Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File:                     MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier:          GDnRDcL3ZuRuklqywkNWejV5kPp0PjgcaRfOEbNIcQA=
Subject key identifier:   ED:90:E4:C2:26:7C:1E:48:65:57:4D:31:89:59:A8:22:FF:09:BC:03
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       018F8748A899866C229C7F6D12D8FC4D5BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: ZZoa7GEadOyrjYAEW20p4DYxUf+whe2ygTtEVufhnuQ=)
                          2: yX6Br7BmjM-laiOnU-Of2yVCgQ4.roa (hash: E1j6kCDXaKbaQo2RKRCcaqT2LiXFHHrA5I/v6LV2EWU=)
                          3: zUIsfSA3l_N0FmxeasoyYdSuuUA.roa (hash: jl7snd80Gy6jgh8RIdAdW1avk0sccbnh5WnYBamAv7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a8:99:86:6c:22:9c:7f:6d:12:d8:fc:4d:5b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=ed90e4c2267c1e4865574d318959a822ff09bc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:d8:34:5d:b9:e2:4b:7c:d1:22:62:46:41:
                    f8:87:e4:bd:4e:7a:41:31:49:6e:94:03:bb:0f:c0:
                    92:9c:3a:58:a7:3b:b3:50:90:af:e2:8b:0d:d8:52:
                    5d:c0:03:00:a4:19:37:97:c0:cf:e5:71:94:69:63:
                    ee:44:8b:77:c9:a2:e1:19:ce:43:81:33:c5:6a:01:
                    67:40:a5:54:4d:7a:a6:2d:df:56:51:4d:93:eb:cc:
                    12:d1:24:77:a7:78:1c:60:c4:2b:24:4c:a1:21:b5:
                    3a:04:e2:cd:5c:63:bd:6c:c9:23:ae:04:5a:62:f2:
                    34:d9:81:6f:b0:a1:81:f7:af:f6:15:46:52:92:34:
                    6b:30:07:97:e3:24:f1:24:cd:91:98:c3:ab:cc:52:
                    8b:a4:a1:75:d7:80:e0:3e:34:5b:68:85:27:29:c8:
                    b0:1c:2f:98:14:06:d8:3d:c5:44:dc:cb:1e:46:6a:
                    97:b9:46:25:18:ad:36:8e:a4:6d:be:35:f4:b9:b1:
                    d9:38:8e:e3:be:fa:ea:eb:c9:d1:6d:dc:54:f7:1f:
                    ea:cd:aa:6c:3d:7e:aa:88:5b:f7:42:08:82:60:3f:
                    8d:72:59:8a:a4:a6:30:29:bc:fd:c0:01:c2:66:bd:
                    e2:f5:b2:a3:69:cf:d5:26:a7:16:19:11:01:24:2e:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:E4:C2:26:7C:1E:48:65:57:4D:31:89:59:A8:22:FF:09:BC:03
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:70:c4:f2:8d:b8:dc:5d:53:aa:8d:ba:4d:c4:df:e0:94:6a:
         75:a9:52:d2:e5:2d:14:11:84:80:87:d6:67:a6:30:11:d4:db:
         8c:5d:b7:cf:ad:48:fc:b8:90:3a:f8:3a:15:36:74:b5:bd:9c:
         12:19:a4:04:fa:3f:0c:fc:1b:24:9b:71:4f:f7:0e:8e:34:8b:
         9f:67:ed:c7:99:c8:09:c7:91:52:d1:dd:70:39:4a:71:cb:6e:
         1b:99:8f:0d:9f:0d:95:42:4a:a1:55:20:3d:49:f8:e4:76:ed:
         ef:a9:b6:8c:bb:40:06:06:a1:3e:86:6c:82:92:e7:59:0f:cd:
         ea:77:3d:55:84:ba:0b:c6:b7:25:61:80:d9:15:e8:38:e4:c9:
         eb:2d:31:e3:07:0c:c8:a3:18:e0:1d:27:63:43:d1:9c:50:64:
         17:f2:16:34:48:cc:8c:b6:60:bd:7b:65:7a:0e:18:ee:eb:bd:
         41:11:52:fb:f7:47:e1:50:ff:e3:b6:ee:21:b1:79:9c:2f:34:
         27:d9:f5:32:e9:e6:4c:ff:83:f9:c6:05:37:63:6e:59:67:43:
         28:71:b5:5a:7e:92:ce:99:a5:ad:e2:3f:03:7a:6f:a5:94:53:
         75:5b:b8:8b:fb:5a:36:d1:1e:9a:c6:5e:24:7a:15:3e:a5:62:
         c5:01:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:17 2024 by rpki-client on console-fra.rpki-client.org