Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File:                     MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier:          CWyKV2CJOffRWgbCqDhBW3MsSGrd5GheUvkIGMibNc0=
Subject key identifier:   98:4C:B7:E0:53:95:87:F4:AB:64:F9:21:D8:18:FF:02:40:92:2A:D7
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer:       /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial:       018FB458B8AFE81C54CFC0499A757FA483D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number:          1191
Signing time:             Sun 26 May 2024 10:01:04 +0000
Manifest this update:     Sun 26 May 2024 10:01:04 +0000
Manifest next update:     Mon 27 May 2024 10:01:04 +0000
Files and hashes:         1: K5o5NDhMgEzaXHJDr2sWJq5bZYY.roa (hash: bROJbWlGBa/EQzAwq+AhnyRITf6yIrKSrPT+yKv3WGk=)
                          2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: rLUARWiHazaJrOX/F/ximf72nkYtGutEj21Xy5FhIlM=)
                          3: yLk3xIY2BF_etWCgQ65Sq55kxyU.roa (hash: 4I2dYSnZbAV0MAUEMCQ6COIQqaIvjuD2TKR27aGWoUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:58:b8:af:e8:1c:54:cf:c0:49:9a:75:7f:a4:83:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
        Validity
            Not Before: May 26 10:01:04 2024 GMT
            Not After : May 27 10:01:04 2024 GMT
        Subject: CN=984cb7e0539587f4ab64f921d818ff0240922ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:33:42:c1:98:8c:1d:b1:8d:cf:ca:35:64:
                    31:83:e4:9b:39:46:e1:0a:28:6b:6e:58:bf:b7:bd:
                    29:a1:c5:b9:f0:a9:27:6f:40:d4:95:ee:fb:04:02:
                    b7:9b:27:10:d9:5b:67:e5:c0:e7:85:19:db:87:e1:
                    16:d1:e5:3e:aa:66:44:9f:c0:3d:09:93:58:6a:4a:
                    eb:cb:79:83:02:e4:44:15:d1:1d:7b:e9:54:2a:d7:
                    e5:87:72:23:11:28:d6:75:57:3d:c5:50:72:15:85:
                    77:ab:3e:29:17:95:e6:4d:d9:d3:ba:6c:27:38:ce:
                    f3:3e:e4:7a:5e:44:61:c5:e6:13:8e:63:c5:0d:71:
                    11:22:a8:b8:7c:a8:51:ff:24:f6:83:95:ba:93:cb:
                    28:ea:a6:8f:e1:79:19:10:35:c9:c0:ae:2e:31:61:
                    57:ca:80:1c:83:54:dd:be:e7:a8:2b:2f:77:0e:17:
                    19:bb:e4:fa:74:6e:66:5a:68:b0:3f:de:24:8a:ad:
                    0e:3f:b3:69:b4:22:aa:22:f4:ef:a9:c2:bf:da:e3:
                    f6:61:02:1d:1e:b2:05:f2:ad:0e:68:0c:a8:4b:e7:
                    fe:84:da:83:8e:fb:48:f1:2a:2b:b7:12:1d:d4:ba:
                    e9:bf:43:61:14:89:34:68:af:62:b6:f3:2a:06:b2:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:B7:E0:53:95:87:F4:AB:64:F9:21:D8:18:FF:02:40:92:2A:D7
            X509v3 Authority Key Identifier:
                keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:6e:0e:2b:03:4b:1f:39:4e:b6:9b:eb:21:bf:b6:06:22:
         a2:6a:9d:09:3d:a7:e1:16:a2:c1:66:10:19:a4:0e:9f:bd:4e:
         7f:fd:ce:28:fb:96:01:22:a2:80:09:3a:8d:88:16:7d:e2:f0:
         65:44:bb:f3:0e:13:f0:7a:2a:d7:b7:e4:07:aa:7b:84:99:9b:
         d5:54:7e:df:1c:c9:34:6a:6e:2f:75:9d:f7:a8:a6:f1:75:de:
         30:4c:ea:ae:c9:eb:51:0c:ca:60:51:e5:b9:48:c6:75:db:d4:
         db:5e:65:60:26:c6:5d:45:26:d6:7a:53:76:da:23:2b:3e:d5:
         99:0e:5a:93:cd:3b:65:65:6f:8d:b6:76:25:53:34:15:d6:f7:
         13:26:c2:82:36:93:b0:d7:a1:60:2a:b1:bf:bb:a4:1a:c4:d4:
         9a:88:1f:ff:38:6a:40:36:d3:2c:47:8b:c3:1e:ef:25:90:20:
         b2:7b:ac:53:03:cd:42:73:5b:e5:70:ff:c7:9d:aa:f9:18:7f:
         fd:e5:8d:b1:cd:5f:5b:f5:7b:68:09:70:cb:90:96:47:c2:9b:
         b9:a7:02:d2:99:3f:d8:be:4a:f8:6d:ca:5f:2e:d5:f5:ba:54:
         ec:1f:24:a4:9d:fe:de:50:82:a5:a9:7e:d9:14:7a:9e:19:1f:
         dd:3d:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 16:54:36 2024 by rpki-client on console-ams.rpki-client.org