Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
File:                     KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft (raw, json)
Hash identifier:          SHXp/DRStIhu3yRJKjQ/5lSrhcgQj+VfX4nto3TuS/c=
Subject key identifier:   46:CF:79:D5:C3:9E:B3:10:8E:57:47:82:CD:35:07:E7:C7:EA:23:23
Authority key identifier: 29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
Certificate issuer:       /CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Certificate serial:       018FB1C84801327DEAA7141AC438F5C9F837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
Manifest number:          118E
Signing time:             Sat 25 May 2024 22:04:03 +0000
Manifest this update:     Sat 25 May 2024 22:04:03 +0000
Manifest next update:     Sun 26 May 2024 22:04:03 +0000
Files and hashes:         1: 2LznWitOwJw0nrlmleIR1SjucLc.roa (hash: g0Tg/Ae6mIhD/x99yf7a4KS7V41tfypZQeh0BI6YDJI=)
                          2: KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl (hash: dsF8JSxkQfT3QXHwu/4QCQK4fVzWOSYYSSkX2aSNypE=)
                          3: VPNe19xvXzWoRGMIFX7-3BDvCy4.roa (hash: Xjgf+vzurd/vncL7NiVWDAtL7P/PLCpabCTrIajDNzg=)
                          4: _RunQ5O74rbmNkV2HgwlyC4u7CQ.roa (hash: myNebH1OQScE+Kro/UAlzsQoAoqNjDnyZVpYC3wqp5g=)
                          5: eSHOLEOW0ZT8f0zX3SE5relMhZI.roa (hash: 6R155v8lntee4rE1CGDeUcgNWoFhZyqonWuqCr4M730=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 22:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c8:48:01:32:7d:ea:a7:14:1a:c4:38:f5:c9:f8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29878a2888c9ac3123c795ff9681f1957ca0f964
        Validity
            Not Before: May 25 22:04:03 2024 GMT
            Not After : May 26 22:04:03 2024 GMT
        Subject: CN=46cf79d5c39eb3108e574782cd3507e7c7ea2323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:06:f1:4b:c5:d2:f1:fa:7b:0c:9c:f7:29:
                    e3:0f:60:1f:2c:a1:a0:b7:55:bc:e5:a4:82:14:af:
                    a0:ba:10:da:ca:7f:5a:25:39:18:40:a1:29:e8:2b:
                    e2:fb:93:44:2f:3c:1d:60:c4:93:40:b0:1a:f0:8d:
                    5c:fc:8f:cf:25:97:4d:17:23:9c:fd:2e:9a:77:fe:
                    26:01:05:56:f4:94:f1:72:7c:65:bd:9a:dd:a2:52:
                    51:3c:2c:f2:c4:46:95:ed:d0:20:de:cf:1b:d8:df:
                    f6:53:fe:88:2b:19:2a:1a:81:66:95:c1:6a:96:b2:
                    ee:61:cc:57:56:b4:e3:91:b6:a7:df:81:13:b9:26:
                    62:a2:67:28:85:0e:77:0c:ff:34:8c:4e:2c:d3:36:
                    b3:8b:fd:fb:18:1b:66:cd:da:b2:22:df:ac:e3:87:
                    5e:4e:9a:3e:44:24:0a:de:80:62:61:4a:32:44:1c:
                    9b:22:d5:b4:fd:fb:b1:5b:4a:0b:0f:23:01:fc:e5:
                    46:96:b3:57:16:9f:df:72:ec:a4:05:c4:54:06:84:
                    7a:85:97:01:5f:33:e2:e5:35:36:5a:78:32:c4:b1:
                    c8:2c:ee:34:5a:9e:35:d1:e3:64:af:d8:37:b6:b6:
                    8f:6d:78:a1:89:57:59:96:72:3a:db:53:95:c0:9d:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:79:D5:C3:9E:B3:10:8E:57:47:82:CD:35:07:E7:C7:EA:23:23
            X509v3 Authority Key Identifier:
                keyid:29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:64:74:e2:e2:2e:09:68:67:ed:91:23:17:da:93:e2:40:a0:
         4f:7d:5b:75:62:a5:3b:b6:7e:de:95:a7:ee:ca:a7:1a:46:5e:
         45:af:8b:cd:6c:27:6f:d9:90:37:3e:9a:4c:4c:9d:75:fc:1c:
         1e:9a:8c:ac:c6:df:8f:f2:4b:47:cd:10:87:c7:42:a8:f0:51:
         5f:36:ba:66:92:c8:f2:77:c1:e9:e7:e2:7d:cf:c5:5e:d5:7d:
         54:0e:c3:c1:39:df:c6:92:c8:2a:29:ff:7e:f6:80:d1:36:6c:
         33:ae:62:ee:ef:52:27:57:7d:8d:b6:be:5d:c1:d0:ab:34:96:
         57:ab:69:e0:b8:69:74:40:30:e0:09:13:13:c6:3f:d8:90:8e:
         19:c3:cc:42:ac:c6:ba:52:82:ee:9f:96:08:19:67:f4:97:87:
         6d:aa:be:3a:40:96:5d:bf:c3:bd:44:22:6a:9c:ba:8b:e9:71:
         0e:03:43:14:08:f8:1f:1e:ca:3b:0e:7b:f2:61:8c:55:02:dd:
         e6:e0:e9:e1:ea:db:8b:b1:d4:45:bf:83:fb:99:ca:68:cd:10:
         2d:b6:58:26:31:0b:c1:25:22:fd:8d:32:e9:79:4a:ba:7b:c4:
         7b:1b:10:36:11:54:a9:b9:43:62:59:e2:e3:59:0e:ce:fc:27:
         69:d3:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 06:55:04 2024 by rpki-client on console-ams.rpki-client.org