Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File:                     iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier:          a07PQ3vZiFbGe5mXL8oMS0JCZh3L2QTPXNe9iCEkMvY=
Subject key identifier:   DE:E0:04:36:58:E5:18:57:9E:5E:08:FE:29:65:38:57:A1:20:4C:65
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer:       /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial:       018F8749FD6AAB2576DE5C7770360F404B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number:          0915
Signing time:             Fri 17 May 2024 16:02:04 +0000
Manifest this update:     Fri 17 May 2024 16:02:04 +0000
Manifest next update:     Sat 18 May 2024 16:02:04 +0000
Files and hashes:         1: T8FAThV2C3aIs21aHUKh-w1NyVM.roa (hash: u7jjAWmRVkA7M7FoDiYOrvN8S2LbBdnWy5ryoekR2bs=)
                          2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: gf6Q3naV/0XAClp+jPuh4SwMQkMslfNgiMxMwwAi/VA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fd:6a:ab:25:76:de:5c:77:70:36:0f:40:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
        Validity
            Not Before: May 17 16:02:04 2024 GMT
            Not After : May 18 16:02:04 2024 GMT
        Subject: CN=dee0043658e518579e5e08fe29653857a1204c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:06:c7:02:1f:90:2a:77:16:a7:41:ae:61:
                    91:ca:ba:b7:ce:8c:74:70:1c:7f:06:11:af:3c:c3:
                    2c:52:39:01:71:62:d8:b0:21:fa:85:8c:21:b6:7c:
                    43:27:89:2e:94:61:2c:dc:ea:cb:36:62:c6:e3:9a:
                    65:70:69:3b:7f:77:bc:6a:29:a0:12:83:b1:2a:c6:
                    df:34:85:6f:2c:3f:13:5d:9e:32:73:e7:7d:ee:3f:
                    33:86:e2:24:c0:09:a3:d1:60:53:7e:23:bd:49:64:
                    57:f1:af:7a:75:f2:6e:04:cd:6a:88:0b:be:10:74:
                    6b:31:a8:05:a3:74:5e:f4:e9:48:ac:77:d9:0f:48:
                    f9:11:01:57:07:18:4c:62:86:d8:0b:10:30:82:4a:
                    1a:26:9f:02:84:4c:06:c9:53:66:71:c3:01:0d:5c:
                    1b:77:bb:5d:23:ad:6b:8f:cd:8b:0c:b0:57:52:bb:
                    cb:ad:df:93:90:78:b4:36:ec:3d:e0:4a:7b:43:de:
                    ca:65:2f:ae:0e:32:49:a7:d8:ef:85:08:a5:5d:ae:
                    38:54:d8:ba:35:c9:13:97:1b:72:c8:45:51:54:aa:
                    0c:7f:65:42:c2:46:b8:19:dc:20:d9:eb:7d:ce:fe:
                    1b:b3:b9:14:9d:87:6c:36:17:6a:7b:29:5a:4d:ce:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:04:36:58:E5:18:57:9E:5E:08:FE:29:65:38:57:A1:20:4C:65
            X509v3 Authority Key Identifier:
                keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:5d:0c:88:fc:bf:0d:ae:a5:46:4f:33:af:d5:9a:52:f5:
         ae:d3:96:bf:21:75:52:53:08:80:68:37:93:ac:e0:0d:b2:d9:
         b7:63:29:59:ab:95:91:ac:0e:27:7c:74:a2:10:3b:6c:ab:94:
         56:22:40:2c:7b:07:cc:ea:6c:81:91:85:21:ad:9a:86:97:1c:
         db:ea:5f:cf:8f:fe:2f:29:70:35:91:26:b1:8b:ad:20:a3:51:
         d9:bd:e7:ea:63:d9:99:69:4b:7d:8f:f0:39:93:10:4b:10:13:
         82:5c:6d:c7:68:88:85:30:fe:76:d9:3c:1b:19:d6:77:1d:70:
         6e:c3:3e:2e:6d:19:b7:85:79:d5:c2:d4:80:de:a5:63:76:3b:
         84:30:cc:cb:f0:d3:da:c9:b1:c5:27:67:bf:a5:66:28:b1:41:
         50:3a:98:da:00:98:b4:d6:7f:f7:50:8a:02:14:86:5d:4a:66:
         9d:28:b8:9c:f8:c8:15:36:67:0b:66:3f:8b:32:16:3b:14:ae:
         86:81:e7:19:ef:81:e1:3d:77:57:df:ec:84:1e:6d:7d:a8:02:
         61:67:dc:de:18:40:cb:e2:ae:b0:e5:9f:be:2e:0b:d4:86:4f:
         55:77:90:76:07:59:17:32:74:e3:ab:22:01:89:52:b1:74:f7:
         46:0c:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:19 2024 by rpki-client on console-fra.rpki-client.org