Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          EcXM9LxIPxUxh2AJE/jWKwMVQXN90uOFaQsPhioaUco=
Subject key identifier:   CF:33:B3:5B:A8:01:84:BD:D5:BC:81:58:B7:9D:DC:92:3A:67:BB:D2
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       018F8891FB756A3DC9A503757DD42E3D08E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: 0NffjqNFzP_lsfXiB6wiO4AqtgM.roa (hash: FDHNjaTiWZsof03netrS207D8fi1iOLMbI+ktbQolZA=)
                          2: 25vV_Hla1Uz5TU7dM8H6qVgL2To.roa (hash: f87ENI3MHssTgPGmoqzQl685IQTawybAiHOiQ2Su5oA=)
                          3: GdXmxikGrR1baabP1RdjyTSOe0E.roa (hash: bMDLnFU/nWtxQMlMMMqYNGRxtsP22ykzTqn5f4011Vs=)
                          4: baZ3lK0RUqMYBcv4_ZE-FMcKq4Y.roa (hash: Pye1uq2rRtMv4qWnzaKbY5tyIhueG8KOo2aZhtwf9lg=)
                          5: do3gPz0LlAN1X6Xy8mHxZSlWynU.roa (hash: W683wwuLTRU5fFhOj1GkPOHmi+O/0E5ne9oBPJq3mxQ=)
                          6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: SpHcttF2CYFB7K/lA4EGJRcWiX4dbbE6MhtOGR2XDWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fb:75:6a:3d:c9:a5:03:75:7d:d4:2e:3d:08:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=cf33b35ba80184bdd5bc8158b79ddc923a67bbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:1b:51:13:1a:c6:41:ef:eb:dc:e7:3f:9d:
                    73:21:62:b9:77:02:51:74:3d:60:89:33:74:b5:c5:
                    87:0b:39:eb:d4:fd:8a:77:80:15:52:48:c8:42:ec:
                    f6:53:7d:7b:06:2c:5a:2d:39:5b:84:25:31:3f:17:
                    9b:78:99:e4:5e:33:5e:86:d7:fd:3e:29:b2:d3:ac:
                    a3:32:d8:37:c8:71:f7:e2:c1:0f:7b:35:e0:9b:c5:
                    8b:97:e6:f0:da:8f:72:53:72:53:59:c2:95:a9:78:
                    00:a5:ab:b0:cf:c8:59:03:2d:b4:cf:3a:b7:ed:93:
                    4e:56:a2:a5:38:86:80:6b:fb:65:da:07:d6:a0:f5:
                    ce:15:3c:bb:bf:2b:8b:3f:e4:90:59:5b:c6:2f:a1:
                    bf:13:a3:d6:8c:52:b7:bc:30:4d:11:e5:83:ed:3f:
                    f4:b0:d6:f3:8f:f0:b3:4a:f5:69:25:ef:48:77:e9:
                    ab:4b:36:ad:f1:97:a8:3b:8b:49:91:98:a5:26:57:
                    94:6b:e2:4e:04:c8:8a:ba:2f:53:60:42:ae:55:56:
                    fc:17:fb:60:e2:af:ec:98:5a:17:47:0d:28:dd:db:
                    29:37:31:32:23:3a:61:0b:d4:93:f4:61:61:6d:e7:
                    bb:f8:20:36:ec:0b:86:c3:1c:45:b8:9c:f8:4e:28:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:B3:5B:A8:01:84:BD:D5:BC:81:58:B7:9D:DC:92:3A:67:BB:D2
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8e:95:37:b5:7e:67:1d:5c:04:2e:10:0b:6c:27:ed:10:89:
         af:1e:5a:e6:41:43:64:e5:51:e3:06:44:6c:87:08:c9:3f:c0:
         1b:dd:c1:6a:22:92:c1:f3:a8:73:78:0a:6b:2f:ce:45:6d:1d:
         37:38:7b:22:ae:9b:28:fc:7e:9f:c6:ec:8e:1c:8c:09:47:ec:
         d1:7d:8d:96:34:9b:78:7d:f9:5c:45:4b:f1:81:49:3a:4b:d7:
         f3:38:eb:7d:36:af:13:90:fa:09:58:6e:6e:c5:ea:f4:f7:9f:
         90:b9:4f:d7:fc:7c:98:f8:91:b1:f0:95:fe:e8:1c:ea:0d:c4:
         ae:c2:cd:7f:70:91:28:d9:84:55:ee:4f:66:de:3d:11:c1:a8:
         ac:02:9f:e8:7f:86:50:46:8b:68:aa:af:8d:66:1c:2c:c7:67:
         07:79:24:1e:b2:54:49:45:c0:4f:a8:e2:77:e4:a5:c5:47:c6:
         cc:3f:d6:37:3c:19:cb:ee:3f:5f:bf:8f:e2:76:13:a3:9c:75:
         ad:17:37:21:bf:89:19:42:ce:24:5e:b9:df:6a:26:0e:78:f3:
         f1:8a:01:3c:42:3f:84:a2:e0:1e:17:00:94:3c:f6:c9:95:d5:
         98:e3:71:3f:7b:bb:30:bc:c6:af:02:e0:7b:c8:c7:e1:7f:89:
         b7:f1:e9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:53:42 2024 by rpki-client on console-ams.rpki-client.org