Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File:                     RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier:          7bgKt4h65L41ZNaG8pwJZNNlRbReGYGru+VjoiWDyKI=
Subject key identifier:   10:6E:5C:F7:54:A3:FC:D3:37:78:81:45:C3:BB:A7:45:74:3C:0F:D0
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer:       /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial:       018F87ED371186796E67BE6641B2AD67B6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 52YP7oUW3l3Sb55xGgw16IutkklyMLOU0JlRKTFM42I=)
                          2: eU_MccWDoudyM8LaGT7rROZ0wnY.roa (hash: ugu5xQ+pYyuzCQqBcDPCB8/QECzvI7IF39TYwWwrt2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:37:11:86:79:6e:67:be:66:41:b2:ad:67:b6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47119a205683167925b9f04174312637b1600c07
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=106e5cf754a3fcd337788145c3bba745743c0fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:a0:91:af:b9:9e:9c:11:5a:83:64:2a:36:
                    d7:99:ee:8c:6e:f2:f5:4e:fb:b8:f2:8b:b4:32:f7:
                    2c:10:02:74:c5:db:dc:29:5d:06:be:d7:76:7b:bf:
                    b6:0a:4a:13:1e:61:9d:fe:d4:96:1c:df:52:51:f7:
                    e4:aa:8c:b3:0a:06:8e:fa:ce:4b:30:80:53:ff:fb:
                    f4:d7:ae:80:93:d1:99:0a:20:cd:db:28:f2:f5:d5:
                    75:c5:9e:30:b6:70:b8:c2:d0:e9:4e:d2:ef:67:61:
                    9b:83:76:8f:69:8a:4f:d9:a8:49:1a:c8:e2:9e:d9:
                    3d:79:9e:83:b2:b6:d8:28:2b:51:cd:01:a0:37:2f:
                    72:d6:9c:4b:65:68:fa:5a:25:2b:b1:ce:62:ca:44:
                    2e:0e:94:9b:c9:cf:21:2a:0b:49:70:91:11:f3:c6:
                    ff:9d:9b:2c:4d:f6:0e:1e:08:c7:b8:8b:76:f3:ef:
                    09:59:29:f8:8b:e5:fb:0e:25:13:ea:ca:ca:dd:10:
                    a1:e8:59:51:58:56:ea:83:24:5a:a7:0a:5f:ca:dc:
                    cb:99:e8:19:ad:04:e0:d0:d5:fe:64:02:ca:4b:12:
                    5a:b4:cf:91:32:05:90:37:d7:25:4d:f9:8f:45:72:
                    d4:07:e7:ed:69:e1:79:4c:2d:93:4b:51:a6:26:a5:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:5C:F7:54:A3:FC:D3:37:78:81:45:C3:BB:A7:45:74:3C:0F:D0
            X509v3 Authority Key Identifier:
                keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:3c:c2:46:da:b4:f3:59:03:1d:18:77:72:44:3c:37:bf:
         8e:9a:00:86:42:00:88:05:2b:17:2f:f0:b1:f7:7f:c5:7c:23:
         82:24:70:53:bb:07:5e:1e:cd:dc:19:21:49:16:3f:1a:86:80:
         32:93:3f:ce:15:0f:c1:03:07:c3:1c:10:c7:3e:64:9f:5a:4b:
         76:0f:37:8f:5e:56:78:ca:56:9a:70:97:3c:99:83:f0:c5:cf:
         b6:64:36:a6:4c:3c:e7:e6:76:b8:4a:5f:4d:ba:62:da:a7:eb:
         d3:da:77:ac:d2:4f:36:67:5c:e6:9d:56:31:2f:2d:57:0f:07:
         a9:1f:ae:be:f8:b6:b3:15:a5:4b:87:26:6f:e8:8a:d7:d8:09:
         44:83:14:f7:57:70:05:54:bf:5c:8c:6d:d6:54:cf:ef:a5:d2:
         69:ac:09:e3:76:06:94:bd:80:b0:4d:15:d9:23:88:de:a9:da:
         01:af:65:12:f7:94:aa:f7:83:c4:39:4f:48:51:8c:fa:d8:5b:
         e6:9a:ca:02:a4:2a:e6:8e:30:12:1d:bf:7d:bc:ab:7a:30:f6:
         c2:60:44:a1:2a:6a:d6:8f:fa:67:f4:39:05:2e:75:77:67:07:
         59:b4:3d:92:05:b7:a7:d5:38:c7:ed:0e:a9:a4:39:bf:ef:bc:
         00:e0:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:44 2024 by rpki-client on console-ams.rpki-client.org