Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
File:                     kiluMEh7qUY-S2rcgat9pkfDn-c.mft (raw, json)
Hash identifier:          ivvNu9b1zMdotcky9CptkxhGhpHV5L3lxvEoidkNikU=
Subject key identifier:   DD:EC:2A:DE:50:BA:E1:8B:37:66:4F:11:D7:3E:B8:72:2B:06:23:92
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Certificate issuer:       /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial:       018F8748A4FB50C2ECE21E25DEDCBA1F43CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:35 +0000
Manifest this update:     Fri 17 May 2024 16:00:35 +0000
Manifest next update:     Sat 18 May 2024 16:00:35 +0000
Files and hashes:         1: LXBxEENSf2cyFWTAqqxAHzZ40fo.roa (hash: C365c9H7+168wiyFPXDdck4P3KhokncSGAs3Qhh2PWs=)
                          2: kiluMEh7qUY-S2rcgat9pkfDn-c.crl (hash: YiLYsIpMOuLA0KX6k9RuGBz2tbkZIHSm+3MM8o7SMOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a4:fb:50:c2:ec:e2:1e:25:de:dc:ba:1f:43:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
        Validity
            Not Before: May 17 16:00:35 2024 GMT
            Not After : May 18 16:00:35 2024 GMT
        Subject: CN=ddec2ade50bae18b37664f11d73eb8722b062392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:cc:97:35:58:6d:eb:4b:fc:5e:6c:4c:67:
                    c9:2a:17:4e:6e:ea:65:87:9d:35:62:bf:46:ad:80:
                    c3:ba:d0:65:87:8b:91:7e:a9:39:0f:f2:c0:26:1e:
                    0a:5a:d3:17:17:76:eb:c3:13:f7:cf:9d:3a:80:79:
                    98:25:6f:fb:60:43:e5:3f:8f:93:cb:5e:00:b8:8d:
                    60:55:13:5c:f2:78:a1:19:44:e5:1a:d0:b4:71:aa:
                    3f:98:41:c2:8c:0d:fa:b6:fb:f3:d1:7e:a3:12:d4:
                    68:f5:af:d3:9e:5e:01:fb:a0:21:98:38:22:a7:70:
                    46:f7:11:4b:6c:8a:1d:b6:bf:85:76:f3:48:bb:10:
                    5c:74:5c:95:89:23:cc:93:17:aa:43:7e:72:90:71:
                    14:4c:d2:a9:2c:97:40:10:f1:2b:6d:f5:3f:34:df:
                    9d:9f:47:6c:85:a3:53:95:29:a2:9b:7b:a5:1c:2b:
                    ea:30:f9:51:2c:dc:ad:26:0e:24:2b:96:1f:61:6b:
                    d4:40:da:54:8a:4e:fc:b7:cd:53:c0:75:79:b0:c1:
                    fd:af:75:79:ea:ed:be:e7:35:30:42:54:94:0b:8c:
                    3d:33:fe:a1:92:5d:0f:66:ac:f1:35:b8:47:73:b4:
                    19:00:07:2a:d5:a1:d0:06:c3:41:f9:10:05:a8:40:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:2A:DE:50:BA:E1:8B:37:66:4F:11:D7:3E:B8:72:2B:06:23:92
            X509v3 Authority Key Identifier:
                keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:68:7c:5f:89:8e:37:69:0b:c7:0b:12:06:cf:88:7f:4d:2d:
         6c:a2:31:97:db:8b:9b:c0:df:80:c4:94:02:94:c5:95:38:d8:
         48:ae:7f:04:da:49:76:a3:7a:1c:e7:60:fa:36:c3:c7:ef:8b:
         22:2b:b0:63:90:b8:ce:d8:4f:90:b2:e8:3d:20:92:e0:71:e2:
         b8:75:b4:f6:f6:fd:72:3b:4f:46:2f:3a:ba:e0:c7:a1:4e:e8:
         77:98:7d:ab:85:95:55:be:eb:2f:4f:1d:55:d6:0c:5b:cf:16:
         df:ab:67:92:70:ec:90:b1:b4:65:53:cf:ad:92:06:75:4a:41:
         1a:a8:c9:17:9c:94:da:b7:9e:4f:1a:e5:e2:4e:09:bf:12:df:
         e1:10:a5:47:d3:3f:73:1c:ec:77:1f:57:27:f8:a1:1c:05:c2:
         37:5f:aa:2b:a8:c5:80:19:8c:ba:67:cd:4d:9b:22:f2:6c:50:
         2a:63:74:98:03:29:f0:14:c2:8a:4f:4e:2a:4c:b3:6d:27:eb:
         6b:39:82:46:42:42:4a:85:09:ca:a5:e1:e1:a3:9a:32:3a:5b:
         40:fe:5f:68:3b:b8:e4:b2:b2:1c:06:7e:41:6b:21:f3:19:d1:
         3d:10:9f:34:14:e0:f1:ee:57:13:e8:c4:b7:02:d6:c7:1d:09:
         5c:76:55:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSKT7UMLs4h4l3ty6H0PPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjk2ZTMwNDg3YmE5NDYzZTRiNmFkYzgxYWI3ZGE2NDdj
MzlmZTcwHhcNMjQwNTE3MTYwMDM1WhcNMjQwNTE4MTYwMDM1WjAzMTEwLwYDVQQD
EyhkZGVjMmFkZTUwYmFlMThiMzc2NjRmMTFkNzNlYjg3MjJiMDYyMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqbMlzVYbetL/F5sTGfJKhdObupl
h501Yr9GrYDDutBlh4uRfqk5D/LAJh4KWtMXF3brwxP3z506gHmYJW/7YEPlP4+T
y14AuI1gVRNc8nihGUTlGtC0cao/mEHCjA36tvvz0X6jEtRo9a/Tnl4B+6AhmDgi
p3BG9xFLbIodtr+FdvNIuxBcdFyViSPMkxeqQ35ykHEUTNKpLJdAEPErbfU/NN+d
n0dshaNTlSmim3ulHCvqMPlRLNytJg4kK5YfYWvUQNpUik78t81TwHV5sMH9r3V5
6u2+5zUwQlSUC4w9M/6hkl0PZqzxNbhHc7QZAAcq1aHQBsNB+RAFqEAhHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3sKt5QuuGLN2ZPEdc+uHIrBiOSMB8GA1UdIwQY
MBaAFJIpbjBIe6lGPktq3IGrfaZHw5/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lsdU1FaDdxVVktUzJyY2dhdDlwa2ZEbi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zYmIxNzgtYjMzNi00ODljLTllOGQt
MGQxMTY0ZGFhMWU0LzEva2lsdU1FaDdxVVktUzJyY2dhdDlwa2ZEbi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zYmIxNzgtYjMzNi00ODljLTllOGQtMGQxMTY0ZGFhMWU0
LzEva2lsdU1FaDdxVVktUzJyY2dhdDlwa2ZEbi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmh8X4mO
N2kLxwsSBs+If00tbKIxl9uLm8DfgMSUApTFlTjYSK5/BNpJdqN6HOdg+jbDx++L
IiuwY5C4zthPkLLoPSCS4HHiuHW09vb9cjtPRi86uuDHoU7od5h9q4WVVb7rL08d
VdYMW88W36tnknDskLG0ZVPPrZIGdUpBGqjJF5yU2reeTxrl4k4JvxLf4RClR9M/
cxzsdx9XJ/ihHAXCN1+qK6jFgBmMumfNTZsi8mxQKmN0mAMp8BTCik9OKkyzbSfr
azmCRkJCSoUJyqXh4aOaMjpbQP5faDu45LKyHAZ+QWsh8xnRPRCfNBTg8e5XE+jE
twLWxx0JXHZVlw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:05:18 2024 by rpki-client on console-ams.rpki-client.org