Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File:                     aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier:          RNU8RyVHrrp28l/CsLXoNRUhWhYQJA7XeT5r7TkV8Ac=
Subject key identifier:   91:54:BE:ED:3B:84:14:B5:96:B0:05:B0:F2:A6:20:73:CF:FE:DC:DD
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer:       /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial:       018F874ADF2EC4332F78CAD2457BB66371C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:03:01 +0000
Manifest this update:     Fri 17 May 2024 16:03:01 +0000
Manifest next update:     Sat 18 May 2024 16:03:01 +0000
Files and hashes:         1: ClRNaiB0WAUybSnG9epVEDw47JI.roa (hash: vOw1sHSWzzM+BDP4d9F7GEu7a105Ux1BiV+esK0fivI=)
                          2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: GsQmAL/8oVT4bBU7jDsUyHDhel/9rtiA+ngw2ornEF8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:df:2e:c4:33:2f:78:ca:d2:45:7b:b6:63:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
        Validity
            Not Before: May 17 16:03:01 2024 GMT
            Not After : May 18 16:03:01 2024 GMT
        Subject: CN=9154beed3b8414b596b005b0f2a62073cffedcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:b6:56:10:11:ac:ba:aa:21:50:4a:e3:ca:
                    a2:ee:d4:e3:6b:27:20:40:ab:d3:b1:2e:63:36:22:
                    6e:37:ba:71:b8:03:dd:fe:99:f5:92:2a:58:fb:ba:
                    64:dc:b2:35:95:ea:4b:d9:06:f7:76:40:45:a1:1a:
                    30:7a:f9:b9:02:60:c4:6a:b2:c7:ce:d9:a7:d7:04:
                    1f:18:74:5f:dd:62:a7:57:9f:20:91:72:dd:43:64:
                    af:42:1c:70:1d:98:d6:45:ca:d5:59:c4:8e:8f:52:
                    18:35:a2:63:7a:20:94:51:e8:27:0e:3f:77:ea:4b:
                    fa:e8:90:f8:e8:14:20:4d:bc:57:d0:28:33:ea:38:
                    74:21:7c:5a:48:c4:36:02:9f:04:ea:d0:30:9a:da:
                    ae:f7:69:4f:fa:f8:b5:1c:27:0e:d4:22:66:71:28:
                    4a:d2:ae:50:e0:37:6b:6b:b6:08:f5:64:8b:20:82:
                    0d:17:50:cb:1e:70:e1:ed:70:df:84:09:98:26:78:
                    46:33:ea:f8:a3:16:6c:7b:06:08:31:bf:a0:cf:b3:
                    a2:c8:09:9e:23:02:10:14:cb:45:c9:61:9f:ed:39:
                    dd:0b:68:48:9f:2f:49:a3:7f:bf:a3:5f:db:fd:e6:
                    9e:38:23:86:a7:bb:d6:72:15:79:57:30:d8:fd:b3:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:54:BE:ED:3B:84:14:B5:96:B0:05:B0:F2:A6:20:73:CF:FE:DC:DD
            X509v3 Authority Key Identifier:
                keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:ce:62:7f:64:55:d8:b8:8b:da:59:81:76:0a:a7:e8:d8:
         f6:35:e9:ca:54:45:8f:85:47:e0:a2:fe:e3:24:c2:3f:a0:b2:
         2c:26:f2:9e:84:16:b1:89:7f:6e:f6:47:cb:84:95:f0:6c:32:
         b3:ba:b5:9f:f0:9b:a3:e4:17:c9:88:9a:2a:63:67:cb:f6:10:
         e6:04:f4:d6:90:20:d4:3d:f1:ff:7f:e5:30:8e:d7:c8:46:df:
         f6:f4:38:7c:19:f7:dc:e0:31:60:63:3e:d0:d6:e5:1b:2f:6f:
         b8:4a:01:2c:e2:49:7c:21:b7:8d:f2:8a:03:38:67:d9:80:b4:
         4c:5f:e2:b3:98:9d:1f:9d:a9:dd:a6:ca:9b:d9:cb:d7:2a:47:
         2f:79:70:a2:0e:b9:08:a8:81:1e:df:79:f7:bb:6f:d6:a8:04:
         fb:b2:1a:8e:cf:57:7a:7c:93:62:1e:a9:7b:10:25:c3:74:a2:
         14:60:cd:2d:46:37:d7:59:df:20:43:6f:94:e8:12:65:2d:dc:
         df:10:16:fd:9f:3e:75:43:15:65:2b:39:31:8c:66:91:57:80:
         20:7b:50:bb:d3:87:10:14:4a:0d:ac:55:28:6e:f7:e6:01:6a:
         0f:34:26:7d:4b:af:f0:e1:01:3e:b0:0b:84:9e:bf:8d:85:da:
         32:47:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:03 2024 by rpki-client on console-fra.rpki-client.org