Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          ZfMsC77Ns6nhT9JzAPAEDglmIBM9PBXOc+GT1767PYc=
Subject key identifier:   F2:CB:70:E3:FC:E4:37:E5:D3:59:7E:F8:1A:B6:D9:6B:A0:D4:42:47
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       018F87B64C01F68B67A3C16C813A53A5F6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: Odr74CN_IA7I-5ZEpMJ0BMFo070.roa (hash: 7h6Fph4qLa+Ev6+Xo2km7tCVhElEyMnVWPPfeaiHMDc=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: rMpwmQ5T6fm1BzWyeOWmdVlEdytYSvvvxApjuddmhF8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4c:01:f6:8b:67:a3:c1:6c:81:3a:53:a5:f6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=f2cb70e3fce437e5d3597ef81ab6d96ba0d44247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:ed:b7:f8:46:36:7d:7f:25:72:98:b0:6b:
                    ef:0f:4c:8b:f9:cd:64:71:8f:50:9f:81:ce:20:27:
                    22:d0:82:dd:54:41:91:37:e2:ef:fb:d4:42:69:2b:
                    8e:e2:35:ab:36:39:03:c0:0e:53:4b:e6:88:7e:bf:
                    86:16:60:c7:2b:26:77:e9:36:db:6b:ea:fe:99:41:
                    11:c4:05:7e:fe:fa:4e:20:d1:02:17:76:8f:38:1f:
                    98:f1:dd:c3:18:98:61:be:3a:e1:38:f6:6c:2c:69:
                    d4:db:73:e2:0e:de:09:dc:27:81:b7:fa:64:23:f5:
                    d2:76:9f:0a:1c:8e:dc:8c:f5:75:15:17:00:d3:dc:
                    d9:96:fa:43:a9:d9:5f:49:7e:7f:4c:c0:25:68:79:
                    4b:e7:15:34:bc:e7:7f:6b:3a:71:a4:50:44:62:8c:
                    0e:29:50:57:2d:c8:87:23:ea:16:9c:1b:88:4a:36:
                    77:b9:aa:5e:16:b2:32:54:b6:62:13:fb:31:61:a2:
                    3c:f8:61:43:ef:68:20:d4:ad:5d:09:c0:9c:a4:bc:
                    3b:d6:5e:d1:01:66:ad:2f:70:c9:33:cd:57:eb:f4:
                    45:c8:c7:e4:2e:de:52:a6:c7:9d:fe:89:db:80:bd:
                    93:63:ad:35:24:fa:5a:ef:4d:1f:e9:4d:12:8b:fb:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:70:E3:FC:E4:37:E5:D3:59:7E:F8:1A:B6:D9:6B:A0:D4:42:47
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:17:a6:dc:dc:0a:38:b6:07:ca:46:46:d2:59:74:7d:01:
         43:db:bd:76:69:20:d2:74:d7:73:b0:ca:87:d1:26:3f:5b:a7:
         7a:7b:23:f9:47:5e:db:22:9f:ff:87:34:d3:07:8b:b1:c3:c8:
         6d:5e:02:b3:c0:73:e3:db:62:51:cb:a4:77:3d:d3:86:d2:4f:
         56:c3:48:d2:f7:ae:aa:49:a0:bb:a6:2c:08:de:d9:b4:16:dd:
         64:a1:bd:0d:10:16:10:57:65:e3:34:77:c3:78:69:f1:d9:4f:
         59:13:7d:d9:5b:46:7c:c5:5d:86:70:14:fc:b7:36:83:15:36:
         ae:8c:a2:63:34:cb:75:0d:4d:5e:41:9a:26:f6:ee:5a:94:85:
         cc:29:1c:dd:36:65:63:50:39:cc:db:13:cb:af:9d:31:4c:32:
         29:ed:bb:8d:d2:dd:ad:a7:02:bb:3e:c3:15:28:eb:39:ea:61:
         3f:7d:4f:ff:7c:d9:a6:fc:aa:c1:00:56:12:92:44:de:b4:26:
         3f:4f:cf:fb:00:12:69:41:84:57:0a:99:72:7c:74:e6:1d:b7:
         ae:88:e8:18:67:0a:51:79:dc:2f:d0:1a:36:6b:c8:9f:5a:29:
         6a:37:5e:80:63:b4:40:5d:77:73:9a:a3:58:a8:bc:50:3d:8a:
         9a:81:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:05 2024 by rpki-client on console-fra.rpki-client.org