Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File:                     yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier:          HlLNgPBHA8+Tbo4/r3PD0J3jrQSfBKvq5jIxKKiLTt8=
Subject key identifier:   27:B5:51:F3:39:AD:9F:23:7C:3A:B2:71:BD:EE:6C:67:3A:79:F4:C7
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer:       /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial:       018F87B661D54C8E58898EB3FDD6D5050AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:27 +0000
Manifest this update:     Fri 17 May 2024 18:00:27 +0000
Manifest next update:     Sat 18 May 2024 18:00:27 +0000
Files and hashes:         1: okw1zJn8DCC_WvdG5QDyY8DNFm8.roa (hash: ZplBVwDkPXrvH+dVbFf8CkFQLaOnf9BcfiLQ00FKY5M=)
                          2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: M+TxyLrJgb6Y2rYZSozp1PVQ5A6Y0+xRzO4bQJPTVYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:61:d5:4c:8e:58:89:8e:b3:fd:d6:d5:05:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
        Validity
            Not Before: May 17 18:00:27 2024 GMT
            Not After : May 18 18:00:27 2024 GMT
        Subject: CN=27b551f339ad9f237c3ab271bdee6c673a79f4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:e8:5a:81:53:86:62:d0:b8:c7:bf:e1:47:
                    70:e1:f0:75:c2:ef:34:93:05:8b:b7:50:02:bc:ec:
                    d3:23:0b:77:d8:2c:0c:58:fe:50:e0:db:13:76:c7:
                    57:ac:a9:1d:75:56:9f:7e:d6:ea:57:2a:05:56:cc:
                    5d:92:c4:d6:8b:8d:bb:89:2f:62:83:1c:4c:4b:63:
                    84:c0:fc:c9:29:6c:d8:58:ff:f2:03:fb:58:dd:b3:
                    6a:8b:af:60:f9:51:66:e3:a5:d5:b7:da:8c:51:1a:
                    a8:39:da:e9:a2:48:aa:aa:b5:d6:a1:fb:ae:f1:3d:
                    c3:e3:b5:36:8b:2a:e0:3e:4c:19:a2:16:3b:b7:b8:
                    f6:35:05:37:2d:63:65:4a:26:f9:da:a9:af:e6:22:
                    17:46:06:2f:c8:da:e2:29:62:42:f9:9c:d3:bf:fe:
                    e0:e2:27:08:57:52:28:8d:95:27:06:3b:2d:3b:4e:
                    ca:34:36:9d:64:43:62:a3:b1:5d:f5:43:ed:94:66:
                    86:86:6d:fc:15:59:8b:0a:ac:d2:8c:52:4e:4f:1e:
                    42:a1:a5:0c:9b:57:c1:dc:9f:a9:57:8a:c1:5e:e2:
                    bc:e6:7b:27:83:e1:ed:3b:ce:76:b4:9a:f0:2e:b1:
                    4c:71:64:85:5d:d0:94:60:f2:69:ee:bc:7e:e9:8f:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:51:F3:39:AD:9F:23:7C:3A:B2:71:BD:EE:6C:67:3A:79:F4:C7
            X509v3 Authority Key Identifier:
                keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:97:16:ab:bc:74:61:b2:28:ae:6b:05:ce:c9:ae:3d:be:
         50:68:0d:91:f9:37:9e:fe:3e:5e:a7:ed:54:5f:f6:2f:7c:60:
         93:a5:33:10:2d:bc:57:c7:ca:ee:e0:15:7a:b9:c6:7c:08:89:
         52:d4:23:6f:18:ac:62:05:80:6d:77:21:f4:dc:6e:e8:8b:25:
         a9:d4:d0:d2:a1:5f:4a:7b:36:18:36:e6:b6:45:92:5c:ce:8a:
         7a:3a:09:3c:dc:21:0d:aa:0d:a7:74:9d:40:2e:73:46:74:9b:
         16:d0:7e:88:2a:10:45:29:78:86:97:3e:e4:f0:b8:42:23:08:
         32:c0:80:f7:03:ac:6d:61:41:3f:f6:39:f0:fe:b3:33:68:7d:
         07:37:b5:df:b9:49:ba:40:88:53:54:e6:ab:98:92:1c:ba:a4:
         c3:26:2d:e9:4f:12:e8:91:22:c6:e2:40:f0:d2:61:71:18:5c:
         fb:87:fa:61:ce:d2:7b:90:f0:03:39:df:18:79:40:b4:03:59:
         28:23:2e:e8:cc:2d:3c:eb:41:9b:89:71:fe:88:e1:25:a8:12:
         43:00:d2:0d:85:c1:c1:8e:43:42:dc:1a:78:3d:e9:80:76:75:
         02:9d:44:15:08:b0:4f:bc:74:a8:78:6e:37:06:86:d5:47:27:
         14:d2:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:45 2024 by rpki-client on console-ams.rpki-client.org