Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File:                     Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier:          TWpx6KsiZuA299VK/E0Dazn0cIUVbUHB+k89jifyzac=
Subject key identifier:   0E:0D:5D:2C:FC:2B:04:4F:33:BA:CA:F3:A9:E4:DF:1E:C8:CE:C2:68
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer:       /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial:       018F87495C5535D77C7669CB6830C8D869D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: ESpolfeCn9LHaxj61H1nIUQ6Lgc.roa (hash: /qu8MJY8MD9QcESPJa8DniducuemfxRqR+kauhzFMo8=)
                          2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: NOOFHYUSkOJJFLNMWYzDPz2+YUih3fXmD3uqla+yMgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5c:55:35:d7:7c:76:69:cb:68:30:c8:d8:69:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=0e0d5d2cfc2b044f33bacaf3a9e4df1ec8cec268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:2f:9b:7f:7f:dc:0b:74:1a:a7:16:bb:0d:
                    ab:f6:2a:f3:73:a7:c3:f1:6d:1a:ca:83:1d:17:4b:
                    5e:d9:4e:af:a0:d4:4b:ab:f8:3f:38:78:e9:0f:a6:
                    7d:0e:b8:17:b1:3e:91:d2:39:13:d2:10:2f:3e:4f:
                    ae:47:8c:7d:cd:78:18:7e:91:26:85:27:37:1a:1e:
                    57:31:c5:9e:88:a9:5b:25:5c:20:5f:c7:3f:83:a4:
                    ef:26:3b:c7:8a:a6:d6:a7:52:22:96:2e:c2:d0:75:
                    49:1b:52:6d:3c:e0:e6:9e:77:86:b4:de:a9:81:2d:
                    02:d5:58:2b:bb:bf:18:de:0a:ec:52:55:44:8c:8b:
                    f4:46:4f:69:7d:a2:3b:d6:c9:cd:bb:15:e4:25:03:
                    9a:37:3b:95:f3:75:61:4a:5c:8f:dd:35:c3:05:ae:
                    13:06:a0:f0:57:07:f8:7a:ae:f2:4f:1e:fa:f0:d0:
                    d9:ef:a2:c1:40:06:99:2c:eb:4a:9b:87:39:52:fe:
                    e9:95:e3:66:61:fe:81:97:37:6d:87:05:60:d0:4c:
                    a4:97:68:3c:80:cb:10:87:97:05:63:fb:79:3c:50:
                    97:8f:0b:c7:da:88:c8:5e:2f:26:37:d1:59:24:ab:
                    23:dc:2a:38:07:db:cb:d6:34:16:67:b9:4b:79:e9:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:5D:2C:FC:2B:04:4F:33:BA:CA:F3:A9:E4:DF:1E:C8:CE:C2:68
            X509v3 Authority Key Identifier:
                keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:f0:84:6b:20:3f:bf:cf:97:60:83:ed:82:ee:9c:8b:ba:
         79:e5:29:38:d3:ab:81:76:de:83:ef:a9:e0:31:2e:0b:bc:dd:
         26:4d:81:c9:b9:75:9d:63:e6:af:8d:5f:d2:29:1b:09:22:66:
         4f:14:3c:8e:83:92:e1:d9:25:93:94:0c:39:77:96:52:fd:c4:
         3c:a0:8f:0d:b0:c5:51:4e:bc:18:3e:70:bc:09:f8:bb:eb:b0:
         7a:c7:1f:af:f3:76:fe:b9:df:b7:7c:fb:dd:84:99:87:b0:96:
         14:48:0d:de:56:b5:55:b1:dc:0c:52:88:74:df:54:35:4a:22:
         2b:50:c6:f3:e7:dc:66:5e:b8:2c:62:ba:01:dc:73:0f:63:e9:
         67:f9:09:94:88:8d:23:bb:6c:f3:76:1c:bc:c9:4a:48:30:55:
         6f:11:11:4f:68:5d:4b:f1:b2:55:38:3f:26:92:87:27:ff:40:
         eb:44:45:c1:cc:e8:42:d8:53:c5:03:3c:9c:80:91:f7:44:62:
         03:81:a0:72:65:30:72:82:1a:4d:4f:a1:69:87:a3:9e:41:7f:
         ab:d5:de:50:0c:ba:d7:a4:c5:4b:93:5e:c5:bb:ef:b1:2e:45:
         2c:1e:15:c6:c2:c7:d6:19:b6:3f:30:12:72:e1:53:bd:9f:ed:
         33:3d:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:27 2024 by rpki-client on console-ams.rpki-client.org