Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File:                     tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier:          GS/CZfeD3FAAJkZkOohQvnwaYCUIXE5+kowmzhhrDdI=
Subject key identifier:   AC:7E:1F:94:20:A7:E1:6C:3C:17:C2:27:98:6B:E4:72:04:F9:5D:C7
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer:       /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial:       018F874A72003DE0CE345089BE46E10EFD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: +tsDQvBucFP1AzXIIZA6rq2nBgzpjreKva20waLs30c=)
                          2: yxtJApYm-RiRTr3HHaLhuVAfUO4.roa (hash: 7ImksTx1HHgb5vYAzSADBeGVPNSg2/yPH8fywyGgCr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:72:00:3d:e0:ce:34:50:89:be:46:e1:0e:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=ac7e1f9420a7e16c3c17c227986be47204f95dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:db:d8:cb:7d:cc:7f:5e:c1:89:66:f9:24:
                    8d:dc:e4:ac:28:7f:0a:a3:37:4d:90:52:8e:88:5f:
                    8e:c9:9b:10:ef:85:40:14:c1:db:3e:c3:72:2b:ae:
                    6e:50:50:cd:78:94:f4:70:30:a3:ca:39:d6:e0:ca:
                    de:cd:95:49:3b:e4:e9:b8:69:cd:ac:7c:15:18:40:
                    a2:5f:8e:50:c1:0a:46:eb:fa:f9:80:0f:6d:99:69:
                    65:bf:6a:e0:c1:e4:c3:4b:da:7e:21:5a:7d:b9:c7:
                    e4:74:20:09:e8:5a:f4:55:6e:f8:e7:ef:ca:6b:a5:
                    18:64:fe:fb:51:24:6f:53:37:c2:cc:a5:b9:27:09:
                    b5:e4:35:3f:7e:9b:40:75:f0:ee:31:1a:44:aa:a8:
                    68:c6:7b:0f:fb:e9:44:12:91:14:2f:ce:c2:3e:a6:
                    28:4e:bd:63:29:d4:cf:10:6b:9e:d6:da:66:68:6e:
                    8c:5c:37:31:19:76:06:ca:bc:d2:1f:cc:5a:91:b9:
                    c5:1f:53:ad:a2:fb:48:74:4c:0f:04:26:1e:e0:51:
                    71:ef:f8:8d:04:46:76:89:d2:02:0b:dd:2c:e6:84:
                    84:54:c9:cc:53:84:18:f6:63:b0:38:3e:69:06:cd:
                    c5:b8:ae:1f:ad:c0:7c:97:0d:1d:02:f2:3d:01:b6:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:1F:94:20:A7:E1:6C:3C:17:C2:27:98:6B:E4:72:04:F9:5D:C7
            X509v3 Authority Key Identifier:
                keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:49:83:b1:98:8e:e3:39:d1:02:74:84:43:4e:87:11:7e:00:
         92:ba:64:0c:7d:00:8d:15:bf:c1:b9:4e:c2:ea:7f:98:5b:84:
         ab:75:d2:72:94:a0:99:e2:9f:b4:08:51:9a:d5:01:15:83:73:
         ad:3d:6d:0c:fe:70:78:ef:25:a6:79:33:3d:28:42:4c:ae:e4:
         d4:ec:68:a8:c1:b5:bc:71:87:e0:8c:93:14:0b:5d:9b:f3:3d:
         d5:1c:f9:6a:e8:79:75:8f:70:a8:58:fd:52:1d:ae:fb:77:9d:
         35:ce:8a:4b:f2:39:94:75:36:de:48:66:43:05:ed:97:7a:3c:
         e4:c8:09:12:29:47:5f:8a:ad:88:ac:c9:5d:02:fc:ba:bd:65:
         dd:16:30:f2:bf:71:0a:07:77:0e:4a:ca:94:91:d4:ba:10:8f:
         6e:e5:f1:e9:63:bf:88:1f:d7:d4:50:cf:07:13:e5:2d:17:82:
         a1:02:dc:ec:6d:c7:21:f8:98:0d:ec:6e:d0:c0:d1:fa:25:11:
         e9:72:92:97:cd:89:2e:92:d7:38:45:28:29:a0:d4:c6:b3:1f:
         c9:67:12:f6:7a:0e:55:47:a9:ee:83:29:29:c5:86:7a:a6:7c:
         13:a8:cd:81:4d:4d:86:67:d0:e7:be:9a:c9:0e:56:b6:8c:59:
         0c:21:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:25 2024 by rpki-client on console-fra.rpki-client.org