Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File:                     vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier:          cZksd8CGZuF3C3Q9BHIWNuI1/pskCXTLW3LFxT43t08=
Subject key identifier:   24:D7:E5:C1:F0:A9:75:E4:31:E4:4C:C0:0E:46:3E:60:BB:DA:2C:01
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer:       /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial:       018F87B6476EA901BE843FE968C2B0C7D87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:20 +0000
Manifest this update:     Fri 17 May 2024 18:00:20 +0000
Manifest next update:     Sat 18 May 2024 18:00:20 +0000
Files and hashes:         1: MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa (hash: Q7m0pw+Q/3jQOUQ/1TwSXgzB5gx2axAujJ4eeICMpIY=)
                          2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: quN0WWWQPkeTnxkmpVEcRSWPYKgFzng1McTD9EZAUQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:47:6e:a9:01:be:84:3f:e9:68:c2:b0:c7:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
        Validity
            Not Before: May 17 18:00:20 2024 GMT
            Not After : May 18 18:00:20 2024 GMT
        Subject: CN=24d7e5c1f0a975e431e44cc00e463e60bbda2c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:96:d9:12:f5:dc:89:12:10:d9:9c:3c:82:
                    48:c1:a7:65:11:78:15:34:49:23:d5:3e:98:2b:da:
                    43:97:ae:7d:d7:9f:37:a9:ce:11:e7:70:e5:22:11:
                    df:02:2d:a0:f1:4f:be:42:92:37:da:88:09:d3:57:
                    05:d3:f3:05:e3:8c:53:df:a1:4d:f2:4f:5e:26:88:
                    f9:3b:1a:83:5a:d9:f9:0e:59:f6:60:3c:bd:81:eb:
                    77:df:9c:c7:50:8e:aa:40:81:cb:d1:da:2d:6e:62:
                    8d:05:09:ce:b5:24:26:d5:fe:dc:e5:be:ec:4d:a1:
                    c2:f5:d3:bf:30:15:3d:63:aa:b5:3b:c4:15:f1:e3:
                    82:bc:38:34:28:22:ae:b7:b8:36:e3:cf:bf:89:e3:
                    49:1b:64:34:5c:da:ed:5a:d6:d1:01:51:97:8f:bc:
                    71:b9:cb:00:18:a8:c5:4f:17:7f:3e:48:a6:3f:a4:
                    90:74:39:cf:75:48:9d:15:2f:1b:94:34:67:ee:73:
                    90:fd:aa:67:6b:5e:67:5c:b5:e8:69:cf:b7:e7:0a:
                    09:26:0a:44:58:ca:c5:16:d7:dd:2e:0a:42:64:14:
                    4c:d0:5f:d4:b7:2f:40:5e:b2:ee:6e:07:98:29:ae:
                    3c:30:dd:39:00:3f:23:d2:8b:07:bc:8a:0b:5a:54:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:E5:C1:F0:A9:75:E4:31:E4:4C:C0:0E:46:3E:60:BB:DA:2C:01
            X509v3 Authority Key Identifier:
                keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:75:36:c6:e1:84:d6:07:c5:74:10:47:d9:34:da:52:91:73:
         77:99:70:9e:6f:f5:c0:23:b4:a4:c7:da:e5:8b:8f:0c:02:99:
         c0:ef:3f:96:54:cb:98:32:91:75:cf:2e:00:19:80:33:7d:fc:
         64:fd:5e:bb:51:b9:59:9a:93:b7:6f:4c:b3:67:bb:d5:ff:ee:
         04:8f:09:c0:ba:a2:51:2e:63:ce:2e:c7:30:4f:fc:93:99:d2:
         0e:40:f0:4b:a5:12:a3:e9:5b:03:41:80:5c:23:ce:d5:15:a2:
         06:5f:19:70:c9:f0:bc:e7:e0:88:e1:45:57:8a:a7:4b:7e:b8:
         66:3b:fa:36:ac:a8:8c:80:6b:b7:6f:71:21:26:f5:b0:ae:5f:
         2a:d6:8f:25:f6:07:50:e3:09:c4:a1:e3:04:cb:c5:5b:16:60:
         9f:01:5e:9e:44:50:0a:a5:e8:78:58:0c:5c:59:5c:49:4c:4e:
         42:6d:fe:98:8b:e4:b7:01:0a:a7:30:14:3e:ec:a7:e0:2f:24:
         0b:41:cd:f3:53:11:81:02:b2:3e:d5:5e:49:fc:c7:08:5e:62:
         17:49:b0:02:b9:b5:ab:ed:5c:ab:28:41:b2:0f:6f:54:00:f4:
         48:0b:b3:ab:85:f0:b9:8c:97:4f:cf:de:50:9c:4a:c3:51:37:
         ab:eb:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:15 2024 by rpki-client on console-ams.rpki-client.org