Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File:                     pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier:          7QnZgkuScr00pz57+0A7eC2To3ajgOoi495FYOwBxf8=
Subject key identifier:   6D:D5:29:4E:FF:FE:98:1F:8E:57:38:29:40:C8:E4:38:CF:D5:71:89
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer:       /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial:       018F874AAEB4303DEF09185D9279173A972B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number:          0848
Signing time:             Fri 17 May 2024 16:02:49 +0000
Manifest this update:     Fri 17 May 2024 16:02:49 +0000
Manifest next update:     Sat 18 May 2024 16:02:49 +0000
Files and hashes:         1: QMn9nz9ERYFn56l4UXPeNNiUV2Y.roa (hash: L7XePPAOeRe2N5kjt4z/hqPFuszdN0YjiGvApCpPBOM=)
                          2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: uo8nz3dbqqOgQIVBmENcTjRjam0vYdcx+t57HuKYeJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ae:b4:30:3d:ef:09:18:5d:92:79:17:3a:97:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
        Validity
            Not Before: May 17 16:02:49 2024 GMT
            Not After : May 18 16:02:49 2024 GMT
        Subject: CN=6dd5294efffe981f8e57382940c8e438cfd57189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:d4:7a:01:37:1d:94:16:2c:ec:f4:04:b6:
                    a9:4c:c3:8d:45:c0:df:fd:6d:02:a8:38:f7:b8:86:
                    63:62:c2:08:b2:bc:15:79:2d:8f:a8:21:d4:ee:55:
                    97:47:bc:c1:4c:56:4e:54:49:49:75:5a:83:4c:34:
                    25:b7:22:6e:7d:e3:86:29:b4:2a:58:9c:49:f3:fe:
                    5d:a3:71:0c:d4:e0:e7:ae:df:34:0f:2a:e4:d8:45:
                    17:42:dd:6c:a9:7e:ea:cc:b1:e9:c3:fc:36:5a:ef:
                    47:31:a6:5f:19:5a:58:53:9a:c9:a0:b0:2a:bb:d0:
                    50:06:95:9c:7f:b8:80:bb:87:37:53:97:42:46:0b:
                    03:92:50:ed:37:af:23:04:5e:6b:7a:15:69:74:0f:
                    1c:b1:55:2b:da:59:0d:82:52:cd:75:00:50:36:38:
                    0a:aa:c2:1f:ba:e8:b8:d6:99:fb:bc:21:54:31:69:
                    75:32:2e:25:82:cc:6f:d5:82:f9:57:fe:1e:e6:d7:
                    7b:ea:16:1e:7f:38:bb:f6:28:a1:a1:56:db:d7:18:
                    34:dd:98:48:2b:0c:3d:7e:25:94:4d:3b:4b:bc:42:
                    22:c6:b8:28:39:19:7b:fe:08:79:27:4c:3a:fc:15:
                    a8:f7:09:1c:20:13:5b:76:e8:8c:a6:23:e1:db:72:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:29:4E:FF:FE:98:1F:8E:57:38:29:40:C8:E4:38:CF:D5:71:89
            X509v3 Authority Key Identifier:
                keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:11:15:cb:c8:dd:68:30:c8:f8:0a:b9:1c:9c:27:84:05:cc:
         a6:34:e0:70:0a:15:22:21:53:15:ef:82:6c:9c:3b:25:52:86:
         19:85:84:a5:96:02:e8:38:a4:0b:9d:e0:46:cb:3e:a1:55:93:
         4f:26:31:9e:e3:a5:71:2f:65:78:c0:77:30:1d:92:1b:ca:8f:
         e3:1e:22:f5:1c:85:30:3f:29:f5:36:f6:45:58:74:29:d2:4b:
         f5:44:2b:95:6a:98:69:b6:51:d6:34:7e:cd:68:15:ae:0d:97:
         a7:79:91:f9:9f:cf:e3:7e:60:8f:e4:4b:08:ad:55:c5:49:45:
         9c:d6:ca:dc:16:dc:7c:e4:50:21:45:df:40:9a:b9:67:ab:e4:
         27:9e:92:80:e5:d5:9d:39:76:79:b4:9e:ec:9c:bb:d4:33:82:
         93:da:77:d0:84:43:b2:7c:c3:c2:55:5f:2e:56:18:86:8e:54:
         17:1e:9c:fd:9e:f5:a0:09:f9:d6:ec:e0:fd:0c:81:22:4b:ca:
         0e:99:8c:b7:bf:a1:f8:0c:74:03:c7:f2:e0:0b:f5:69:65:78:
         4f:48:7c:1e:86:84:93:7c:21:e3:41:25:c4:d8:e1:3a:83:ef:
         6d:30:11:b5:99:62:c8:f8:60:67:28:21:a6:f2:2a:0c:c4:17:
         f5:e6:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:01:42 2024 by rpki-client on console-ams.rpki-client.org