Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File:                     ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier:          KpyYF6ry8OHmAaXyT1Ln2eodRnq59AIGmJlsVPen+Cw=
Subject key identifier:   E9:82:B0:17:B8:80:B0:2C:92:85:80:DF:4E:D3:6F:17:34:14:CE:97
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer:       /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial:       018F96BC6E6EFFC7E47B1A05E1EF4BF6C599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 16:01:22 +0000
Manifest this update:     Mon 20 May 2024 16:01:22 +0000
Manifest next update:     Tue 21 May 2024 16:01:22 +0000
Files and hashes:         1: DDr25wR70ntiWcfhohtG3cBGEGE.roa (hash: mIb0IQL11Tde7zS2epwQuIuL0OmD1DgZztCuBTYVExg=)
                          2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: z7yMecFBVagYLu/+viBe2ZY2bej/PnyrAp2/WRl7xxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bc:6e:6e:ff:c7:e4:7b:1a:05:e1:ef:4b:f6:c5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
        Validity
            Not Before: May 20 16:01:22 2024 GMT
            Not After : May 21 16:01:22 2024 GMT
        Subject: CN=e982b017b880b02c928580df4ed36f173414ce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:16:92:aa:d2:29:e0:bf:a8:ac:47:8d:24:
                    b9:88:b9:64:2e:7c:c5:52:bc:4f:9f:d8:09:09:06:
                    75:8b:84:26:81:67:f1:67:5b:34:b9:a3:c3:7a:9d:
                    2b:19:e2:18:6d:d6:42:d6:64:0b:4d:1b:83:90:be:
                    89:0e:36:a7:51:ee:6b:35:b1:21:43:51:85:ef:f0:
                    01:b1:a1:9c:a8:bb:5b:80:e9:ff:89:a1:3a:5d:eb:
                    81:3c:f0:2f:aa:f8:4c:54:b3:7e:17:4e:2e:80:e3:
                    0f:56:35:10:c2:4f:3e:72:12:e8:cd:7b:3e:34:e1:
                    68:ce:58:ca:47:c9:1a:1d:cd:4a:73:e2:19:f1:52:
                    d0:57:3e:4d:97:63:6d:f8:a9:ed:5d:95:3b:55:96:
                    8d:ed:0a:c7:48:1f:6b:79:ec:80:e3:93:ce:ba:06:
                    23:cd:a9:02:83:58:e1:20:5f:e9:78:52:0e:08:b9:
                    1e:ad:8b:20:1b:f5:fb:78:4c:c8:8f:5e:3c:5d:5e:
                    cb:fb:e0:7e:80:4c:ba:45:2c:3b:8e:41:a8:87:b1:
                    89:b8:23:20:4c:d9:cb:d3:76:14:53:19:bc:60:a5:
                    c7:41:86:be:d9:5a:ee:6b:02:69:af:05:27:8b:f9:
                    3c:8e:87:6b:f6:79:51:a1:a7:81:4b:62:0d:6d:87:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:82:B0:17:B8:80:B0:2C:92:85:80:DF:4E:D3:6F:17:34:14:CE:97
            X509v3 Authority Key Identifier:
                keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:44:30:01:73:6b:9f:89:67:45:bf:1d:72:ea:e8:5c:33:
         09:57:04:66:21:b2:d5:76:87:f4:cb:98:59:58:08:b5:71:91:
         89:3c:50:17:ad:e8:94:26:70:27:4a:5f:8a:c1:08:7b:dc:ad:
         58:88:5a:54:17:06:ef:6e:dc:05:0e:fa:23:81:b9:f9:99:91:
         bd:09:86:6e:16:2b:f7:bc:6b:78:de:2f:5a:6b:a9:8a:06:85:
         d2:a9:06:8e:5a:bf:4d:93:12:70:6f:29:45:e2:9b:dd:90:f6:
         c7:88:e7:4e:e5:df:62:c1:9f:07:f6:0d:ba:4f:c9:00:e0:92:
         36:32:8c:8f:55:fc:ab:26:24:21:af:a6:6e:04:8f:48:bf:a2:
         e5:a1:19:de:22:0e:80:81:86:33:a1:4c:19:70:83:83:98:68:
         7d:36:1c:b1:42:1b:b3:ce:bf:41:6e:b0:f8:ae:95:a2:25:41:
         8f:59:4d:d4:f6:b7:2f:f0:0c:25:cd:ee:74:d6:39:52:ca:c4:
         94:42:cb:31:24:e3:cd:c7:d8:1c:1e:78:51:48:26:39:08:c6:
         2f:95:51:6f:4a:3a:f6:ab:99:29:af:72:a8:03:42:d8:44:ab:
         ac:77:82:71:39:06:df:33:ae:ed:b2:98:c5:18:c7:b7:7b:62:
         c9:d5:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:35:32 2024 by rpki-client on console-ams.rpki-client.org