Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File:                     kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier:          u/IOc1yQ7zUxPoimBtLfga3Ny0msG+pbCO1uOsuSN18=
Subject key identifier:   6F:58:55:1B:9B:6D:0B:6B:10:98:C9:B2:5B:95:38:FB:9B:EE:E4:93
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer:       /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial:       018F87ED21B8F1D1B9C36114A20008B14C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: OsY5Q2-Kus0VebXYBDvQsrabpik.roa (hash: 1rVzC92B5IemAfyoDc7ccz/c7zy+AWAfRF66ONBRFic=)
                          2: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: g5FA/bkVrykXcghoecKH09IqamPqNrzviNseMpomeYc=)
                          3: uFcPnWF9JfzemuHy8aiOX4rZirI.roa (hash: f2iMSlWoLeHdsuCekbeXi0dRiysFjp68wBKgBJq3ECM=)
                          4: uyTZ2uVj9mcPOWGSKs0K9nLAblI.roa (hash: 5fXDCIA6mBRWMCklOHgslXiSKsn6OU6gnmz0ylN8KWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:21:b8:f1:d1:b9:c3:61:14:a2:00:08:b1:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=6f58551b9b6d0b6b1098c9b25b9538fb9beee493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:84:16:6a:76:e1:2a:db:c7:ac:06:0d:76:
                    49:37:bb:93:2e:f3:c5:6d:e9:94:fa:50:83:7e:17:
                    6c:50:8a:1f:3b:1e:bb:3c:da:e1:ce:f9:c0:47:ee:
                    49:90:09:cd:98:07:ba:84:58:70:d2:3e:0b:47:0c:
                    f8:b4:98:ec:db:42:55:dc:8f:7c:a4:57:98:c8:25:
                    1c:f9:6e:6b:a4:6f:04:ad:62:e8:af:79:25:d0:42:
                    0a:bb:2d:f1:9b:a9:dc:e4:6f:53:ce:57:cc:ce:29:
                    de:09:d9:7d:bf:dd:fd:a8:96:dd:2f:7e:77:30:c0:
                    c2:2f:d7:46:72:2b:c5:0e:e6:ae:2b:d8:43:0b:27:
                    72:a6:66:c9:ff:e3:65:ae:14:78:62:25:95:b9:ae:
                    f8:8e:06:60:0b:e3:ae:94:73:b3:d8:34:04:af:9e:
                    be:60:27:a8:c9:d0:61:b2:93:89:ee:56:b7:eb:7e:
                    ab:12:65:9c:8a:ba:38:3c:95:00:4f:ea:6b:02:32:
                    49:c5:ca:06:98:10:fc:66:b6:78:5a:91:6e:40:26:
                    64:40:0d:e8:4c:d0:16:14:05:c7:bd:3a:59:42:21:
                    d6:e8:8d:5d:4a:fe:43:bc:49:cf:16:1a:12:dd:df:
                    c8:ec:af:48:a8:03:7d:2d:0b:b9:4e:22:f2:0a:44:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:55:1B:9B:6D:0B:6B:10:98:C9:B2:5B:95:38:FB:9B:EE:E4:93
            X509v3 Authority Key Identifier:
                keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:69:06:f5:84:df:5b:4d:b0:60:3e:d2:73:9d:e9:60:cf:b1:
         4a:0e:86:12:33:9a:fd:18:2d:d5:f0:5b:d3:28:3a:3b:7a:26:
         69:02:5c:09:b0:a9:7a:e0:c2:2c:d2:a5:7f:69:fb:be:01:8a:
         21:b0:96:f0:96:e7:77:0c:64:9d:c2:da:bf:4f:dd:e9:42:d9:
         32:34:1f:b7:79:e3:1e:55:d0:c8:10:4f:4e:d8:ef:91:12:41:
         e2:83:24:0e:cb:a4:23:02:6b:70:14:37:80:7f:ee:df:b7:54:
         57:a3:6f:23:a4:79:5a:c7:8b:5a:c6:71:10:ae:fa:32:e0:1d:
         d8:f5:cf:c5:f8:c1:3b:92:67:ba:cb:99:44:11:47:ee:72:3a:
         03:84:3a:8a:33:25:08:fe:30:20:45:b8:ae:d8:1d:cd:88:a7:
         9f:95:e0:4a:80:26:46:49:89:da:d8:de:06:39:f3:bf:c4:50:
         f5:ff:dd:63:27:96:2e:dd:98:ad:87:a1:10:ab:5d:c7:94:68:
         13:9a:ab:19:59:e5:d2:05:2a:60:0a:ea:d6:61:6b:00:47:90:
         31:69:a2:aa:b1:8c:6c:4c:95:b2:af:e4:c5:af:56:cf:a9:a8:
         3f:84:05:d1:7d:eb:26:7a:73:a5:42:23:0a:93:a3:e3:ac:af:
         8c:c4:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:51:33 2024 by rpki-client on console-fra.rpki-client.org