Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File:                     w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier:          NzVtmcElGYeFNHgRQNkZqaF945C3DHM7GWN7GEZAvV8=
Subject key identifier:   8B:8A:93:7E:1F:BD:C5:78:DC:AF:C9:1B:C8:C2:EF:AC:65:CE:48:3D
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer:       /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial:       018F8749791B6414614B0D9DDE3EA8BB5604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: 1-evw_K3MVdKXizFnCTgJWMOqkeU.roa (hash: CsW5c1MaUEJmmhImmoDd+z0opHCrv2Nwt+mb/emNW2s=)
                          2: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: mFxU4j1tw08qMmfbwX6U1Wmrqda2HqiPmeqKyA4dTdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:79:1b:64:14:61:4b:0d:9d:de:3e:a8:bb:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=8b8a937e1fbdc578dcafc91bc8c2efac65ce483d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:08:61:77:81:59:0e:5e:31:56:21:ea:68:
                    8f:14:14:6c:33:26:75:5a:1c:3e:c2:d5:ce:33:56:
                    79:b7:fe:7d:78:8a:73:8f:8a:fa:c5:77:49:0c:00:
                    de:aa:7b:e8:89:06:2c:91:d7:c0:9d:10:92:03:27:
                    c2:73:21:09:e3:09:d3:f0:f7:c5:87:42:2b:18:2c:
                    57:48:fe:e6:c3:92:ed:d1:a5:85:92:22:a4:5c:ae:
                    b8:a5:25:8e:71:0e:38:06:65:2e:14:51:31:a5:db:
                    c0:e5:fe:4c:f7:27:a4:38:e2:92:a6:c0:72:12:90:
                    a8:f2:8f:84:95:d9:e7:af:12:d9:51:07:08:85:e2:
                    29:74:1d:80:23:3b:9b:cf:43:45:14:0e:34:b3:73:
                    2b:df:30:c7:57:d6:ab:49:cf:a6:3f:88:18:f2:93:
                    ec:93:05:d5:d4:c6:6b:c7:0a:2f:ce:c2:2f:67:21:
                    40:dd:ac:f1:d0:a9:05:4e:7e:66:4d:4b:3a:31:ca:
                    41:b1:14:03:0e:98:5e:05:89:ac:2b:43:c4:25:be:
                    c4:e8:7e:d2:29:6b:7a:6d:9f:5b:0d:4a:a8:8c:f9:
                    79:43:88:36:3e:16:39:e9:d3:67:bd:01:12:46:ab:
                    20:c0:7e:5b:fe:97:5b:ea:4e:0c:a1:db:b2:6f:c8:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8A:93:7E:1F:BD:C5:78:DC:AF:C9:1B:C8:C2:EF:AC:65:CE:48:3D
            X509v3 Authority Key Identifier:
                keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:cd:bf:30:43:d6:37:11:a0:02:15:4e:11:41:ff:77:ac:
         6c:d6:a6:8c:14:04:c1:f1:e4:5d:66:f0:78:72:70:ca:61:e3:
         f0:95:5c:c9:33:a4:4b:94:52:84:56:57:f4:c9:c7:8b:91:79:
         14:8b:33:30:cb:0b:23:dd:76:ff:89:e4:f2:6a:b4:3e:f1:9e:
         fd:5b:9b:ed:4f:89:cc:f2:ce:60:d2:08:b3:62:e3:e6:08:7f:
         1b:a3:5c:9f:11:03:19:ef:1a:cd:b7:48:bb:3b:83:86:b6:5c:
         4e:d6:34:1c:a3:d0:7c:07:2c:ab:d9:e2:87:cd:5e:c5:06:7d:
         dc:8d:1b:39:15:5a:f4:67:11:04:c2:a7:b5:5a:14:38:e9:21:
         0f:25:84:41:96:10:22:ee:a1:a1:ff:7b:6c:f8:2a:36:c2:ac:
         16:c7:a0:92:49:9a:2a:bf:af:d7:e6:4a:ef:41:44:77:4d:61:
         a6:af:f3:bf:61:2c:58:8f:3f:c4:8b:a5:00:90:42:19:2a:9d:
         72:bd:46:ec:5b:0f:1a:a6:a6:bc:08:5b:d4:ad:93:fb:43:4f:
         37:e5:88:a8:7a:8f:ff:08:3d:17:94:3e:14:b4:dc:d4:c2:84:
         3d:0f:18:77:97:90:11:b0:db:f1:d0:18:fc:3f:9b:d2:2c:e5:
         0e:8b:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:25 2024 by rpki-client on console-ams.rpki-client.org