Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          sPW8Ckv/FBxruSWPtx/3nPkPr4e5DHSUHMK2zZ5N2MU=
Subject key identifier:   12:21:BF:D2:C9:30:64:48:0A:05:CD:71:F3:66:67:B6:3C:90:C8:75
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       018F874AC9DE50D890933027B03BF5346105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:56 +0000
Manifest this update:     Fri 17 May 2024 16:02:56 +0000
Manifest next update:     Sat 18 May 2024 16:02:56 +0000
Files and hashes:         1: _bzSOn8CRh6mqdpxEuIY2MEqCXs.roa (hash: FP3sM9Az+og7H+FuQ7Ry77a0KFMdgCFD8vBbhqwQ3+A=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: 3GvYuP39Jpd1rZYpENFaxVjUFGQRkH5JVOBrbzX6rIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c9:de:50:d8:90:93:30:27:b0:3b:f5:34:61:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: May 17 16:02:56 2024 GMT
            Not After : May 18 16:02:56 2024 GMT
        Subject: CN=1221bfd2c93064480a05cd71f36667b63c90c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:67:9f:27:20:6d:50:66:46:aa:5c:cc:a1:
                    ed:39:3f:42:cd:00:b2:84:2e:de:94:4a:a0:07:b6:
                    6e:88:37:b1:88:23:96:cf:62:a5:97:cb:24:32:9d:
                    a4:52:a7:04:e6:3d:a0:8e:ac:ea:26:8b:76:27:66:
                    1e:be:ac:97:40:b8:c4:85:61:da:fa:01:bb:df:78:
                    36:d1:db:f9:15:34:97:d0:ce:1b:54:91:fd:58:c1:
                    cf:79:c7:6e:73:9f:58:7e:ca:75:8e:61:2a:12:f2:
                    09:9a:2d:2f:10:b5:8c:a6:c1:4e:a5:77:f1:d6:d9:
                    e0:dc:be:c2:e0:09:a0:1b:69:ea:15:77:b0:66:58:
                    3c:97:31:a0:68:5c:69:b6:92:e2:bf:0f:27:ef:f7:
                    74:88:87:59:a3:13:88:92:2a:31:d6:7b:a1:c0:37:
                    e8:d7:c0:a9:06:06:ba:16:dc:fb:bf:ca:8e:d4:14:
                    f6:d3:50:fd:a6:1a:12:23:cd:09:9e:1d:9d:35:c2:
                    ac:fe:40:55:c3:d7:85:ed:42:a6:4b:8c:38:f1:d7:
                    00:db:16:6f:1c:ab:e5:fb:46:41:d7:cf:47:82:9c:
                    11:58:6f:4c:41:24:a9:93:7e:fe:70:e7:85:ff:80:
                    5a:a3:6e:73:db:5d:5e:50:dd:b1:1b:40:10:1d:2d:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:BF:D2:C9:30:64:48:0A:05:CD:71:F3:66:67:B6:3C:90:C8:75
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:a4:27:43:06:46:97:ad:f0:e0:55:20:9a:31:43:9b:71:
         ca:d1:90:53:c9:f0:03:f1:fa:fb:eb:ed:14:ba:7a:45:bc:33:
         95:31:83:e6:54:ad:a5:43:23:f4:4e:93:e4:e2:13:44:0e:e4:
         81:5f:2e:cd:a9:84:bc:43:c0:a1:42:29:77:bc:14:c7:62:fb:
         df:92:40:fa:25:7d:a9:9e:3b:8e:7d:96:e5:20:3e:c9:2c:94:
         fb:8c:4d:df:e6:96:1d:7c:36:51:6d:29:64:bc:56:67:b4:4b:
         0f:b9:e6:ea:34:b5:81:29:ef:10:6b:f5:8b:6d:17:bb:71:e1:
         bd:9c:73:15:d8:00:67:4c:57:1e:fd:24:0a:48:cf:e4:b0:01:
         0d:2b:a6:e9:d3:ee:50:c6:7f:d6:53:80:61:63:90:62:92:01:
         42:31:20:d8:a7:b4:63:ee:f3:a5:a2:3d:b2:0a:f0:e3:45:88:
         b5:d4:7b:27:c0:63:49:db:4b:a5:77:ba:bd:bb:06:41:72:8e:
         2b:57:0b:4a:af:91:1d:55:f7:1e:c8:ee:36:1f:f0:6f:56:32:
         5d:98:f6:b3:17:95:fd:86:de:8c:9b:20:98:14:ef:ba:9d:b2:
         27:dd:a3:30:2c:03:50:96:1d:03:d6:1a:7f:b7:3d:2e:86:4e:
         b5:98:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:08 2024 by rpki-client on console-fra.rpki-client.org