Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File:                     x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier:          hdNW1UA7VJe+zjIKO2TAZ2D6kKIEuvdpQhlM3iXv6rE=
Subject key identifier:   6E:D1:BA:2A:B0:80:BA:46:63:E9:FA:A5:51:09:2E:B8:0E:89:BB:AB
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer:       /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial:       018F885B6C6F58BD79461522485ECDC0C2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number:          0454
Signing time:             Fri 17 May 2024 21:00:43 +0000
Manifest this update:     Fri 17 May 2024 21:00:43 +0000
Manifest next update:     Sat 18 May 2024 21:00:43 +0000
Files and hashes:         1: nFIARbRxs9TrOFR1SKAC63wEeoE.roa (hash: XQxDh/pUfvMtVRPjgox1jT1r27lxo6IvodybsFCgtaI=)
                          2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: 7jIZZFHz6ymaLDKFQhbVGQ/K7kkk7xa68PXaHHY5LNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:6c:6f:58:bd:79:46:15:22:48:5e:cd:c0:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
        Validity
            Not Before: May 17 21:00:43 2024 GMT
            Not After : May 18 21:00:43 2024 GMT
        Subject: CN=6ed1ba2ab080ba4663e9faa551092eb80e89bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:4d:d1:70:26:e3:65:95:54:31:15:b5:5d:
                    29:bd:f3:fb:ce:cc:60:e6:e7:1f:1b:d0:19:c3:50:
                    63:24:63:1c:a3:9e:08:bf:94:77:f4:a2:72:04:81:
                    23:c1:06:6c:a6:07:89:2f:96:b5:a6:b6:aa:2d:ff:
                    4d:98:12:0b:75:3d:16:b6:7d:88:28:49:64:49:13:
                    a5:19:be:45:db:42:97:9e:9a:96:80:86:27:3a:99:
                    4b:c0:33:2d:4e:0f:f3:02:3a:3d:34:eb:22:9d:d7:
                    43:78:d4:18:7e:94:47:89:b4:82:26:42:9d:cc:62:
                    29:9a:91:83:9e:1f:bb:f9:02:f8:18:27:5d:d5:6e:
                    22:32:ef:ff:d0:98:f5:4b:95:ad:89:95:6e:88:35:
                    c4:25:c3:ba:06:3d:3c:d8:bf:d1:9e:1e:c0:1b:3d:
                    a2:5e:d4:23:53:0e:ca:7f:0b:ce:eb:3b:35:f4:e3:
                    90:c1:16:99:d1:6f:21:4a:58:f4:ee:df:1b:78:c9:
                    f1:bf:3b:d5:44:9f:31:03:c6:54:fd:b0:61:16:4d:
                    31:08:d0:da:7e:2c:0a:50:4b:4b:f5:70:2f:56:cf:
                    27:07:bf:0e:80:a1:7c:b9:e5:67:07:79:3f:7b:fa:
                    46:da:0c:bc:4c:77:2c:c2:f5:05:fc:62:6f:ae:56:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D1:BA:2A:B0:80:BA:46:63:E9:FA:A5:51:09:2E:B8:0E:89:BB:AB
            X509v3 Authority Key Identifier:
                keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:35:83:6a:59:2b:90:67:4a:60:57:76:63:79:39:ff:d1:
         e8:fe:79:c3:5d:e9:90:b1:ae:a6:fe:21:09:20:c5:da:e1:e4:
         e2:25:27:8e:5d:c4:ac:76:96:8a:e9:de:55:24:51:42:f3:b7:
         16:b3:3b:f5:00:ae:42:aa:de:31:7c:4f:4c:db:14:50:2f:78:
         fc:05:5c:d9:5e:9f:34:3c:83:d1:be:af:c3:16:80:e9:d3:9d:
         01:3f:30:9a:da:b5:40:9f:a5:e9:4e:a1:66:e4:86:d4:d4:74:
         46:63:95:22:6c:3b:c2:89:78:ff:95:60:67:f1:33:2e:7e:49:
         e1:97:40:45:eb:7a:d6:97:d4:4b:9d:56:b7:7e:93:d1:da:5d:
         23:3b:de:b6:3d:f2:e8:24:61:a7:36:cd:93:12:94:28:bd:87:
         94:75:a2:7e:f8:98:70:98:11:55:7f:55:c4:0f:60:c0:05:a8:
         3e:1d:9d:7c:e0:b4:36:32:8c:eb:e1:30:2b:33:6f:98:d7:c4:
         60:e9:6e:96:5c:91:b9:0d:52:c3:ba:bb:4c:07:35:c1:28:ce:
         81:93:2d:81:7c:df:25:47:a9:9d:ab:e8:af:11:5e:27:a7:71:
         d2:24:f9:da:7d:ca:fa:23:99:4c:93:5d:76:df:36:e7:4d:bd:
         fa:92:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:49 2024 by rpki-client on console-ams.rpki-client.org