Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File:                     MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier:          J2b9dSXrBTcbhhN7WCHfvGjQphHYWCBcvUSm4KXBveY=
Subject key identifier:   9C:BB:52:6E:57:D3:34:50:3A:56:66:70:96:AA:54:94:40:DE:C7:5E
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       018F8749246DEFD5214AD94916554970F146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:01:08 +0000
Manifest this update:     Fri 17 May 2024 16:01:08 +0000
Manifest next update:     Sat 18 May 2024 16:01:08 +0000
Files and hashes:         1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: RdmByXfFAVnm5WnY3RIiqisPnXJj8kiG4vH12zXLo2U=)
                          2: i-EIobW_VIoQHymP2W4ULs4o-MU.roa (hash: rPPfcnNGc5DNOjWMnrH1sw6q3GZ00JmFqia4xzTXZBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:24:6d:ef:d5:21:4a:d9:49:16:55:49:70:f1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: May 17 16:01:08 2024 GMT
            Not After : May 18 16:01:08 2024 GMT
        Subject: CN=9cbb526e57d334503a56667096aa549440dec75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:4d:0a:bb:44:32:ff:e0:8e:fd:db:b8:5c:
                    53:07:1d:63:91:8d:32:e9:0b:3d:40:79:25:7b:81:
                    61:0f:af:09:e6:9a:44:b2:7d:df:f5:e2:60:6e:e4:
                    0c:30:a9:f7:76:69:4a:dc:f8:5c:1d:bf:01:49:cc:
                    50:78:a3:27:f1:f0:e0:d0:48:5b:24:43:2d:7d:53:
                    53:ae:53:87:6c:5e:42:eb:86:a5:14:c5:0f:11:e6:
                    2c:d3:d0:1c:b9:7c:d6:1e:57:15:05:4c:df:76:9a:
                    74:4c:5b:36:79:93:e2:7b:08:b0:66:15:e8:55:51:
                    6d:10:34:c3:dd:ea:1e:cb:b6:fa:cb:c3:d4:bd:df:
                    f7:1e:7c:f4:5f:0c:27:8a:a5:c3:09:9d:15:8b:b4:
                    4a:16:e0:4a:34:7d:78:99:bc:bf:23:c6:9b:20:2d:
                    be:74:6e:d9:cf:e0:31:df:cc:f9:94:77:df:fe:2e:
                    9f:97:c4:c6:f6:83:8a:b2:70:99:5f:46:79:c7:c2:
                    c6:f5:fc:aa:ba:7e:cf:65:e6:83:d1:6d:73:de:3d:
                    44:fc:7a:56:1e:38:b6:f8:b2:22:83:a1:ed:0c:9c:
                    5c:bf:d7:d7:ef:8e:79:8a:15:64:fa:0b:69:e1:87:
                    6b:60:84:4f:84:97:6e:17:97:f8:58:8d:20:c8:60:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BB:52:6E:57:D3:34:50:3A:56:66:70:96:AA:54:94:40:DE:C7:5E
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:65:cb:c4:1e:e7:f4:32:db:c0:55:b4:a5:3a:44:e5:a9:
         c1:1f:ca:0b:53:87:fd:b9:07:0f:fe:65:c7:43:00:80:4a:4e:
         76:d3:f6:63:77:97:40:64:81:d7:e6:1f:78:29:95:23:8a:92:
         93:21:89:9b:47:9e:35:ba:db:48:66:38:58:c1:4f:61:ac:f4:
         f9:ad:50:1d:a3:bc:11:1f:4a:d4:45:f2:7d:36:78:d8:d2:4c:
         ee:f0:e3:1a:99:c3:58:53:f9:e2:db:52:d3:43:b0:9c:6a:ae:
         6c:94:7e:8c:9f:4d:ef:7f:ec:7f:ba:0e:21:fc:a7:31:a7:f0:
         98:2c:a8:ce:37:b9:b4:99:3a:b1:dd:22:39:1f:aa:78:39:0d:
         b4:ab:4e:6d:cf:19:f7:71:d5:00:be:e2:2c:82:cf:82:34:21:
         79:ff:d9:c8:61:3d:61:98:26:95:a8:cc:a6:4a:b4:2a:46:38:
         9d:ce:21:02:e6:17:19:02:28:e6:d2:83:75:e3:2e:28:03:5b:
         af:b3:7e:ac:81:62:17:2e:7b:2f:95:72:e8:ec:5d:65:89:14:
         95:1b:f8:e2:18:fc:9c:70:4d:76:8a:8b:b8:74:0a:99:46:60:
         76:1b:35:e8:9b:23:fc:68:3c:7c:07:c6:d4:e9:13:a9:46:59:
         e9:e4:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:50 2024 by rpki-client on console-ams.rpki-client.org