Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          wGCCR3VW+bbWdPnQuMwis0ivP18USBLH1QUwSqLV5MU=
Subject key identifier:   D5:40:5A:1A:2B:F1:AD:49:95:ED:A7:F0:BE:CA:BD:BF:C0:AE:93:AC
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       018F874980C3993D589C171B84966ADBF931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: MvltFhHzYpizt7533QgsOIA9ZVcSCsPOCCMWE32TxoM=)
                          2: yH3vj653QK4mci0dGSva4G4MfLg.roa (hash: 75EpJlxL/V0QxjX9JzTW0/pgmCHrsP4gpgcrfF1jzeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:80:c3:99:3d:58:9c:17:1b:84:96:6a:db:f9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=d5405a1a2bf1ad4995eda7f0becabdbfc0ae93ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:db:12:4c:1e:91:d5:78:10:7e:8a:37:e6:
                    32:bc:51:43:ce:45:c2:94:b3:e5:b1:35:72:c0:41:
                    21:6d:cb:58:a4:4f:c6:65:ca:56:e4:92:73:6c:a1:
                    80:50:c8:64:b0:4a:58:e7:15:31:03:e2:6c:2e:94:
                    f8:6f:e8:5c:96:66:f0:3e:48:d6:6b:d8:3b:c8:07:
                    c5:a2:71:47:8b:47:8c:64:28:34:2a:d4:82:f2:9a:
                    13:15:b9:64:53:3f:11:c4:dd:4a:22:2a:40:39:73:
                    3b:5f:49:e3:fd:ec:f0:5c:fe:43:46:20:d0:47:f5:
                    d8:57:59:a6:dd:b2:9b:47:26:75:73:6f:5d:e8:85:
                    6f:78:96:7a:f8:17:f5:ad:51:5e:49:d7:e4:c0:c1:
                    7a:44:74:71:43:88:9a:54:3f:b4:4c:62:81:ae:6b:
                    3f:48:ff:bc:9f:76:f1:e4:6f:a9:68:7c:51:ba:06:
                    e8:40:ff:89:f4:99:22:29:f0:d2:f3:79:e1:76:ff:
                    f3:fc:bd:fa:85:b6:e5:28:7c:5f:0a:30:df:fe:58:
                    7c:84:ff:d3:67:41:0e:9f:d7:de:ef:ae:57:d0:11:
                    23:b2:81:11:50:d2:2e:0a:65:97:05:7a:a0:83:71:
                    be:4e:48:36:5f:7a:60:24:73:c4:62:52:a2:e2:ee:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:5A:1A:2B:F1:AD:49:95:ED:A7:F0:BE:CA:BD:BF:C0:AE:93:AC
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:26:30:be:8c:71:2c:d5:56:a0:5e:5b:f3:95:f8:6b:b6:
         e9:78:14:6b:84:11:59:3e:12:1a:a0:91:88:e4:a6:f8:12:ec:
         22:fd:77:d0:6e:ef:51:7b:b9:35:ae:97:1b:ca:91:3e:c8:3a:
         79:0c:ca:82:df:9f:17:ca:f2:5b:7f:e8:ad:7e:18:35:1d:f2:
         ac:58:6b:74:a3:cf:09:8e:38:0c:7c:72:72:42:f0:b9:64:3e:
         bd:86:d5:21:b2:45:97:06:e5:96:38:9a:f9:c6:ec:37:0d:69:
         0e:ea:8f:3c:db:f8:b2:5d:ce:f7:29:26:ea:76:aa:7e:84:70:
         cf:a5:fd:b4:b5:11:bb:18:7c:cb:a2:dd:df:17:6c:ef:28:a7:
         ac:cf:ef:f3:b0:d1:6a:b8:09:45:e4:44:53:3f:1d:ef:2d:ad:
         04:7e:bd:a8:83:d1:70:d5:1a:31:69:8f:b8:e9:b6:47:7d:13:
         f7:ff:2d:ab:8f:1b:83:b5:e8:34:92:74:a4:32:1b:98:c8:b1:
         c5:6e:54:f1:68:3b:66:3f:15:d3:5b:94:9a:a4:80:3e:51:ac:
         8b:17:2f:74:41:ac:67:80:bd:61:3d:f0:b2:44:63:a2:fb:c0:
         66:c3:a2:a0:a4:00:e4:6a:57:6b:a6:e6:4d:ea:57:6e:77:f0:
         ea:20:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:04 2024 by rpki-client on console-ams.rpki-client.org