Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          5zM0B6dodR43NL6zcDBp5VneZj8UTKsZR7SyWR3DjEc=
Subject key identifier:   AB:3E:F1:D1:1B:8D:32:7D:D5:FE:34:85:4B:BF:13:49:8F:4C:25:11
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       018F8D4A5FEC104E0A44A466F258C9309AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          1180
Signing time:             Sat 18 May 2024 20:00:12 +0000
Manifest this update:     Sat 18 May 2024 20:00:12 +0000
Manifest next update:     Sun 19 May 2024 20:00:12 +0000
Files and hashes:         1: DWUG66fFz-tva3IV1AIOt_XglVo.roa (hash: cw0FLpXOdkucLVqG+he+FkBhBoW8gO03GJBq/a2yGAo=)
                          2: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: mlEhVJyCaSneXToibBz1echAv64bGtefOMESCU5jbN0=)
                          3: i3Jx9L0N2q2hPO-ZHz-MkhbEzkI.roa (hash: xzn7g70HXE+tF45Ss2soz1uJq0GT+p4fuwVAx//Pdl8=)
                          4: kjpSG_7RYTF6msZSN-XV_e7FTZU.roa (hash: yvuYpUHd1sBluPa9kkR3NxmnQI+Lo9Oi74rKyxjribY=)
                          5: z_OSxH5iGsT8eyHBWAB4PlAaBdg.roa (hash: B/qNXskgn5/9s9mRL5WbSNv4Af6gElvNCX0khONc9Tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:4a:5f:ec:10:4e:0a:44:a4:66:f2:58:c9:30:9a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: May 18 20:00:12 2024 GMT
            Not After : May 19 20:00:12 2024 GMT
        Subject: CN=ab3ef1d11b8d327dd5fe34854bbf13498f4c2511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:bd:a0:11:2c:51:41:74:25:b1:63:a9:48:
                    a6:05:a4:67:78:6b:fd:b3:dd:76:ed:95:c8:ed:23:
                    b8:c6:b9:2f:3f:3d:cf:e6:8f:dc:e9:c6:5d:41:60:
                    23:a4:b6:ba:9d:1b:9b:ba:70:61:95:77:a4:08:73:
                    0e:54:7d:a1:58:16:83:d1:85:d6:68:65:c1:67:22:
                    da:f3:38:f1:c6:48:e3:f8:34:e5:24:ed:f7:f4:c1:
                    2c:e5:bf:4c:da:a5:c9:e4:a8:64:c2:d3:24:1f:b6:
                    41:df:c0:d7:24:9a:7b:48:f5:9b:5d:df:6e:60:cf:
                    aa:0c:bf:e0:20:71:5c:4b:86:08:a3:a7:84:b2:a4:
                    8c:91:19:f9:df:5c:f3:62:4a:fa:80:48:28:fa:f9:
                    25:6a:06:1b:86:24:1f:8c:05:c2:8a:5e:b0:2e:82:
                    96:f3:ce:e2:fe:96:9f:bb:e3:f0:7c:91:de:41:32:
                    2c:4a:34:20:d3:df:77:23:5c:a4:84:db:a0:ee:08:
                    0a:d7:24:8f:98:62:88:56:b8:1f:0c:7a:9e:c0:43:
                    84:85:dc:0e:29:d4:32:58:dd:b6:62:17:a0:39:ca:
                    1f:3c:61:12:d4:05:58:cd:69:b4:71:e2:5a:f8:ad:
                    09:ba:cc:9e:e9:c4:05:78:35:4f:81:3c:81:f7:b0:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:F1:D1:1B:8D:32:7D:D5:FE:34:85:4B:BF:13:49:8F:4C:25:11
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:33:1b:ca:56:df:3e:1f:e3:21:79:62:42:e7:a2:32:2d:1c:
         bb:c8:5d:d2:19:a6:b2:d2:52:55:8f:66:70:23:f7:90:e6:99:
         bd:08:a1:b7:91:55:83:17:37:0f:35:d4:0f:f8:1b:d4:59:0d:
         bc:57:62:4f:5a:fb:92:ea:92:78:94:4d:c5:56:88:25:93:15:
         4e:1b:19:15:1a:d7:b9:22:45:bd:9d:a7:ff:c6:da:5d:0c:94:
         f0:9b:d0:7b:84:4e:8f:f6:d7:64:66:02:16:0f:aa:42:ef:a4:
         f1:70:09:2f:5c:f6:68:88:5e:7a:84:27:f1:6b:63:9e:3b:55:
         6d:72:d7:75:d1:96:4c:ca:99:8c:7e:e5:e9:76:77:2e:97:28:
         16:99:cf:f3:15:d5:f7:ab:73:71:43:bd:67:42:3b:e4:15:0a:
         59:c2:f2:f1:ea:1f:98:f1:96:50:44:71:21:3b:e7:6c:df:41:
         6a:7a:09:a8:c5:a8:65:b7:b0:bb:5a:15:d7:1c:9a:6b:37:ca:
         4d:fd:1d:0b:3d:5d:f5:07:2f:81:de:65:5e:d7:fa:7b:27:8b:
         c5:1d:e8:bc:c9:94:74:a2:a2:35:82:1d:17:20:54:ef:f2:48:
         36:26:23:b2:30:5f:ff:cc:fd:38:c1:60:7c:61:25:3e:6b:4a:
         1d:a5:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:31:19 2024 by rpki-client on console-fra.rpki-client.org