Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File:                     ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier:          tgjSExS+d28qRq6bAXb+i2B8XmCT2KQhW1SSpRHwn/Y=
Subject key identifier:   BD:6A:7F:C3:CB:3F:D0:EF:94:B3:77:1D:79:79:1A:55:39:6D:0E:99
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer:       /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial:       018F87ED863CBA44A444D3970E1978F2DA5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 19:00:41 +0000
Manifest this update:     Fri 17 May 2024 19:00:41 +0000
Manifest next update:     Sat 18 May 2024 19:00:41 +0000
Files and hashes:         1: Q2PTAgsRCglGy8eZW7islDi2Wkg.roa (hash: 7U+45wlPgUPDK0KYYGQyuC/LydX/3x9YaVe0cKDQgKc=)
                          2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 31sT5ZH1mOmeSSL3tgA6H8qasdhsAGXj9Q7w5ztUWYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:86:3c:ba:44:a4:44:d3:97:0e:19:78:f2:da:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
        Validity
            Not Before: May 17 19:00:41 2024 GMT
            Not After : May 18 19:00:41 2024 GMT
        Subject: CN=bd6a7fc3cb3fd0ef94b3771d79791a55396d0e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:4b:8f:04:4a:06:76:19:f9:04:6e:b7:cd:
                    42:b7:f9:e5:8b:51:77:78:06:5a:00:05:bd:67:9b:
                    54:d9:30:c3:7b:82:5b:c6:19:1e:d9:ea:f2:2f:ea:
                    78:82:18:ba:9c:39:f6:bc:65:cc:0d:45:21:af:fa:
                    3a:4f:8e:7e:cd:75:7e:cf:69:4e:f9:4d:fc:a6:67:
                    01:77:6b:8a:90:00:6b:17:a1:88:d1:55:60:9c:1e:
                    ce:b7:fa:64:df:86:b9:27:42:38:bf:be:83:a7:13:
                    1d:10:7f:5b:e7:91:59:b0:1f:87:42:fe:b0:7a:25:
                    10:48:1a:4f:7c:4b:ad:19:c9:37:8b:49:62:e7:76:
                    95:42:50:8b:72:c3:e5:e5:92:80:05:de:d4:2d:41:
                    70:82:f0:87:0d:c6:d8:6d:9f:fe:51:31:e7:30:6c:
                    45:1a:70:ff:ba:af:f0:8d:f1:e8:8b:2c:e1:57:2c:
                    e4:67:ab:2d:c2:4f:17:ba:91:8f:42:85:6e:c3:31:
                    03:37:35:11:ee:2b:b6:bd:d8:85:5f:7f:7c:25:93:
                    c3:0f:7d:2f:42:06:66:c6:c1:8e:51:cc:19:db:f4:
                    02:b2:31:bc:ec:30:f9:4c:c5:46:22:10:45:5c:55:
                    b5:68:e2:c0:08:fc:4b:b7:60:52:b3:bc:dc:70:4d:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:7F:C3:CB:3F:D0:EF:94:B3:77:1D:79:79:1A:55:39:6D:0E:99
            X509v3 Authority Key Identifier:
                keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:7e:13:7c:e7:3b:fc:9b:c5:fe:bd:ae:ed:f2:25:cf:1c:
         7e:76:35:c3:bc:f0:db:db:ae:14:43:cb:b8:4b:d2:43:69:e0:
         95:f0:15:eb:fe:9a:1f:65:b5:19:5a:6b:0d:00:7f:02:f8:13:
         eb:39:45:b1:05:1e:ec:68:fd:36:38:24:2a:b8:b7:c9:aa:b3:
         7c:fe:8d:f0:ab:cb:f4:e8:8a:3e:3c:99:7c:c9:39:3c:dd:f2:
         a1:e4:72:a4:07:21:15:a2:df:e7:73:91:91:74:ba:97:af:e4:
         96:42:bb:6f:93:67:34:52:71:0b:18:70:99:50:3e:89:b8:8b:
         52:55:cf:7b:2b:68:d7:2e:bf:01:2f:0e:ae:b0:a7:23:3a:9a:
         e2:a3:9e:7a:f6:4f:e2:b1:c8:05:a6:db:6f:8b:f4:3d:b2:fd:
         58:88:ed:35:0b:fa:7d:56:46:5e:42:b7:fb:0c:99:ff:8e:4a:
         a9:e5:1c:c1:1d:47:5f:d6:8b:20:46:58:ae:ad:30:08:b5:ad:
         11:f1:7a:63:db:0b:17:54:87:e6:0e:fc:78:1b:78:79:a3:95:
         88:f1:0a:29:50:29:51:68:c8:6f:31:98:ff:d6:65:b4:a6:57:
         22:04:89:53:50:70:36:29:67:91:1a:74:25:c4:f3:bf:f9:37:
         da:a1:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:53 2024 by rpki-client on console-fra.rpki-client.org