Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          CvLhdqj0Db7biIeSOfJAkHoL5v3jLHreuv6jDg/WHt8=
Subject key identifier:   3E:61:C4:6E:83:86:29:31:82:AE:5A:D8:BE:0E:5E:33:FA:89:47:87
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       018F8749EFBA86AABCB0B13225829B451760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: 1-Mwqi7LkA3VtZaUEM_DqPcOonw4.roa (hash: Sy0cGqNkxOSenMDEtIthEJeAHaVoABm/xzXAIG22V3Y=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 7AOzwVkuozVnuFOIh/+OeUVk/HzJuD8dSFx3GnxYxNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ef:ba:86:aa:bc:b0:b1:32:25:82:9b:45:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=3e61c46e8386293182ae5ad8be0e5e33fa894787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:a7:f2:12:07:41:84:c6:e8:c1:d9:7f:76:
                    a6:44:3a:be:21:8e:fc:eb:ea:71:66:d9:b9:0f:43:
                    ac:ef:b4:1f:9b:fe:bd:2a:08:ea:23:c0:02:1e:da:
                    4e:16:f6:78:6a:f7:e0:7b:07:27:a2:65:31:5f:aa:
                    3a:24:83:b0:ac:f4:e5:11:1c:db:64:e9:29:71:24:
                    14:ca:f7:ad:ab:a2:c3:10:bc:48:b0:ad:dc:5b:c1:
                    51:e0:8b:6e:30:57:0c:1e:23:61:e9:2b:43:16:76:
                    2f:52:d3:91:ad:1f:73:9d:5f:25:be:8f:6e:ff:e7:
                    92:52:64:b6:25:d4:87:6c:5e:11:5e:ac:c2:1f:73:
                    a2:6c:a8:cf:7a:2e:a4:12:54:4b:42:3d:04:1e:81:
                    2d:08:fe:2d:47:b7:84:0b:e6:22:ac:d3:ce:8a:ea:
                    1d:ee:9b:08:9d:b3:9f:87:30:d5:a1:d7:e3:8d:dc:
                    ab:95:cc:40:e8:ae:80:d7:a6:04:a7:5e:a6:7f:11:
                    a6:b5:c8:fb:78:79:9f:e1:35:49:8a:34:fb:78:73:
                    60:11:cd:5e:cd:26:85:24:10:b8:3e:f8:3f:70:b3:
                    4e:c0:47:8a:70:24:17:a8:e1:1b:b4:12:1f:77:ab:
                    56:ca:4c:b8:24:90:3b:b0:c1:5c:60:dc:f5:ed:e2:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:C4:6E:83:86:29:31:82:AE:5A:D8:BE:0E:5E:33:FA:89:47:87
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:b1:6a:84:13:68:84:fb:53:ab:93:7d:85:b2:04:53:1d:
         81:7e:0a:a3:ee:e5:cc:35:b2:4e:5a:c7:1e:7b:f6:ad:db:13:
         0e:4d:16:e5:18:d9:72:b3:4c:9c:05:d3:1d:5c:d1:3c:b0:f4:
         2e:56:ae:13:54:ab:4a:74:cf:02:f8:1b:6a:d6:ea:0c:a1:5f:
         2a:25:f5:77:83:c7:51:44:56:a1:42:2e:ab:15:3a:e8:17:9f:
         ec:9b:8d:f2:d4:10:00:ef:c0:78:9a:9c:41:0b:a8:6e:66:d7:
         70:ec:4c:e6:fc:5c:8d:6d:7f:1f:a8:51:05:b0:1d:cf:60:89:
         76:16:26:21:30:c8:22:af:00:27:c9:58:60:ca:5c:c4:b7:f9:
         88:79:4a:11:8d:bc:c7:0d:30:1e:fd:3e:8d:ad:40:ab:ce:f9:
         75:aa:f4:5d:00:85:95:32:1c:bd:37:1a:90:2b:00:be:3f:26:
         b4:9a:65:42:b2:12:0a:b9:02:52:f6:dd:ee:62:4e:32:84:2d:
         0c:9a:17:9a:36:7f:c8:1d:e5:07:fd:6b:51:14:46:4d:10:a3:
         33:97:5f:6b:c8:43:98:58:45:a5:cb:36:57:3a:86:2f:e3:ea:
         d0:1a:31:2e:80:8c:e2:ae:7f:da:c6:74:6a:e4:a3:b4:56:51:
         e7:67:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:23 2024 by rpki-client on console-ams.rpki-client.org