Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File:                     IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier:          FWd6DVPL3XUXVlDmyYV0xjlo5wYb7t9J+0J/nEfoQaU=
Subject key identifier:   87:37:DA:C9:9B:EC:BF:C3:A7:82:5F:3D:5E:69:54:C0:48:4E:86:B7
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer:       /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial:       018F8C6EC9AEE270D9679EB69CF48F342044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number:          1198
Signing time:             Sat 18 May 2024 16:00:21 +0000
Manifest this update:     Sat 18 May 2024 16:00:21 +0000
Manifest next update:     Sun 19 May 2024 16:00:21 +0000
Files and hashes:         1: 0jjMWuEzKUmQy_ex7oAtFgxvM1Q.roa (hash: Uko0PZFHSlx1DbUz7y8nSVKZckr6KH7P5N8GYFI+9t0=)
                          2: Eb4OhYaz-jChP1vBqEqHjo1wY18.roa (hash: GsQOEtmb5xThszkTKcQRMsw7bvLcuTv+MjNz0YJ4MDI=)
                          3: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: wvXloNpQIXrkUAzIjsuUZn8gdk9t4iAcrSee5kPO9rg=)
                          4: _Pin8D1ej_AfrLVibWW0ihc189A.roa (hash: pdJKS8pFuTtwhBkfqj+kzWvugBqx5OK9jan3iBnDRR0=)
                          5: g4HPIAkIk5f_sy3be6ZpZncm-WY.roa (hash: REQtMb6s274Q1pWUxRtiiCgcApeQvsZFnwIU8ye40fc=)
                          6: h0Ch1bKbN82unRn4B5G8wu3X8uU.roa (hash: 1hcNL73fihh14PgvgHM7qdOguoM6mVEiizwuznlUBzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:6e:c9:ae:e2:70:d9:67:9e:b6:9c:f4:8f:34:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
        Validity
            Not Before: May 18 16:00:21 2024 GMT
            Not After : May 19 16:00:21 2024 GMT
        Subject: CN=8737dac99becbfc3a7825f3d5e6954c0484e86b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:6b:d6:84:7e:8c:a7:bf:b1:8c:84:2b:87:
                    f1:ad:d7:14:5e:8d:8d:b9:a2:f3:cc:d7:f3:47:4e:
                    87:b1:d3:c9:4c:0b:e7:cf:5e:67:73:ce:74:76:37:
                    d0:46:50:02:ac:d7:22:ab:86:2d:95:3a:dc:13:03:
                    f8:67:51:0a:4a:89:aa:84:68:d0:93:c7:14:10:06:
                    90:95:89:e7:59:03:75:bd:7e:39:3a:08:cb:76:b6:
                    4a:67:bf:de:fa:ec:9e:35:e5:d3:53:c4:98:4c:58:
                    cc:39:06:8c:10:a7:1f:fb:49:e0:44:dd:c0:b9:e5:
                    49:05:65:83:2d:9d:04:35:9f:c3:f5:93:e3:13:f3:
                    41:db:8d:5c:a0:82:4a:b3:1b:b6:83:34:bf:02:87:
                    6a:6e:3b:21:51:a0:0b:d5:72:4b:7a:d6:e1:a4:4d:
                    20:cb:7f:1b:6a:06:cb:6f:79:6e:a6:b4:fe:d5:55:
                    a4:b2:d7:93:ca:79:e1:c5:da:e6:84:bb:92:b0:15:
                    6f:2c:b3:d1:79:df:d9:bd:3a:0a:5d:99:f9:96:3c:
                    ba:7c:38:d6:cf:e7:71:5f:0c:2a:3a:b0:7d:fa:a4:
                    60:be:20:50:91:98:44:a1:68:d5:1e:02:60:04:53:
                    4a:ca:5f:1a:d5:c8:e5:48:93:fd:b5:f7:65:43:b5:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:DA:C9:9B:EC:BF:C3:A7:82:5F:3D:5E:69:54:C0:48:4E:86:B7
            X509v3 Authority Key Identifier:
                keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:18:8d:fc:66:6c:a6:82:21:27:60:d5:8a:b8:83:dd:78:
         01:08:9b:37:0d:c4:3f:fb:d9:9a:e2:1a:e2:39:77:bf:b9:68:
         0e:6e:c0:07:46:99:2e:a0:3e:cc:92:47:d9:cc:a7:98:86:46:
         10:75:1d:bc:43:43:c1:17:91:57:0c:ec:11:8c:8d:b5:54:cd:
         1a:8d:7d:5d:f1:eb:9c:5b:df:e2:84:e5:3e:ba:9c:6a:62:3f:
         a8:02:59:48:72:26:6d:a6:30:6f:98:85:85:37:21:6b:11:24:
         43:f0:de:cc:15:cb:33:a1:86:1b:a6:e5:0e:cc:95:90:8a:ea:
         ef:55:c8:cb:11:0a:fa:a9:93:34:48:0b:fd:dc:08:78:42:00:
         59:42:47:5e:6a:dd:41:1d:59:26:15:70:de:bf:26:19:a7:d3:
         38:73:3c:47:f3:90:c3:47:a0:de:79:18:ce:71:e8:38:77:04:
         7f:a7:ca:57:f0:f6:94:9a:6a:08:20:8c:76:8a:59:b0:cf:d2:
         8a:c5:48:d0:f6:5b:7c:b4:a5:a2:d3:ca:fb:d7:b1:d7:8d:cf:
         75:2a:90:a6:45:7d:10:2e:e2:ad:83:04:40:8d:90:24:d5:9d:
         03:09:39:3f:e6:a0:93:19:b4:74:47:98:21:10:87:47:58:0a:
         4f:c2:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:00:33 2024 by rpki-client on console-fra.rpki-client.org