Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File:                     MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier:          4s3h2PNxzl/5NFIk+gWyQdCRi/W6GmJmpJ/7EQZeZQY=
Subject key identifier:   22:C4:8E:84:8D:5C:9E:F5:49:EF:B2:F0:82:43:C0:DB:D9:D5:56:A7
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer:       /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial:       018F874AB7BAE1D174265EF049FB6707BA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: HGpaAMBLzlA5gi5f-IBCc4PNSxY.roa (hash: SyNsBnZjAO7355XUrCO88YKUBU1G5/ufic2xmLR/iB8=)
                          2: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: wEKMGybgIS8kts9QumEBDZxroyP8ko5NoUKrYvLaGiU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b7:ba:e1:d1:74:26:5e:f0:49:fb:67:07:ba:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=22c48e848d5c9ef549efb2f08243c0dbd9d556a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:5b:5d:0b:4e:f3:5a:c8:2f:b3:10:aa:e4:
                    60:87:32:14:3a:57:38:22:8e:bb:89:ad:81:fa:21:
                    8d:8b:f6:e0:f6:0c:7b:f7:de:6d:b1:46:4f:21:ae:
                    04:5f:0d:b5:d0:c3:e7:86:1e:ec:e4:58:72:78:eb:
                    d8:14:cf:db:bd:f7:6a:d3:c0:78:de:d8:12:ad:60:
                    4e:53:e1:7f:0d:fc:a5:20:30:b2:51:89:06:91:ed:
                    6f:5c:4f:72:f2:9f:5b:55:29:b0:b1:ac:27:bc:7f:
                    bf:53:5f:a8:57:9d:3d:74:e9:f7:b0:ba:00:20:7e:
                    cf:c0:82:46:e6:ee:1f:91:44:be:c2:05:44:1e:9c:
                    e3:7a:1e:4a:b9:ea:a7:fb:64:1d:76:e7:36:2f:7c:
                    2d:38:53:d1:23:36:a2:c0:89:2a:c3:94:46:e2:aa:
                    bb:d9:12:bc:60:fc:cf:68:c7:03:75:36:11:a7:35:
                    2c:cf:15:20:fd:23:63:48:24:e7:a6:a1:c3:53:91:
                    83:c2:91:d3:5e:76:75:89:56:1d:f5:74:9a:73:f8:
                    30:d3:f1:6b:5b:20:21:a6:08:a9:4f:3d:95:51:c9:
                    03:fd:08:6e:82:ad:0a:3d:c2:db:de:80:9b:26:1b:
                    b4:55:cc:2f:65:21:e0:bf:d4:37:52:6a:96:c6:e9:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C4:8E:84:8D:5C:9E:F5:49:EF:B2:F0:82:43:C0:DB:D9:D5:56:A7
            X509v3 Authority Key Identifier:
                keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:ad:ed:0b:89:94:d0:03:6b:99:d2:45:de:08:5a:3e:dd:
         b1:30:01:31:d7:47:30:c8:cc:8f:e8:ae:c3:b8:2a:ce:1d:dd:
         13:7e:b8:6c:aa:59:37:b8:2a:e5:6f:ec:5e:cf:9f:59:d9:dc:
         70:20:37:23:43:ec:3f:1e:ce:52:40:9e:61:c2:68:12:f7:56:
         99:cc:e0:3a:39:7c:b1:9f:ca:20:76:54:f2:df:4d:f0:5d:b3:
         81:72:c6:d8:8f:cd:13:7a:ce:ec:a9:18:f8:4d:23:70:93:ef:
         35:23:61:fb:04:88:db:6a:77:40:8d:fc:b3:71:05:ff:cd:b0:
         08:3b:2c:df:12:09:72:b3:06:e3:28:cd:4b:44:77:f0:cb:02:
         d7:2d:e9:a7:c8:00:af:44:a2:2b:65:a9:a7:5b:60:e3:04:df:
         25:fa:b1:ff:d8:85:ce:13:dc:6c:c0:5c:0d:7e:7f:97:e7:f2:
         68:20:20:c2:00:29:b1:1b:d0:71:13:11:85:72:c6:e8:f8:43:
         1a:a7:97:c8:d0:7e:a3:40:80:30:32:b2:4d:a6:75:9e:cd:4d:
         34:4c:e8:47:8b:30:4a:d7:a8:66:5f:7c:a7:9f:5f:54:57:dc:
         1f:75:e2:1d:55:bf:08:43:93:aa:7c:17:2e:d7:10:6b:de:8c:
         7d:f6:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:11 2024 by rpki-client on console-ams.rpki-client.org