Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File:                     MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier:          Ir6l+zWPVzPjYERGzkHk6g9aOQfJWWpmX9jyDgvAtsc=
Subject key identifier:   E8:06:09:AF:9B:F6:20:39:A3:01:60:3E:C7:EE:D4:46:9B:B5:6E:98
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer:       /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial:       018F866CC202A47901B72FCA3251871F5049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 12:00:25 +0000
Manifest this update:     Fri 17 May 2024 12:00:25 +0000
Manifest next update:     Sat 18 May 2024 12:00:25 +0000
Files and hashes:         1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: +dGJy307rhKTh+NMSHn53QauQkqUiIy5CT7vmWqRhoo=)
                          2: fZy0bBIeBkep5lNh4xptaHNgTvc.roa (hash: Ej+2caQzLCPLdPDl32okZ8/KjtUIW1/Z8hUzURtVseg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:c2:02:a4:79:01:b7:2f:ca:32:51:87:1f:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
        Validity
            Not Before: May 17 12:00:25 2024 GMT
            Not After : May 18 12:00:25 2024 GMT
        Subject: CN=e80609af9bf62039a301603ec7eed4469bb56e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:d1:ce:26:1f:84:11:f1:af:63:6b:5a:ff:
                    6d:39:6e:f5:1a:c5:22:b1:43:d3:28:a8:80:4b:7c:
                    a1:d3:13:04:ef:25:94:76:93:08:18:b5:85:f2:89:
                    ee:a8:45:ba:78:0c:91:9a:81:bb:45:37:63:d5:53:
                    fd:69:9c:19:b9:22:44:bd:d0:83:85:5f:14:56:97:
                    b5:e3:63:9b:a2:6a:7d:dd:bf:48:6e:b6:e4:3f:10:
                    41:08:c6:6f:ea:ea:b8:15:34:d2:9a:ff:f2:03:85:
                    b7:5e:ff:e0:32:ae:09:d0:09:45:54:3a:db:f0:cb:
                    5f:16:c5:40:71:cf:ff:35:8c:83:6a:a0:aa:87:ca:
                    a5:40:ea:44:d1:a7:d6:f1:e5:5c:ca:03:e4:96:4e:
                    fb:ac:48:d9:34:ba:89:46:02:0b:7d:fc:2a:b3:d4:
                    9d:de:2d:3b:c6:92:31:60:c4:3a:4c:d8:7c:9b:6c:
                    d5:f9:1b:54:ed:c3:10:e7:82:02:a5:d5:84:9e:87:
                    cb:e4:13:07:7b:8b:c9:68:e3:a4:ba:ef:2f:3c:71:
                    27:52:fc:86:ca:4f:5c:78:0c:71:38:86:e9:bb:d1:
                    b3:7e:ee:c0:fa:e5:10:6b:65:02:d9:d8:8b:aa:7b:
                    6e:33:e3:34:16:78:e0:2d:13:f7:d9:5c:3a:39:20:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:09:AF:9B:F6:20:39:A3:01:60:3E:C7:EE:D4:46:9B:B5:6E:98
            X509v3 Authority Key Identifier:
                keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:68:d5:2b:cb:14:06:33:aa:ea:18:56:11:19:63:26:89:
         31:52:c9:7a:b2:81:3d:a1:ec:d7:55:4f:5c:07:ec:1d:0c:81:
         85:c7:a1:07:eb:5c:58:0d:b6:a3:fd:27:29:d6:30:68:4c:f6:
         99:ca:ac:eb:71:e1:55:19:02:57:7b:c1:56:23:0a:eb:b8:2b:
         9b:90:48:63:cf:ce:b5:13:bb:e1:6f:c8:10:cc:5d:7e:08:32:
         fb:d1:a0:3f:9b:64:d5:c2:c4:db:df:1f:05:fa:fa:0a:3a:18:
         20:53:42:ad:c1:7c:7b:28:0c:8a:ea:2f:71:11:46:b4:8c:5b:
         53:02:65:2a:96:db:91:c6:ad:68:d4:bc:9e:8c:e7:9f:d2:3b:
         32:97:de:91:4c:a8:39:49:62:50:7b:e3:21:c9:71:33:90:ec:
         33:4f:7d:a8:2c:11:11:37:eb:12:dd:17:c0:32:e2:77:a8:55:
         67:10:e0:e3:8f:36:5a:1b:ee:21:b1:c9:84:f2:c9:54:5a:64:
         b3:9c:49:02:7a:2c:f8:58:b3:1f:06:40:fb:22:aa:69:fa:3a:
         ad:35:73:43:cb:50:8e:f1:57:13:a9:d7:0c:2c:1d:dd:30:76:
         a3:ad:d0:d6:0e:30:12:89:63:fc:ff:5a:ff:33:51:b6:70:04:
         15:e5:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:07 2024 by rpki-client on console-ams.rpki-client.org