Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File:                     H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier:          xCyipHRrJBMSJQ8fZLMa5D1F3SRBQMTfm5JFaeemBUg=
Subject key identifier:   58:F8:F0:32:B0:E2:EC:23:A8:D8:8C:CE:42:5C:73:14:0D:F3:97:47
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer:       /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial:       018F8824533C0281A4C2BAA7225BEE98BAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number:          0471
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: 0vc4YqJtT7Mk62B6ct_66D1OP4E.roa (hash: fQ2xrh9CLc9S9OJUsncgw1uF6dJ6YyyYoHMMLrpUXJ8=)
                          2: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: +dt+725J68+QAopqsbudjstzDayqt4Gt/6ftcNSH1eI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:53:3c:02:81:a4:c2:ba:a7:22:5b:ee:98:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=58f8f032b0e2ec23a8d88cce425c73140df39747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:ec:81:16:4e:ed:f1:35:33:9d:7e:52:b6:
                    16:cc:4b:0a:eb:4a:10:58:d7:7a:bf:37:10:04:03:
                    f3:66:4c:b4:6a:90:32:79:ad:e4:65:d6:de:b1:27:
                    eb:f0:40:43:5a:22:68:d4:93:0e:2a:8e:7e:53:87:
                    43:59:a6:93:45:a6:a8:9a:68:61:05:69:4e:50:7e:
                    f0:db:e4:32:5c:5d:30:5c:43:9b:a2:db:d5:45:f9:
                    aa:93:76:dd:d7:66:0a:b1:c7:da:0b:db:28:7d:7a:
                    00:73:f1:4b:68:d9:aa:4b:77:01:9f:01:35:68:29:
                    c8:95:31:9c:c7:b7:a7:77:7b:98:02:3d:4e:93:b8:
                    35:73:11:74:d3:e9:5c:b1:0b:3b:84:af:82:15:f7:
                    09:b5:93:63:0d:a4:b4:d7:88:d7:80:b2:7c:d7:49:
                    26:5a:d7:ab:f2:81:16:e2:83:5a:7d:8a:24:3e:a8:
                    8f:2c:84:90:64:25:a6:0b:bb:b8:43:31:d3:66:de:
                    9c:0c:d6:b1:d9:34:ce:b8:e4:5a:c4:89:91:56:80:
                    16:8d:4c:24:56:73:8f:d1:6c:2c:5d:29:56:f0:a3:
                    4b:e9:5d:4c:fe:43:cc:f3:d5:f5:ac:55:ce:18:e2:
                    14:46:f7:a4:15:51:36:29:48:37:74:5a:a3:77:01:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:F0:32:B0:E2:EC:23:A8:D8:8C:CE:42:5C:73:14:0D:F3:97:47
            X509v3 Authority Key Identifier:
                keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:93:63:cd:3e:fa:74:51:20:52:0e:b2:d9:8b:8c:62:72:b8:
         18:d5:9f:09:a7:d5:b6:34:c7:7c:78:e0:b1:a5:a0:de:21:5b:
         09:f5:98:8d:3c:b8:a3:91:8d:65:db:1b:06:4b:21:3b:47:29:
         f4:6c:a5:57:5b:79:31:a2:c2:90:8b:53:cc:ec:b1:3c:ec:85:
         e8:17:d6:b9:0d:43:7e:5f:96:a9:8f:05:24:e2:3f:4f:03:cd:
         59:dd:0e:ba:02:0d:ab:29:10:bf:a0:ac:ad:22:ab:01:2a:31:
         6b:2a:c6:ea:15:3a:d0:0f:67:17:37:a9:2f:0d:27:e1:26:c0:
         0d:cd:3a:e2:23:09:be:52:81:bf:47:6e:6c:2a:1b:f4:bf:d8:
         0d:c3:d0:98:05:a5:92:fd:f1:3a:1e:55:f6:5a:dc:1d:bd:54:
         53:0c:d8:bf:6f:42:12:55:08:63:fa:87:00:a3:65:83:7d:74:
         69:e2:60:e4:19:d9:6d:f2:b9:c2:22:be:a5:ec:54:77:55:85:
         8b:d2:ba:54:02:2a:91:d1:75:c0:df:21:ad:21:ef:6e:5d:75:
         d3:9f:61:04:aa:5d:bf:67:3b:ff:11:b3:19:73:cb:3f:eb:5a:
         dc:db:df:19:fc:53:ed:4a:5a:d1:9e:d7:68:2f:cd:67:06:85:
         0a:89:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:11 2024 by rpki-client on console-ams.rpki-client.org