Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File:                     aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier:          Diyxg4eo5AFUjrd1hFef7s8ZjD775YidHZ/JbCZkz40=
Subject key identifier:   89:F0:1B:60:4D:BD:0C:7B:D3:B0:94:2E:61:C3:34:33:B9:4B:7B:35
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer:       /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial:       018F874A7C99DA3388EEF4F855A9BBE055E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:36 +0000
Manifest this update:     Fri 17 May 2024 16:02:36 +0000
Manifest next update:     Sat 18 May 2024 16:02:36 +0000
Files and hashes:         1: 1-_-mTlMGS671UfIxMha9nJJohwI.roa (hash: euEFv6JOKAxwAayR9cezKE2yuPZkl+3D+yNXa/UOcK4=)
                          2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: uFc0dNA5mU0FKNCPwO0/5tC2PqwpON1w7T8LyYiW6is=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7c:99:da:33:88:ee:f4:f8:55:a9:bb:e0:55:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
        Validity
            Not Before: May 17 16:02:36 2024 GMT
            Not After : May 18 16:02:36 2024 GMT
        Subject: CN=89f01b604dbd0c7bd3b0942e61c33433b94b7b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2c:d9:41:4a:86:39:54:3e:92:7a:bf:0d:1d:
                    d8:3d:f8:cc:6d:91:88:17:6a:93:c6:ed:06:fd:8b:
                    98:a7:1b:59:3e:df:b2:ef:a5:81:2e:2b:7f:79:fd:
                    e5:62:ab:a8:cc:72:d5:07:4f:f8:d2:46:73:9d:6f:
                    c5:46:1a:8b:93:dd:21:9b:c8:e1:53:65:76:4b:ae:
                    b2:62:b6:85:cf:aa:47:4f:1b:42:3d:83:3e:75:4f:
                    b1:cb:01:da:c4:d3:41:e8:eb:2f:7c:a4:7e:c8:a8:
                    03:58:c0:35:64:ef:a6:bc:70:05:f3:b7:a4:b8:fc:
                    98:6f:dd:60:3e:8c:5b:0d:1a:55:84:2b:85:c1:da:
                    5e:7d:ed:51:b5:97:80:29:d9:4e:05:61:ee:1f:db:
                    e7:cc:e5:18:ca:62:6f:8d:84:bf:9d:cd:6f:ab:40:
                    59:ec:2f:12:c0:11:e9:8a:65:66:5f:97:76:e4:47:
                    78:1b:ac:74:95:d6:c2:80:66:6d:d6:77:eb:3f:31:
                    12:59:4d:a8:f0:6b:7a:97:dc:c1:86:ed:1b:54:d7:
                    f8:6f:93:eb:08:92:66:ec:e8:49:04:b3:2c:84:1b:
                    8e:68:9b:ba:9f:ee:2e:bd:41:ee:54:d0:c7:e9:8b:
                    99:38:ce:c2:77:21:b5:0f:c3:6c:92:8c:9a:93:d9:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:1B:60:4D:BD:0C:7B:D3:B0:94:2E:61:C3:34:33:B9:4B:7B:35
            X509v3 Authority Key Identifier:
                keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:14:d8:7a:25:e2:ce:fd:93:5c:18:a2:e1:eb:d2:75:6d:c2:
         fa:b8:0b:08:18:32:8c:19:0b:3c:e5:e1:96:fb:74:c5:3b:12:
         39:d4:8f:87:6c:aa:ab:12:69:40:8a:43:64:69:cc:12:14:0d:
         a9:10:7c:4c:8c:47:0a:8b:5d:fa:ea:ba:18:fd:bf:f9:35:d7:
         25:b2:83:cf:f4:57:0e:ad:bb:e1:45:26:da:5c:be:18:78:56:
         82:e6:d1:7c:c1:6e:f5:89:5d:7e:4f:78:4c:68:c4:37:7d:c2:
         76:0a:a2:c1:83:8b:51:e5:86:06:44:df:c2:e6:7e:83:70:14:
         6e:56:0b:3e:86:7a:90:cb:9d:7c:b1:0f:e8:14:38:7b:6a:30:
         d5:7e:89:a8:4f:85:75:a3:83:f4:36:3d:59:93:57:fe:c0:8e:
         5c:a2:1e:29:b3:10:70:40:29:f2:99:14:e8:06:32:e8:42:08:
         d5:79:dc:c5:8d:43:b8:ad:5d:70:d5:20:ba:af:c8:03:d1:93:
         e8:83:d7:da:1f:1e:b9:ad:3b:33:a2:ae:e9:69:4c:bc:fa:2b:
         8d:e7:38:3b:86:75:5c:a4:7e:c6:96:bf:fa:6a:37:4b:62:10:
         cc:72:55:94:13:0e:dc:a2:b5:f0:b4:47:da:d3:a5:78:27:b5:
         1e:ba:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:47 2024 by rpki-client on console-fra.rpki-client.org