Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          nQkpi3P8Y12a2k1NAvwxWw2tX11WO71w8vI99671EGI=
Subject key identifier:   51:7A:AC:60:00:46:3D:E2:55:CD:14:1B:65:06:C3:E5:41:B5:BF:C8
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       018F8748D07707FF9C2CA5761B66001D1C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: 87cO3EcuSh6qHZul3cQs9sqFKDM.roa (hash: tRCWmsHFyebTe975Ax980RtDqATwPUzxGt9rQ+VkANo=)
                          2: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: YbkOTKQqLmq8UKmuhghZSwUehe0YLj+3FRDxrttD+IA=)
                          3: kkp3rnfpI5tiwhug2G7B4N2KPAw.roa (hash: LTXjMrq/XnoEjFG9BXM0BLUt+mssSOXU/IW/Nz3Guv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d0:77:07:ff:9c:2c:a5:76:1b:66:00:1d:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=517aac6000463de255cd141b6506c3e541b5bfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:88:79:53:53:5f:76:9b:a9:f4:8a:71:bd:
                    13:58:3e:e0:47:bb:9f:9b:01:fa:d2:14:94:b3:cd:
                    4f:89:03:c6:3f:61:bc:09:e1:1d:aa:19:ae:ae:86:
                    be:f2:ed:52:fb:90:a4:0f:c3:8c:72:c7:64:a5:fc:
                    c5:b4:cc:7e:c6:c3:d2:e8:f0:a0:5d:2a:56:52:8f:
                    30:bb:74:3b:3d:38:5f:b6:49:b1:22:b6:1e:b0:39:
                    15:67:51:91:9e:81:6d:aa:ff:28:c2:4c:1e:8a:2f:
                    86:fa:ae:0d:e6:be:f5:e5:f7:f4:81:2e:5d:35:ce:
                    17:b6:01:32:7e:55:fe:7c:f8:67:3d:57:aa:d5:a6:
                    3c:7f:11:51:04:10:89:25:dc:88:bc:0b:12:36:7d:
                    a5:c9:ce:d3:50:aa:7f:39:33:35:db:2c:24:e9:63:
                    2a:a0:e8:7b:fd:b5:ee:00:fb:fd:7e:ed:3e:20:dd:
                    db:ad:9b:cd:17:54:e7:65:0f:38:c6:36:13:14:fb:
                    19:97:1a:20:ac:8a:e0:b1:95:40:b2:42:5f:6f:cd:
                    46:0b:6f:0a:12:26:de:89:78:fc:02:20:36:b7:44:
                    e6:59:9d:90:7f:6d:25:a8:55:35:5a:cc:99:99:f4:
                    a8:d9:c4:c5:00:8c:41:84:be:f0:3c:b0:1b:12:6e:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:AC:60:00:46:3D:E2:55:CD:14:1B:65:06:C3:E5:41:B5:BF:C8
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:65:3b:7f:24:01:bc:69:a0:5a:59:63:df:05:a7:e7:e7:
         3b:3e:bb:27:52:fd:0a:08:27:6a:e1:a7:b9:3b:6d:53:e9:dc:
         fa:b3:f6:1d:66:d6:f6:3c:c6:6b:8f:2d:e0:84:b4:70:3b:12:
         31:d7:ce:9c:73:e7:0b:84:ca:5b:95:cb:f3:9e:a5:87:e1:5a:
         3d:27:06:7e:10:9b:d6:2a:cd:58:0e:d0:af:d7:15:45:e6:05:
         fa:9a:68:7b:08:d6:89:55:b4:ae:f2:83:56:26:04:8b:17:7e:
         b7:e4:e5:0c:0e:eb:4c:fd:db:8b:4c:36:77:02:f2:5a:60:12:
         b5:1b:9e:fa:10:af:b7:fd:5e:a6:5c:8c:58:78:a5:e9:f6:70:
         5c:58:3c:91:6c:ec:4b:cd:d9:08:19:5e:2e:99:0a:8a:94:38:
         7e:80:4c:b9:82:b0:c2:43:2d:d0:31:fb:bb:cc:41:3d:1a:4d:
         db:64:87:b6:41:ac:7e:f4:f9:33:bf:26:d9:83:f4:d4:10:8c:
         7e:da:8a:10:64:d8:c2:8e:1a:83:51:27:50:67:1b:d1:1c:a5:
         95:16:38:01:15:ef:e1:a7:47:cc:61:7a:9f:d8:19:88:90:bc:
         ea:a3:ad:d3:11:65:03:29:ec:95:53:36:4e:fb:a2:61:30:0b:
         bd:e1:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:08 2024 by rpki-client on console-fra.rpki-client.org