Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File:                     bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier:          TCQbd+hqP3U86kyLrd3Iqancp7knfgTH0FUj1DWlCkk=
Subject key identifier:   10:E8:8A:C8:FA:E6:7E:2A:4D:EC:3E:5F:2E:7E:0A:5F:22:23:01:61
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer:       /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial:       018F882427600A29F98353340904C8D02761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 20:00:21 +0000
Manifest this update:     Fri 17 May 2024 20:00:21 +0000
Manifest next update:     Sat 18 May 2024 20:00:21 +0000
Files and hashes:         1: FtVYx30ZaTKSbvOJe2JyWIz-iEY.roa (hash: +DZ/xkcJcl5vbpV3nJX2XsKWSY7gMb640bIUugJIZd4=)
                          2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: 8zcoCBJhU+N6jvTRmpmU9O6jHdjbsgNmmEc1xzPEN0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:27:60:0a:29:f9:83:53:34:09:04:c8:d0:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
        Validity
            Not Before: May 17 20:00:21 2024 GMT
            Not After : May 18 20:00:21 2024 GMT
        Subject: CN=10e88ac8fae67e2a4dec3e5f2e7e0a5f22230161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:f8:ee:8d:ae:7c:ea:28:39:ef:05:dd:60:
                    8f:ce:52:a5:f6:53:fb:50:42:db:0b:11:c3:d0:47:
                    f2:04:d2:cb:41:88:1e:55:18:3e:0a:13:37:33:14:
                    fd:fa:29:b6:ce:6a:02:12:cf:5a:82:89:6e:d8:a3:
                    c7:69:94:22:ff:6e:22:8d:70:59:cc:c2:37:9e:f9:
                    cb:a1:62:54:e7:80:3a:12:95:c1:97:c1:cc:79:f5:
                    21:56:b2:55:d2:42:a4:3c:41:f2:f0:01:71:a6:6a:
                    de:13:53:8e:73:a8:9a:b0:42:64:23:e0:2e:84:ac:
                    26:45:60:2f:3a:af:10:5a:bc:45:1e:ee:71:fb:bb:
                    e1:23:92:fe:2a:c8:6e:bb:ab:a9:bb:f8:ae:cc:2f:
                    76:11:14:60:4a:df:58:e0:84:92:d8:96:08:f1:05:
                    51:9a:66:82:f3:cf:b4:d5:3d:4f:50:77:b6:cf:aa:
                    0e:de:b3:a3:97:92:a5:3e:60:e1:e9:f0:15:f7:ec:
                    2f:f3:58:e0:cb:e5:ad:c4:e1:b3:4e:69:0f:41:48:
                    e7:e5:7a:0b:7d:85:57:82:08:bb:60:6b:39:cf:05:
                    d3:6a:67:61:d1:00:5c:f2:0a:cd:0a:3b:08:c6:f1:
                    a1:34:ca:e7:92:5f:75:49:ee:50:67:c8:20:89:67:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E8:8A:C8:FA:E6:7E:2A:4D:EC:3E:5F:2E:7E:0A:5F:22:23:01:61
            X509v3 Authority Key Identifier:
                keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a6:04:f9:74:77:ff:2a:c8:52:32:ae:ef:54:06:8a:e8:e5:
         61:c3:57:d8:6d:71:64:3c:c1:9b:f0:a9:b2:1b:eb:41:c5:e8:
         2a:61:8f:e3:5c:de:9b:f7:58:6f:e2:fe:76:af:8e:5a:43:1f:
         6e:21:1e:f6:66:ba:03:2e:3a:76:23:b1:07:00:80:bc:1f:db:
         41:b8:d3:83:3f:72:66:4b:f5:0c:e1:a0:7b:22:99:cd:8a:02:
         72:14:8c:14:4d:67:c0:47:f8:e4:f7:6a:de:13:55:f6:2c:e2:
         9f:4b:c2:fb:02:12:b1:f0:93:93:28:d3:3e:d8:a6:07:fc:26:
         f2:92:2b:b7:a7:10:c5:f7:c2:3c:1b:a2:58:f5:a0:57:34:f1:
         20:62:cc:16:68:5e:27:72:03:a7:cf:d6:55:d2:e0:95:95:63:
         e1:04:56:33:87:7a:cd:53:0e:6a:ac:09:7b:19:99:11:42:79:
         59:e4:4f:6a:c2:53:02:f0:91:f8:8e:d0:f1:57:0e:f6:a8:0c:
         f6:29:fc:12:96:46:ed:20:da:fc:55:12:a0:1c:0a:2b:d1:87:
         2b:0d:13:32:e5:01:e0:35:49:e5:c9:41:07:94:eb:3e:f1:7c:
         84:a2:0f:8e:45:d7:81:ad:f1:86:2f:18:4b:e8:e3:d7:04:ce:
         d4:1a:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:54 2024 by rpki-client on console-fra.rpki-client.org