Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File:                     MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier:          VbFKid6Tvi1KUzRHaAyt8OzINQoClqxF2v4rcjlo1RE=
Subject key identifier:   C4:CA:42:9A:5B:AB:67:FD:66:5C:51:60:D7:56:87:AE:A5:0B:BF:78
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer:       /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial:       018F87ED432ACF064FEFAC78818FD3912E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number:          0135
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: 51FdA_mORRb0O20tk0v2Hgs_3ms.roa (hash: 3x6e8JS4ZARCG2D9oHEriyhEV8CJZtrY8+C0mc1I/28=)
                          2: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: N9xJsdEZaYlcFmkBCbT9Nsl1tofPLz4FuJkbxiIWVdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:43:2a:cf:06:4f:ef:ac:78:81:8f:d3:91:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=c4ca429a5bab67fd665c5160d75687aea50bbf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7d:cf:54:1d:19:ed:d5:75:71:f9:9e:29:d9:
                    83:f3:2a:1f:1a:0d:da:77:09:06:2d:a0:70:06:f8:
                    7d:42:9e:f1:e8:ad:0d:84:29:4b:e8:1e:33:ed:96:
                    77:f5:0a:dd:15:f0:26:4b:c0:b0:e6:e4:c5:72:de:
                    d1:92:26:c2:0e:98:e0:93:41:07:ab:79:23:63:84:
                    2a:67:35:7f:cb:e6:13:c4:35:39:1d:f0:b0:10:61:
                    3e:e2:4f:e0:90:5c:d6:2c:d1:98:d5:07:68:02:4d:
                    7c:1d:60:d5:59:d7:69:48:88:bf:05:64:dc:05:c1:
                    ac:37:46:cd:67:85:ab:04:74:ef:74:21:91:ed:e1:
                    8b:a7:a8:65:fc:2d:92:3a:32:21:3e:8a:b2:fc:f6:
                    f3:5f:db:d5:72:b8:1c:44:8b:81:4b:fc:af:8d:eb:
                    f9:88:69:d9:1c:94:d8:0d:7c:b2:a6:4f:60:28:78:
                    e9:ac:2b:4d:c8:76:27:cc:09:05:74:53:ca:65:74:
                    84:b3:3d:7d:90:18:34:00:46:8a:36:4b:62:10:6f:
                    73:3f:2d:97:55:a1:93:e4:1a:35:33:74:86:8d:3b:
                    b4:07:9b:99:d2:7d:5e:e2:ca:50:3c:3b:17:b2:a6:
                    f1:36:30:95:d6:7f:21:a8:fd:ca:1b:5e:ca:fe:db:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:42:9A:5B:AB:67:FD:66:5C:51:60:D7:56:87:AE:A5:0B:BF:78
            X509v3 Authority Key Identifier:
                keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:b3:86:c3:05:c5:a7:b2:8a:95:35:d6:c0:22:1e:13:f4:
         a6:16:c9:99:dc:04:de:69:60:ea:a0:ff:7f:68:b3:8d:1e:73:
         d1:39:9c:1f:a4:71:a1:09:58:f2:44:d1:e1:ef:31:56:d5:15:
         e9:a3:fd:cf:ca:7a:20:9f:68:f9:fc:ac:a3:dc:a8:44:4b:3a:
         fb:bc:7b:4b:44:56:0e:cc:09:63:31:2f:e5:78:41:1f:63:e8:
         23:41:0e:dd:aa:ee:7d:77:50:9e:92:bc:af:e5:a4:9f:86:5e:
         36:e0:b3:1a:2c:85:4b:9a:a0:af:1e:ba:c2:e1:3c:11:37:ff:
         7d:87:7b:bb:d0:97:3d:bb:51:81:10:ff:03:1b:be:7c:08:05:
         61:e1:2a:34:b4:8f:ac:f9:d4:c8:c6:c1:81:5f:07:e3:33:89:
         77:80:ca:96:ea:8f:0b:38:84:33:ae:57:7f:8c:00:89:4c:7c:
         24:22:62:1f:11:70:93:a3:a9:4c:3d:9a:c1:41:b9:74:ea:0a:
         95:40:3e:3f:04:f8:57:ad:21:49:c6:b7:59:92:6a:ec:b8:7b:
         d8:66:96:45:a8:ee:e4:7a:f9:fe:2b:d0:f5:39:67:de:86:cd:
         a3:5c:88:76:1a:b8:3f:b2:be:78:6e:07:e1:70:73:16:d7:7e:
         47:a1:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:46 2024 by rpki-client on console-fra.rpki-client.org