Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File:                     cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier:          9qw+tBaBZKQKGExqewDzBKS03kO2JInhgzLzjGyknYM=
Subject key identifier:   46:9D:97:B5:8A:5F:79:2F:05:5D:6A:5D:D9:C2:CE:CA:48:7E:8B:48
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer:       /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial:       018F87EDA36A3F9DA9FB25382FDFB20F75AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:48 +0000
Manifest this update:     Fri 17 May 2024 19:00:48 +0000
Manifest next update:     Sat 18 May 2024 19:00:48 +0000
Files and hashes:         1: _XvHpMGuz3-SsQBXn1besiVoOow.roa (hash: 9NaDIG8xMtmyk7XvKbBrcwzMin+GC7XIW56ITeHxjUA=)
                          2: aDtPnv6BLLYyqJnT6aX9E6Sp3EI.roa (hash: veBW9I89nfw1W4ybAbPugPT4ZNF08aDCZZf0Ko6iMH4=)
                          3: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: c6mutXjUPpb8RvcmCyLHYoXjrZ//HXoy3gVb8VgQ6Hw=)
                          4: tWo7yREmIQuNqLti4WP1FRzmi5M.roa (hash: 3BIjQle4C5RLrwpkhF5frzfPotrQ7RlWlbHngyDW4/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a3:6a:3f:9d:a9:fb:25:38:2f:df:b2:0f:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d64134faa746293c0384edac0371950f3b224
        Validity
            Not Before: May 17 19:00:48 2024 GMT
            Not After : May 18 19:00:48 2024 GMT
        Subject: CN=469d97b58a5f792f055d6a5dd9c2ceca487e8b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:35:ff:5d:ab:9a:06:40:d0:9d:74:c1:ef:
                    6f:10:31:ee:9b:10:ed:8f:b7:23:2b:ce:fa:c1:89:
                    63:fa:b8:2c:56:86:a5:56:d0:88:13:a3:88:4b:d7:
                    9f:b9:f5:1c:27:b2:4e:f9:0d:b2:00:fd:8d:c5:f7:
                    19:50:f2:9d:40:bf:9d:cf:ea:8c:88:75:70:7a:de:
                    8c:20:2c:4e:24:97:6e:f7:20:85:09:c6:4b:0d:95:
                    be:21:bd:31:01:42:6c:00:21:6e:21:a5:85:3e:a7:
                    38:73:22:d9:5a:19:3d:2b:19:2d:7a:82:ae:f2:4b:
                    ce:f1:7b:3f:14:a0:94:41:11:09:53:25:d7:88:86:
                    cd:f6:66:63:7c:76:32:47:cd:8b:01:6c:59:46:5e:
                    ff:42:a0:60:8a:49:0a:60:b2:9a:a6:00:1f:5b:a1:
                    21:07:3b:55:22:53:31:cd:21:72:94:55:5b:f3:aa:
                    ad:87:6b:fc:df:c0:05:e7:98:c7:26:d5:6b:6b:94:
                    db:98:8b:29:a9:e3:d1:4a:c4:fd:d0:e3:f5:fc:ef:
                    33:f8:25:38:41:28:58:0c:95:89:a8:68:69:40:8a:
                    8a:01:20:7c:8e:3f:a0:37:24:a2:15:12:44:75:cd:
                    cc:95:72:f6:e0:91:a9:57:9e:99:7f:70:2b:b7:28:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:97:B5:8A:5F:79:2F:05:5D:6A:5D:D9:C2:CE:CA:48:7E:8B:48
            X509v3 Authority Key Identifier:
                keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:25:d2:88:93:77:8f:66:14:5d:98:d4:e8:b6:0d:08:92:47:
         00:07:ef:64:d5:da:5a:0b:b2:65:8b:a2:f3:56:87:2c:11:a6:
         bc:ea:21:5e:e0:78:dc:6d:11:df:fe:30:e1:6d:13:29:19:3f:
         4f:ac:b7:cd:75:41:e1:e1:bb:70:d3:1a:c2:88:c5:55:20:71:
         8d:b5:26:53:36:86:52:48:21:80:28:1f:9e:10:22:de:21:9e:
         b1:08:b6:14:c7:3e:5d:c1:4d:70:3c:70:ca:3b:21:80:d1:b7:
         41:42:ff:02:00:c3:d1:de:12:34:3b:fd:54:1f:36:37:6f:95:
         c9:34:dd:0e:11:0d:bd:86:5e:97:d6:88:f7:49:ee:eb:9c:f5:
         ed:bc:c2:cd:b0:a5:dc:4a:1b:1c:b6:57:84:36:55:86:b3:bf:
         81:8b:09:72:fd:20:60:f0:54:1b:a5:3a:93:72:5c:a3:f4:a0:
         5d:0a:f2:2c:d6:d8:fe:ea:35:53:2b:32:59:3b:fe:6f:81:39:
         86:bb:e2:1a:1e:c6:6a:66:b9:81:21:ce:50:15:9b:bd:fb:52:
         80:5e:b0:60:c5:6a:21:11:c4:e6:e9:2e:fe:b3:d6:c1:e2:52:
         77:ab:2c:cb:b0:2d:8a:25:31:49:22:00:29:91:87:3f:27:76:
         aa:d5:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:02:50 2024 by rpki-client on console-ams.rpki-client.org