Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File:                     U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier:          qaoaTYtLEOaMuxhxK3cFVl4kpBNuKEyEvfIeh69Qy5Y=
Subject key identifier:   BB:F3:A5:4E:1B:87:B9:9B:8A:06:49:D4:78:E5:3E:6C:CB:D7:D4:FD
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer:       /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial:       018F8749B95F0123A86311DA93FFB0DAAE7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:46 +0000
Manifest this update:     Fri 17 May 2024 16:01:46 +0000
Manifest next update:     Sat 18 May 2024 16:01:46 +0000
Files and hashes:         1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: m4ZRC4V8hr9owHynlsBs2Jn5aNEt/TdLJ7wxX8tqfJQ=)
                          2: k2K8UyoGxxs5sY3Sk4zG8meqeW0.roa (hash: 9cVpETNG6dCHtXzJlnuBThE0c5zxmffdKap48Ytjrak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b9:5f:01:23:a8:63:11:da:93:ff:b0:da:ae:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
        Validity
            Not Before: May 17 16:01:46 2024 GMT
            Not After : May 18 16:01:46 2024 GMT
        Subject: CN=bbf3a54e1b87b99b8a0649d478e53e6ccbd7d4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:79:31:be:f6:15:0b:5c:0d:fb:f6:40:8c:
                    48:4b:12:eb:d2:47:4b:65:67:1a:ef:8c:7c:f2:4b:
                    7f:57:db:df:93:a7:ae:49:50:60:1f:25:5c:1f:30:
                    cc:3e:ed:6d:86:99:00:0c:3e:60:64:0f:88:e3:b2:
                    0e:07:fe:72:6b:31:b0:7a:c0:4e:43:2d:ee:5f:63:
                    20:30:bc:0f:6c:24:e9:e5:10:23:ef:57:91:cf:c4:
                    1d:48:fd:0e:69:c7:4e:cc:6b:94:6e:07:85:cc:67:
                    cc:5b:e8:2a:bf:71:4d:9a:27:d0:cf:7e:9c:79:65:
                    be:aa:d0:6f:e6:09:2e:e1:0f:13:7f:ac:8c:a1:5e:
                    e7:88:ba:1d:f9:aa:28:f0:92:99:7c:dd:cb:67:a1:
                    0d:bc:41:00:3c:3a:29:b0:f8:e8:9c:49:80:af:76:
                    3f:a0:59:9e:02:24:5e:47:9c:33:bb:4d:06:36:74:
                    06:8c:98:98:d9:ed:21:e3:04:ef:3b:9e:8d:75:c9:
                    05:b9:5f:8b:9a:87:8c:56:f4:e6:c6:31:c6:5f:29:
                    83:79:f0:fe:10:50:c5:1d:7c:71:02:aa:c3:70:6a:
                    2f:7d:3e:a2:fa:a7:8a:ce:01:50:12:3a:1f:56:40:
                    15:a3:45:f0:e1:5a:2c:c2:49:60:74:e5:fd:af:53:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F3:A5:4E:1B:87:B9:9B:8A:06:49:D4:78:E5:3E:6C:CB:D7:D4:FD
            X509v3 Authority Key Identifier:
                keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:dd:74:c0:9c:d7:59:e6:66:87:5d:c3:c4:1e:8d:cf:6e:
         53:a0:f9:7d:b6:e8:4a:75:a3:15:d9:bd:18:6f:8b:5d:9f:22:
         fa:a5:78:0d:92:c4:c3:ca:31:7f:7b:a0:91:fb:3d:34:3c:09:
         8b:82:df:93:84:18:f2:ee:95:0c:cd:1c:04:8e:44:a4:e1:d4:
         93:41:c2:de:a1:aa:bd:2f:5a:be:8f:cd:72:13:38:87:3c:de:
         5b:91:ce:29:88:0d:8c:4a:bf:aa:57:60:a1:b5:d9:99:1b:37:
         07:ef:a8:df:98:e0:a8:13:2b:15:22:5c:1f:71:3a:7a:f5:30:
         be:7e:a1:da:12:5d:4b:0f:cd:d9:1c:73:32:f6:b9:7e:84:81:
         3c:68:76:8e:6a:bd:c7:28:68:e1:d7:e5:af:59:1a:35:5f:85:
         73:43:e4:ed:0a:e6:b6:aa:3a:b0:80:c6:df:4f:99:e7:09:b9:
         a2:0e:dc:1d:02:1e:ce:e7:3d:bb:65:87:7c:2e:bb:5b:90:55:
         83:c1:af:ab:fc:f3:72:e5:3c:eb:b6:5f:91:e1:06:9a:1e:87:
         ff:33:cd:d6:a4:4f:1d:60:07:3a:ab:35:d9:4a:e0:2a:f9:05:
         43:74:34:56:b1:78:7e:a6:44:98:3d:78:0e:26:42:1a:ec:fb:
         23:7a:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:19 2024 by rpki-client on console-ams.rpki-client.org