Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File:                     i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier:          nsYFim08636gO0VF0Fe7l96ufyKQ+mk6qKia5DE0ZF4=
Subject key identifier:   26:7E:35:E0:11:D4:98:3A:20:95:87:8C:86:09:7A:C7:5E:CA:BC:65
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer:       /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial:       018F8749781EB73B2334A9DA8595404D9B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: Ct5K8CyXUvzvWZE1EnWXACu79c0.roa (hash: AUF5J7M+VrJ8hPO0OwpJS06fzU5ix/1r9l6HQIcEFHE=)
                          2: V9x18bJ54_kQN6ebNyjDokB3SYU.roa (hash: v8Ym9Ss8LtOCG2GaFaCLthEKDMH/F1SgBudNhwT3gvA=)
                          3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: mgxK0N7yi83nlVitARb2Z4jOqsE5TM5a6vJUeycp4DE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:78:1e:b7:3b:23:34:a9:da:85:95:40:4d:9b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=267e35e011d4983a2095878c86097ac75ecabc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:b3:c5:20:3d:f7:2a:c1:5f:03:34:a9:b2:
                    86:4e:61:b5:76:2d:9b:59:a7:60:eb:90:fa:3b:b5:
                    aa:48:4f:99:fa:9b:2c:01:a7:7a:c4:6c:94:96:1a:
                    82:5a:da:a7:51:28:bc:a5:7d:50:26:0f:03:e5:a0:
                    c7:ab:ce:9a:bc:86:a4:b8:54:c8:7e:3b:c8:b1:de:
                    41:67:58:aa:32:b4:92:aa:47:cc:66:e3:b3:85:85:
                    0d:2b:9d:87:7a:4c:ff:39:76:77:fd:de:c5:f1:44:
                    9e:02:db:04:0c:d7:19:36:46:08:69:af:3b:fc:7c:
                    b4:23:57:e9:4f:39:fe:18:d3:25:42:6d:ad:93:ad:
                    c6:e3:f1:fa:b9:44:db:8d:55:cd:ff:db:61:85:4a:
                    29:b6:d5:96:8c:ec:f8:05:50:03:66:30:a2:e4:e4:
                    91:e5:6d:5e:46:a9:57:40:7c:a5:08:b9:d7:88:78:
                    85:7d:51:ca:87:a0:48:a8:59:bf:98:83:ad:a8:ed:
                    95:dc:3e:ee:e9:a3:7e:03:a4:c3:a9:56:98:14:2f:
                    c3:03:c3:41:be:a3:01:66:df:c1:8b:09:8f:43:0a:
                    c8:6d:38:88:dc:b6:09:fc:2c:23:48:6b:11:2e:e2:
                    89:e5:1c:10:14:44:37:16:4c:e8:54:33:78:4a:98:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:35:E0:11:D4:98:3A:20:95:87:8C:86:09:7A:C7:5E:CA:BC:65
            X509v3 Authority Key Identifier:
                keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:98:e2:52:2b:1a:4d:b7:13:8f:88:b5:bb:42:1a:05:fd:
         6f:4c:b6:52:f9:63:70:fb:bf:22:44:a3:95:90:83:4e:37:74:
         45:0e:d4:f0:67:16:6c:f8:83:eb:d8:a9:f9:cb:46:43:bf:85:
         6a:bc:72:f3:92:01:ad:f6:94:e5:3e:09:3c:a1:73:57:5e:07:
         b4:96:79:ca:19:73:7f:eb:f5:2b:8b:ba:f1:e2:46:89:de:fa:
         b6:79:35:9a:c6:05:3a:a8:f8:0c:cc:87:e1:8d:0a:ad:54:e6:
         2f:35:05:c8:50:a8:97:47:a7:4f:be:d8:3b:1c:91:8d:24:96:
         9e:26:3c:96:ad:23:a1:5d:03:e7:f6:81:09:07:35:04:b6:75:
         ea:fd:a0:af:77:f8:ff:e6:13:30:4f:d4:57:55:63:20:c1:65:
         1d:76:46:d9:1f:33:ea:ee:ac:44:e0:9d:89:fb:0a:ec:08:e2:
         55:5b:6c:6a:3e:75:70:78:4c:39:d5:e3:d6:cf:dd:fb:86:69:
         b7:40:62:f5:d6:55:26:50:a3:09:85:90:da:f3:64:d2:59:eb:
         61:c1:90:e6:b5:82:f3:13:5b:76:29:63:30:88:a4:ca:d6:32:
         be:a8:40:d4:b6:86:7e:ed:d0:9b:02:d8:a7:a2:09:4c:dd:11:
         50:ad:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:41 2024 by rpki-client on console-fra.rpki-client.org