Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
File:                     sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft (raw, json)
Hash identifier:          q++r6tlYoHbioK1HkArFOj/Y7o8pyopgIS+L5ClCSIs=
Subject key identifier:   71:A7:26:F4:1A:09:33:D8:F8:6E:7B:BF:A8:1B:0C:DA:F2:20:49:86
Authority key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Certificate issuer:       /CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Certificate serial:       018FB6EBF4DD7A689938337F52021DC8C6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
Manifest number:          1190
Signing time:             Sun 26 May 2024 22:01:07 +0000
Manifest this update:     Sun 26 May 2024 22:01:07 +0000
Manifest next update:     Mon 27 May 2024 22:01:07 +0000
Files and hashes:         1: SeQR4rtfAavpmT9bp6VCbI-Y4mA.roa (hash: AX7MGwk2aniY7SnwAufyI55Fi8RsYokkeCW8ZWeoW/k=)
                          2: nNVpYsmGV3WCQgrWoCF612hh45U.roa (hash: wHZv2kFUAaf9BLzL2JAS25Y7LGXWvg9AYSI7lzsiDkQ=)
                          3: sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl (hash: T5y+ojNEaovXoisdBJ+w5GYoaM+TNmxhsPe5SNF9UKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:eb:f4:dd:7a:68:99:38:33:7f:52:02:1d:c8:c6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
        Validity
            Not Before: May 26 22:01:07 2024 GMT
            Not After : May 27 22:01:07 2024 GMT
        Subject: CN=71a726f41a0933d8f86e7bbfa81b0cdaf2204986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:79:24:86:a4:f0:0c:39:02:da:cf:24:f3:
                    bd:7e:49:d0:8e:a7:11:3c:5b:e9:c9:50:83:5c:6e:
                    92:86:4d:0d:cc:95:6f:92:f5:9d:d2:70:4f:f7:4d:
                    68:aa:83:b6:a8:e8:86:ed:b1:64:45:08:0d:89:0c:
                    90:7a:c1:77:ae:1e:07:8c:a8:79:8f:f9:82:1f:61:
                    03:58:ca:3e:9a:22:b1:e1:9b:60:2e:08:53:3f:8e:
                    3f:53:51:6c:d5:11:92:46:ef:e6:e6:f0:5c:6d:91:
                    46:47:4b:e7:27:7c:9f:f4:3b:e9:83:31:2d:8d:47:
                    19:32:75:c2:d7:2a:48:0a:9a:d5:d3:a9:d2:ca:62:
                    03:7c:3b:d1:78:be:cf:47:3a:f6:03:1c:ab:88:18:
                    4a:37:8a:f0:b2:31:c7:77:a7:d5:15:55:f3:42:a8:
                    4e:ac:dc:7c:73:ff:b0:ea:07:6d:c3:58:f7:d8:81:
                    fb:c8:a1:ff:e5:c1:cb:e7:62:f0:99:09:9d:fa:4e:
                    8d:d9:58:ee:6b:a7:d9:ca:41:1a:b6:24:23:81:51:
                    25:78:1b:20:15:87:40:92:cd:a5:02:b4:96:74:e4:
                    8b:68:fe:54:53:c5:8f:a0:24:c0:4c:2c:54:f2:18:
                    e9:ca:c9:54:96:10:d1:d5:63:21:f3:ba:c0:b0:47:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:26:F4:1A:09:33:D8:F8:6E:7B:BF:A8:1B:0C:DA:F2:20:49:86
            X509v3 Authority Key Identifier:
                keyid:B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:74:22:72:2e:1b:cc:48:9b:c4:e9:09:b8:5e:a5:64:ec:
         1c:86:f9:9f:fb:12:e4:c8:57:c9:7c:29:26:97:8a:78:1f:d5:
         f0:a2:82:69:32:0d:5f:7e:0a:44:0d:ab:9e:0b:6b:81:dd:a3:
         ba:9b:fc:68:dc:59:e8:6f:b1:3f:4c:66:d9:73:ec:a7:48:46:
         2a:35:09:9c:3b:54:2e:ae:19:6a:50:65:ba:27:9d:98:4f:ce:
         f2:17:e5:8a:0b:ad:8c:d1:b8:51:f1:74:d2:53:2c:bf:b5:a8:
         4e:b2:37:1c:03:a1:cc:70:79:68:63:f9:44:c7:fc:3e:68:68:
         62:41:05:73:8c:84:d8:0f:5c:72:19:26:df:e6:ae:7b:03:01:
         72:63:25:9f:fe:df:ea:37:e6:4c:ff:a3:d7:db:bb:0e:85:41:
         04:bd:e4:e2:ce:26:9c:d5:c4:ce:53:9d:c6:26:7d:08:8e:b1:
         7c:68:35:8b:f6:d3:57:04:54:77:1e:30:f3:cf:c9:37:2b:3d:
         a3:ab:72:4c:1d:a9:c3:22:db:02:3b:ea:43:f1:69:dc:fd:d0:
         7c:38:97:fa:4c:b4:51:3b:63:93:28:16:35:bf:07:f8:42:2f:
         a4:e7:f5:6b:ac:3d:6e:9f:1e:39:9f:e0:e1:e9:00:d7:8d:af:
         f8:a2:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:28:00 2024 by rpki-client on console-ams.rpki-client.org