Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          KGdg0/EksBiHGqsnxAnU7JBwJKh1f4pfFDIhuGhVvFk=
Subject key identifier:   08:C1:82:33:A6:33:65:40:B1:16:0E:00:E7:C7:A9:5D:9D:AD:6E:FC
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       018F2426D5D1ADA4D289FF7544EFCCAE6DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1175
Signing time:             Sun 28 Apr 2024 10:01:15 +0000
Manifest this update:     Sun 28 Apr 2024 10:01:15 +0000
Manifest next update:     Mon 29 Apr 2024 10:01:15 +0000
Files and hashes:         1: 0JOpQBThJ1AfmbjDUqUihb-3uHk.roa (hash: RWN5TEsa8wHLP13EfKfg6spfexrb6BzTBMk9Vp7trWc=)
                          2: 1XaidD0W_tH1O7iUsg4VFHAwqvI.roa (hash: ed3yF3q3zQOPjaKAdNrp9+QmkLShSq6J6QobhueTAOs=)
                          3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: GOuDkQhkY7WvnbYX5Aa3cVdAV2iRNqhSSy/GeUmUV4Q=)
                          4: OzWt-Y7nVeG8SDatgFXNfG3kiFw.roa (hash: Cvm4yITlF6f7NfrclLuwdeYgdZMXhsaDRg4TyF4dApw=)
                          5: XB_veWkmOq-0uuowit7GiPX-m3c.roa (hash: /lLqYu4BKxsxViUE9GqEciA8LWYu+WqheE+B47jkN2Q=)
                          6: c3p4s6DYZLDQz-1E2qXRDMEnT00.roa (hash: vDZ1VLwt5+lxEU03QhLEpMa8VR3Da+q71rhSYrzVIWc=)
                          7: d7-6yllUS8vN4jN78ehhIMzvWYo.roa (hash: 2OZUQl9ww3KH8UYaFYbVtOSfH17OzSeg1ww1a5fTVEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:26:d5:d1:ad:a4:d2:89:ff:75:44:ef:cc:ae:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Apr 28 10:01:15 2024 GMT
            Not After : Apr 29 10:01:15 2024 GMT
        Subject: CN=08c18233a6336540b1160e00e7c7a95d9dad6efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:95:5c:54:21:12:72:a8:05:bd:67:71:97:
                    37:46:6a:2d:34:52:c6:68:a6:31:d0:a1:e5:65:60:
                    6b:fa:73:ff:99:e0:1a:88:9f:a7:91:6d:55:37:27:
                    b3:be:71:eb:d0:f4:49:b9:20:99:b5:b1:b9:4e:ed:
                    cf:98:e0:be:f5:ee:eb:3b:83:46:04:b3:e7:91:5e:
                    cf:28:6a:10:55:08:2b:04:c1:50:46:d5:a5:fa:99:
                    3d:04:c8:f0:03:fa:0b:d7:d1:3f:ff:43:1f:33:1f:
                    fb:6c:61:0b:10:5c:fc:ec:d2:ec:b1:36:0e:30:7d:
                    5c:ab:a1:f1:58:5f:2b:cd:b4:ad:6c:10:44:65:2b:
                    20:6a:8a:ca:cd:fa:1b:8b:7a:4f:3d:1a:31:f4:1b:
                    03:2c:1b:f4:fa:65:90:e3:7a:f5:43:57:84:f0:9d:
                    7a:01:54:7c:9f:48:f2:c8:7e:4b:04:f1:03:8c:88:
                    ed:36:4e:72:8c:d0:5f:c2:87:21:b2:9b:dd:35:12:
                    9f:4d:6e:5b:db:22:bb:26:19:cc:c0:55:53:1a:b8:
                    3c:2c:9c:58:60:a8:75:79:98:04:b7:dd:a1:78:ac:
                    b9:0c:3f:3a:4c:86:47:c7:c8:47:82:c7:98:65:98:
                    dc:43:b3:2e:50:ad:fa:81:25:2b:18:88:87:c2:f2:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:82:33:A6:33:65:40:B1:16:0E:00:E7:C7:A9:5D:9D:AD:6E:FC
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:bf:d2:a1:7b:32:16:48:2e:a0:ef:ab:d9:f5:db:39:2e:
         3d:30:36:e0:e3:d2:0c:91:b0:fe:17:f6:4d:9d:0a:e4:6b:86:
         87:3a:24:96:31:9a:aa:e7:30:81:2f:17:f7:84:00:57:6f:dd:
         27:63:d7:58:e8:20:3d:94:1b:51:0d:da:aa:59:60:f7:96:70:
         88:1c:d8:0e:48:da:c6:83:c2:62:df:59:16:6e:8d:14:1b:62:
         c2:32:56:d9:15:a9:56:6c:a7:32:61:1c:eb:f4:81:a3:56:61:
         b9:2d:83:da:73:68:f2:96:fd:9b:5b:83:07:dd:46:fb:0f:dd:
         86:8d:25:18:6a:08:b0:68:3c:de:22:37:d4:be:2d:7c:e6:81:
         74:20:d9:38:18:b6:6b:4d:d1:5a:b4:e4:4b:7a:78:15:f6:e4:
         d6:2b:de:53:ba:8d:45:47:fb:de:15:46:70:98:a3:81:8a:fe:
         e9:83:e3:23:e2:32:a5:f2:38:4c:58:c3:37:d1:bb:d8:fd:9b:
         9c:e1:4a:db:a7:71:b6:cf:bd:a1:2a:af:df:1c:82:85:51:5d:
         3b:c8:57:97:ac:b0:e7:30:72:c1:50:98:64:06:ae:bf:67:49:
         b4:39:30:18:57:a6:e0:2a:56:72:0a:55:a0:37:f4:ef:4a:47:
         30:ff:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:42:45 2024 by rpki-client on console-ams.rpki-client.org