Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File:                     pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier:          eb61KkhDsth+QFtsGPcvQVxWq6128xIupwITNuUxy7c=
Subject key identifier:   74:6A:9B:BA:3E:9F:7F:E1:50:9F:51:20:25:17:74:48:15:20:23:E8
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer:       /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial:       018F885B063C32B008149CF4DA3FE1F9E1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 21:00:17 +0000
Manifest this update:     Fri 17 May 2024 21:00:17 +0000
Manifest next update:     Sat 18 May 2024 21:00:17 +0000
Files and hashes:         1: 57Qrt9jAHJiVHR4TRc6BCopAfLk.roa (hash: qzXLWD4uUbmyqbvzgJ/SxB0uAfY5CuIJ6gjtUcYoDlU=)
                          2: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: GMslQeX/kN8YXqhBQbKe9NFkz6clvyvGpRdcPEeF9XI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:06:3c:32:b0:08:14:9c:f4:da:3f:e1:f9:e1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
        Validity
            Not Before: May 17 21:00:17 2024 GMT
            Not After : May 18 21:00:17 2024 GMT
        Subject: CN=746a9bba3e9f7fe1509f512025177448152023e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:ce:40:19:59:22:5e:44:8a:32:fd:4e:bf:
                    f3:ad:25:54:84:e0:2f:5a:ea:a0:24:e7:97:28:94:
                    8f:91:5a:c5:57:c1:9b:d0:b6:3c:52:c6:37:3b:5b:
                    0b:60:28:b4:1e:a4:89:21:8f:f4:20:27:46:f7:7a:
                    1b:40:6f:91:0c:ca:38:19:0a:0c:97:bc:ce:9f:dc:
                    90:37:74:04:26:6c:5f:ea:39:4a:aa:d0:bf:bd:98:
                    55:d5:50:f1:95:df:b4:03:fe:27:eb:17:a2:8f:6f:
                    a1:60:94:50:3c:5f:fc:7a:fa:51:14:41:b1:04:02:
                    f7:01:e4:68:79:c7:bb:68:92:16:0f:2a:df:96:2a:
                    d4:b6:fd:43:2a:29:f6:a9:ca:54:af:f4:a5:33:d2:
                    d2:b7:78:d4:c8:cd:d6:1b:9e:93:d7:e7:0d:cb:c5:
                    30:53:58:f8:a8:ec:c4:15:51:90:7c:37:02:a8:56:
                    bf:d7:07:22:80:0f:d3:43:73:4a:53:ab:87:9c:5d:
                    75:1b:a8:ce:f1:67:00:c2:7a:0f:af:d0:6f:37:9a:
                    ac:ec:b6:0d:72:d7:a5:c4:d1:10:d0:08:5e:7b:29:
                    e6:1c:d6:f9:c0:92:61:c5:47:17:48:5f:78:b7:16:
                    a2:2e:b2:96:95:40:4e:47:24:38:db:99:2b:7d:c6:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6A:9B:BA:3E:9F:7F:E1:50:9F:51:20:25:17:74:48:15:20:23:E8
            X509v3 Authority Key Identifier:
                keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:06:0d:d1:da:ca:33:6c:1f:5b:7a:e6:87:5d:72:96:1b:
         0c:a7:fc:c4:52:cf:0d:25:d4:0f:08:b7:e4:1e:9e:d8:f3:05:
         46:eb:96:da:cd:ed:46:aa:f1:13:df:02:3e:99:cb:44:94:d2:
         d4:ec:dc:96:d8:fa:23:4c:21:6e:25:66:0b:a2:ed:5b:fc:2b:
         7c:56:c1:49:00:69:14:dd:c7:f9:1e:46:2d:53:2e:66:d3:3a:
         80:cf:0c:12:ee:73:5a:03:7f:b4:ee:de:72:fc:d2:de:52:4e:
         40:fb:76:46:60:4b:40:c1:91:84:02:d4:c5:d1:21:3f:ed:34:
         f1:f7:0d:e3:cf:55:e3:0c:dc:14:52:d7:e3:9f:5b:f4:2f:36:
         8b:f8:a7:86:cb:b6:f7:d4:4e:4a:98:8f:1e:5b:16:d2:bc:6c:
         79:cb:40:37:66:5b:8e:f2:58:ac:80:36:49:e1:14:9d:c9:51:
         d3:87:05:ee:10:2b:f2:42:6e:5d:04:3d:a8:6d:bd:89:c5:44:
         60:f3:c6:1d:d2:44:c5:b9:a6:22:98:ef:a7:81:4a:ae:d0:96:
         ec:d5:b1:47:77:96:56:54:e5:66:a7:52:cf:a7:8f:a9:8d:33:
         9f:d3:bb:41:10:ae:ec:0d:b2:ab:ee:76:d5:0c:03:12:1e:d6:
         d1:f8:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:42:54 2024 by rpki-client on console-fra.rpki-client.org