Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File:                     iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier:          IMrjGJydKS72reqpPOnlMU2Cm2JDLm3EH78WpV4Q8d8=
Subject key identifier:   1D:5C:10:BD:6E:13:63:DF:CD:D9:16:6F:01:B9:AC:76:19:D6:28:85
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer:       /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial:       018F87B6124C9976B0A0C7E22A57BD21157E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:07 +0000
Manifest this update:     Fri 17 May 2024 18:00:07 +0000
Manifest next update:     Sat 18 May 2024 18:00:07 +0000
Files and hashes:         1: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: nBe2udg7wdHpt9zTA5g0YmCp2bfPzOMx8jSMdZtdQcI=)
                          2: yNhG0WmvC5yZi7-ovkjnbWUQxts.roa (hash: j6pIdl5Q9VXqZ7knDFJ1l/kvsr0uOXtJxhfR3DjzmC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:12:4c:99:76:b0:a0:c7:e2:2a:57:bd:21:15:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
        Validity
            Not Before: May 17 18:00:07 2024 GMT
            Not After : May 18 18:00:07 2024 GMT
        Subject: CN=1d5c10bd6e1363dfcdd9166f01b9ac7619d62885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:dc:d4:88:a5:ae:85:f8:52:28:eb:dc:53:
                    c1:3d:ba:6a:ce:2a:24:bb:ce:12:6d:38:8d:a4:23:
                    a4:29:a3:bd:20:ad:48:8f:93:f5:fb:c3:8f:3d:7b:
                    7e:0b:16:98:7b:77:f7:11:b3:48:23:c0:e5:7e:72:
                    6b:b1:8b:75:0c:d0:52:84:73:2e:d7:3d:90:3f:70:
                    31:6e:c1:47:c3:57:fb:92:76:6c:eb:fd:2c:19:6a:
                    1b:0d:7b:82:06:22:d3:66:6a:f5:c4:0e:11:c1:c0:
                    70:aa:9b:83:29:1e:5f:6c:c2:78:64:78:ee:4f:ec:
                    1b:04:06:c4:7c:a6:3b:30:ec:58:b4:60:a6:46:da:
                    e9:e7:1b:9b:ed:a8:82:87:3e:49:12:f8:f9:43:48:
                    ca:21:ae:a2:13:4c:37:10:d8:50:1b:ac:e9:77:17:
                    f7:60:3d:e5:ac:b5:54:fa:3c:dc:b0:d8:9f:98:52:
                    6c:c4:1c:3e:09:bc:d1:8b:b8:81:d6:0a:0b:a3:40:
                    cc:5b:4e:29:64:5a:9f:9f:ac:76:51:bb:8d:44:82:
                    26:cb:c5:b8:08:6a:84:93:34:6e:04:9d:fd:40:39:
                    d3:a8:2d:0d:92:87:d3:f9:f8:27:22:12:bf:93:f1:
                    9b:88:e8:ab:b1:49:6e:ce:2a:7a:43:84:1c:17:a3:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:10:BD:6E:13:63:DF:CD:D9:16:6F:01:B9:AC:76:19:D6:28:85
            X509v3 Authority Key Identifier:
                keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:9b:b4:a3:a0:ae:4a:25:1a:b0:16:69:20:d6:5b:5f:1d:
         2a:9f:d9:38:a1:76:cf:19:c7:8c:9a:65:f3:ff:7f:5f:bd:85:
         3f:97:f6:3a:89:6f:40:65:0d:d3:be:67:0b:54:1e:9a:55:7b:
         44:37:69:a4:fa:41:7f:cd:2d:a9:99:a9:27:e5:bd:c2:9e:e1:
         0a:4d:5a:8b:a9:1c:a6:d3:02:ad:3b:f6:6a:3f:30:ff:df:72:
         dd:64:6a:31:c4:bb:16:15:5b:2a:88:19:e2:70:d3:a2:ef:35:
         78:ea:a8:e4:ce:82:ca:8d:f5:3d:79:5c:fd:70:2f:d5:11:0f:
         8c:34:8f:76:ab:83:53:97:25:5f:ee:d8:d0:d9:6f:59:0b:50:
         04:7d:50:06:07:33:7a:78:ba:99:62:cd:01:ee:d2:83:a6:ef:
         a5:4e:6f:85:f4:b9:5a:6b:ca:aa:bb:61:7c:56:4b:a1:06:d3:
         d5:07:92:ab:29:9a:5a:15:14:ad:f0:40:f5:69:a9:37:bb:21:
         ab:3e:2f:3b:72:58:f7:3e:3e:04:7d:d6:cd:a4:ad:b4:6f:63:
         5d:c7:05:05:7b:16:c5:00:13:70:be:fa:74:0f:a4:31:b9:f7:
         14:83:d7:b9:21:a9:0c:d0:e6:9a:a7:4a:b1:cb:31:ba:e7:58:
         a2:db:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:33 2024 by rpki-client on console-fra.rpki-client.org