Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.mft
File:                     F44v4h2iAjXpnsQ8GTgcfG1jo60.mft (raw, json)
Hash identifier:          4hXZZjq4evTDo4gW6DH61A59S7oibHEtKi3D1nTM1M0=
Subject key identifier:   63:BF:A0:99:E4:2B:93:2A:ED:4A:12:4D:F5:A9:2C:A0:5C:1D:F0:7A
Authority key identifier: 17:8E:2F:E2:1D:A2:02:35:E9:9E:C4:3C:19:38:1C:7C:6D:63:A3:AD
Certificate issuer:       /CN=178e2fe21da20235e99ec43c19381c7c6d63a3ad
Certificate serial:       018FB26A301190A7975975A9F4F9C0EC3E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F44v4h2iAjXpnsQ8GTgcfG1jo60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.mft
Manifest number:          0868
Signing time:             Sun 26 May 2024 01:00:54 +0000
Manifest this update:     Sun 26 May 2024 01:00:54 +0000
Manifest next update:     Mon 27 May 2024 01:00:54 +0000
Files and hashes:         1: F44v4h2iAjXpnsQ8GTgcfG1jo60.crl (hash: D+cvmfac++gnJp58sivqjGI6znOD+gwUS5/C4BGFpgM=)
                          2: IobReUF3cdPA5iIgdavq7U8KWV8.roa (hash: I4zXcDSqg8gW3+DckMLkADhjhJqexTMtDe43bbN28uM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F44v4h2iAjXpnsQ8GTgcfG1jo60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:30:11:90:a7:97:59:75:a9:f4:f9:c0:ec:3e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178e2fe21da20235e99ec43c19381c7c6d63a3ad
        Validity
            Not Before: May 26 01:00:54 2024 GMT
            Not After : May 27 01:00:54 2024 GMT
        Subject: CN=63bfa099e42b932aed4a124df5a92ca05c1df07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:09:70:c2:37:e1:98:b2:27:0e:e7:2b:93:c3:
                    cc:44:83:34:c9:11:99:f8:a1:62:d1:fb:95:e0:53:
                    d8:43:4e:25:9b:c2:87:b6:22:48:61:3c:a8:7a:26:
                    24:6e:1f:d0:20:a3:45:f6:b9:3a:1d:8e:3d:aa:99:
                    43:0e:06:d1:4c:51:ba:f7:63:6f:54:03:7a:1e:04:
                    9f:58:ec:da:c9:52:c5:9d:ef:14:ae:53:be:76:b1:
                    70:64:6c:b2:ba:8b:32:91:35:12:e8:02:11:57:5d:
                    26:55:a0:ed:c7:6d:e2:a9:d0:25:84:16:6a:d6:79:
                    b8:49:83:20:ef:38:b7:56:e0:ab:72:b5:8b:c9:5a:
                    a4:a1:8b:de:b7:19:b9:05:4c:f7:49:5d:10:5a:5c:
                    4e:86:dd:4a:3a:22:e4:9e:5b:87:b7:24:54:9e:26:
                    76:66:1e:dc:7c:33:fe:b0:ca:75:24:25:ae:f8:17:
                    8d:02:0d:61:1e:a0:ab:aa:71:b9:9b:ae:17:cf:85:
                    d0:82:81:39:00:b9:3a:42:53:dd:4e:90:ed:88:cb:
                    a2:c1:34:58:9b:1b:c9:32:33:f1:87:d8:d7:aa:0f:
                    3c:b5:69:2b:3f:18:b3:17:25:80:06:f9:60:0e:fb:
                    c7:02:21:87:8d:59:16:da:7a:ff:2a:27:d8:09:51:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:A0:99:E4:2B:93:2A:ED:4A:12:4D:F5:A9:2C:A0:5C:1D:F0:7A
            X509v3 Authority Key Identifier:
                keyid:17:8E:2F:E2:1D:A2:02:35:E9:9E:C4:3C:19:38:1C:7C:6D:63:A3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F44v4h2iAjXpnsQ8GTgcfG1jo60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f42340-2fcd-4573-a80b-910155525b2c/1/F44v4h2iAjXpnsQ8GTgcfG1jo60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:4c:48:7f:6e:b7:45:51:7e:18:50:87:88:e0:dd:e3:ba:
         17:f8:36:73:34:90:bf:e7:c3:bb:d1:16:bc:44:98:98:b7:97:
         64:50:6c:3c:6f:6f:21:71:d3:72:97:da:50:7e:b1:01:9d:95:
         67:8d:74:a0:4e:1f:dc:c3:7e:1c:e1:44:eb:e3:12:ff:a4:9f:
         b6:99:ce:76:62:cb:63:7a:16:66:80:33:7a:8d:6a:6b:96:63:
         7d:41:24:35:a5:d6:96:d1:df:0f:31:e1:a1:3d:cd:6f:84:55:
         ed:f6:bd:0c:f2:2a:3b:0a:2b:35:48:8a:fd:29:2e:fa:33:2f:
         d2:d7:77:2d:d4:a7:e6:6c:0d:60:0b:87:c8:f7:87:f0:d8:8c:
         9d:47:80:93:bb:21:ae:46:81:a2:d5:18:50:30:ac:ca:67:c4:
         6b:14:3d:10:94:1a:5f:5b:6b:d8:30:1b:c4:ea:e8:de:9b:08:
         38:07:70:5d:23:cd:44:12:da:85:31:71:22:5b:a2:c6:f6:b2:
         d6:6a:71:95:5b:b3:10:6c:2b:7d:82:4f:7a:b5:ba:cf:94:ff:
         1a:7b:42:c6:3d:58:89:f5:a5:19:e2:db:97:ee:c6:0a:7b:aa:
         97:cc:b3:ce:c4:36:1a:fc:fa:03:96:d7:99:77:44:4b:08:c0:
         b4:71:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:26:57 2024 by rpki-client on console-ams.rpki-client.org