Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File:                     xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier:          vZTJSJBT3wcO2NWhuFtps1j/zgGxfApdXmZfZk3DRq4=
Subject key identifier:   41:7C:7A:2F:42:15:9F:A4:77:F8:0C:0F:DF:C9:0C:FA:BE:60:D5:9A
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer:       /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial:       018F87B6B0CCE25D19A71DC05688CA2616D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: qqwZ6TwQpxAPLdN6UbYaP4XJBMs.roa (hash: 6X0FE8vkI0isp4lPbX22XxG2XfuLLCqmgds+VSA04Nw=)
                          2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: YdkEp3Bv04keN+V+CurXd3rpDaLd6UFLtTSxKcaMH0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b0:cc:e2:5d:19:a7:1d:c0:56:88:ca:26:16:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=417c7a2f42159fa477f80c0fdfc90cfabe60d59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:a4:56:a1:13:f5:3e:ed:cc:16:eb:a4:9a:
                    c2:a7:ce:4b:75:b9:2d:ed:8a:ee:a0:f1:33:8b:12:
                    de:8b:44:e9:13:36:bc:65:37:34:c2:c3:df:e1:a1:
                    a8:81:7c:52:08:7b:85:f4:fe:92:5f:99:60:f4:35:
                    78:fe:2d:e0:35:cc:9b:9d:62:a6:e4:22:c6:5e:12:
                    18:40:99:6f:e7:06:99:89:62:0e:d1:d2:93:31:b2:
                    d2:64:40:fd:98:31:65:93:15:f0:a2:f6:e0:da:4e:
                    0e:57:c0:d0:d9:31:4e:37:c5:c1:65:ab:6f:30:26:
                    68:35:dd:d4:3d:f6:0c:82:49:a8:09:3b:24:6a:f8:
                    1a:97:31:55:75:c4:5b:f2:56:f3:16:3b:29:50:44:
                    f7:8c:c1:69:8a:0d:c0:3a:2e:43:c4:44:10:b8:a9:
                    8f:62:2c:fe:84:b7:50:bd:a9:80:2e:5c:a6:f1:41:
                    51:cb:00:a7:70:7a:6b:ac:6b:12:7e:42:6e:5b:94:
                    93:a6:24:ba:c9:c5:d5:03:bf:85:5b:0a:40:93:c3:
                    68:3d:6a:94:03:51:70:75:75:f7:67:bc:ba:88:8b:
                    95:f3:07:28:b2:ed:6f:ca:0e:be:e6:10:66:8e:ab:
                    7d:12:f1:74:d4:86:b2:50:44:4d:2f:59:2a:f2:d3:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:7A:2F:42:15:9F:A4:77:F8:0C:0F:DF:C9:0C:FA:BE:60:D5:9A
            X509v3 Authority Key Identifier:
                keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:3d:0d:b2:b6:57:49:85:91:99:de:d2:89:6c:07:2e:7d:
         3c:0b:91:f7:3e:8b:ff:8e:4c:2c:0b:3e:f8:d1:f9:91:d4:81:
         f9:74:d2:e4:c1:03:57:a5:86:bd:21:b1:69:fb:98:98:72:f2:
         eb:39:b0:fd:cc:89:0e:bc:ee:47:5f:c0:0b:9f:79:11:b2:b4:
         f5:51:a5:e1:09:49:f5:61:b8:4f:4f:f8:d9:cb:9c:55:bd:3f:
         a5:39:d5:76:34:c2:11:b0:1d:11:48:b1:63:12:9d:41:b0:90:
         7c:69:a4:9d:ed:92:9f:f4:07:e1:46:b8:f0:21:6a:c3:7c:72:
         da:52:64:1c:d5:85:ac:4d:b5:64:14:b9:06:52:3c:3a:66:d0:
         27:52:61:12:ef:9e:1a:cb:7f:fe:69:af:f7:8d:c5:85:ce:cd:
         bc:93:89:64:62:c2:68:72:92:33:4d:f0:92:f1:d1:e2:c3:a7:
         b7:51:29:db:51:c0:e6:77:97:3d:a5:15:75:a9:2f:6d:4e:ad:
         5f:9e:4f:8d:16:9d:96:0f:60:be:fb:fb:68:47:0f:36:1f:dd:
         83:1a:28:49:01:34:6a:07:47:03:1b:a6:51:45:a1:3d:6e:41:
         d8:f3:96:79:d1:d6:ed:b3:73:f9:c3:f5:81:6d:50:08:02:07:
         b1:ab:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:12 2024 by rpki-client on console-ams.rpki-client.org