0:f5:54:c7:01:03:ee:61:3d:14:ec:fa:
         fb:c7:f9:9b:d0:c5:b2:a6:b1:6a:9a:cf:32:5e:0d:0f:05:96:
         de:ac:08:a7:44:3c:fa:ef:28:19:fc:9e:7f:80:5a:79:c9:94:
         73:bc:c1:ce:28:fa:d8:0f:18:ef:30:1b:43:b6:8b:f8:2e:1a:
         c4:8d:f4:1b:b4:90:56:ce:48:9b:f5:58:8e:72:95:77:91:e9:
         16:ff:cb:d9:1e:ce:c7:21:c5:a0:4b:86:e2:71:5e:20:b6:09:
         da:e3:82:44:86:ce:28:17:37:af:a7:be:a9:ea:73:6a:72:e0:
         f8:d2:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:23 2024 by rpki-client on console-fra.rpki-client.org