Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File:                     txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier:          Klc5RzVsHvDdmux1IJ9A+7muBQlwqxOrwfrVghQhV3s=
Subject key identifier:   5E:8B:89:3C:95:9B:43:72:99:57:3A:5F:56:21:69:B4:E4:01:07:2B
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer:       /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial:       018F874AFB2C847D184A403A043CE6EA0F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: X-NiJNOydEVn8QaTp84pepsXklQ.roa (hash: l0LVgdDi7xT11QfQg0F2z7jB50QR5KvnC6IbYqqblj0=)
                          2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: kaV0Q7MrvhmVVPamxAY0h2LyLWnWu7WKRLbXJA71wJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fb:2c:84:7d:18:4a:40:3a:04:3c:e6:ea:0f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=5e8b893c959b437299573a5f562169b4e401072b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:1f:30:41:2a:7a:1f:15:9e:5e:63:22:6d:
                    23:36:6d:09:1c:e1:8a:35:9d:d8:fc:5b:0a:be:c5:
                    07:61:17:14:0e:ef:10:b7:2f:b8:74:76:5b:d3:b5:
                    d0:c6:53:1a:9a:b1:c1:f7:64:0b:98:87:fd:2c:9a:
                    0f:18:35:7d:51:82:65:4b:a6:31:25:89:a9:8a:97:
                    ff:9d:ce:98:0f:84:53:a9:51:eb:2b:e0:46:5b:00:
                    f3:ab:18:4d:f3:c7:08:95:c7:f8:24:27:72:95:eb:
                    12:4b:11:56:7f:61:d0:14:65:d9:3e:03:5a:d2:3a:
                    55:0e:b8:ca:89:1e:fa:49:12:b9:f5:57:2c:0b:f7:
                    c0:d2:88:0b:fc:9f:34:c0:dc:a3:14:dd:d2:59:23:
                    52:f0:b8:d1:64:3d:b8:c5:90:82:98:e9:cb:4a:d3:
                    a4:7b:0b:5c:d4:de:a5:72:b2:b2:f9:06:94:e1:1c:
                    21:d5:6a:a6:da:8e:b0:f1:ea:74:d1:28:da:e4:42:
                    13:4e:36:ed:03:8e:64:ac:47:f2:68:c4:f5:d4:3c:
                    ca:fd:71:dd:89:94:38:df:09:0b:2e:1a:87:02:28:
                    37:52:4d:f3:a4:77:de:fb:af:d2:b6:22:fb:30:ea:
                    fe:6d:71:82:6a:43:67:57:c9:4b:cb:ab:82:b7:79:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:89:3C:95:9B:43:72:99:57:3A:5F:56:21:69:B4:E4:01:07:2B
            X509v3 Authority Key Identifier:
                keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:f8:33:02:6e:0a:e3:83:13:e8:9b:06:05:ca:12:8c:e2:
         c1:2c:40:e5:a0:5e:e2:de:42:aa:fe:f0:6a:65:ad:b0:b6:06:
         58:fd:d5:02:cd:fa:ed:a9:c3:ae:5f:b8:d9:05:5d:b4:ad:b5:
         96:3e:a0:2a:d3:03:82:4d:c9:e8:01:52:39:97:7f:2a:14:39:
         bb:17:59:18:ef:a2:b1:51:39:60:c1:70:80:47:c3:0b:bc:83:
         bf:90:5d:6d:6d:96:a4:9f:d6:64:4e:04:f5:fb:1a:f7:0e:79:
         9d:89:92:d8:9e:70:45:11:45:0a:ee:50:9a:47:af:4e:d9:bc:
         94:1f:4c:19:c2:dd:26:5a:bc:71:ba:52:6b:ab:4a:1e:c3:4f:
         02:16:98:64:92:26:4f:e3:7f:45:ec:74:91:d3:f8:0a:01:47:
         12:07:40:58:e9:d2:64:a0:8e:54:0f:46:36:8f:32:1d:25:5c:
         47:52:2e:70:9e:b3:df:28:ea:6c:3b:63:ac:0e:5e:3f:b6:c5:
         70:c4:9a:92:12:93:5b:31:20:c6:15:8d:41:a4:5d:44:7c:5d:
         ff:ad:9b:68:34:d1:fe:5b:c3:7e:dd:30:20:02:48:94:c1:65:
         51:34:49:37:9d:8b:9a:43:f3:ff:99:96:ab:b7:89:ee:ee:e2:
         41:db:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:43:46 2024 by rpki-client on console-ams.rpki-client.org