Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File:                     gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier:          zv5TGsp2D5EZFH/H1m9/8d0hdO+959kUua6osG7jz6U=
Subject key identifier:   7B:9D:E8:63:29:5C:41:50:AC:71:10:37:53:72:D6:AE:F3:6B:1A:E0
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer:       /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial:       018F87B6BD15FC5C4D2AAF92B6761ADFD5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:51 +0000
Manifest this update:     Fri 17 May 2024 18:00:51 +0000
Manifest next update:     Sat 18 May 2024 18:00:51 +0000
Files and hashes:         1: ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa (hash: 0k+Mzq/cOPCr6/pXSxHPs52VFLR7kRctdtSogHIznKQ=)
                          2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: LK7tP/80kK2SqSF+/n4FBFKtVgSIoWMV86kjZmcS/s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:bd:15:fc:5c:4d:2a:af:92:b6:76:1a:df:d5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
        Validity
            Not Before: May 17 18:00:51 2024 GMT
            Not After : May 18 18:00:51 2024 GMT
        Subject: CN=7b9de863295c4150ac7110375372d6aef36b1ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:48:b2:ad:a3:83:85:83:82:b3:cf:f6:df:
                    60:5f:48:73:c5:6d:cc:7d:3f:c7:fc:a3:27:d0:5c:
                    d2:e2:c8:a5:61:9e:ac:98:33:29:f8:ad:dc:21:55:
                    29:5e:5d:fc:b3:41:20:b4:d8:d9:ec:c9:36:7c:e0:
                    5c:97:3b:2e:f7:46:eb:66:a3:be:f9:f7:b6:db:1a:
                    4b:c7:d3:74:fb:f8:6d:36:3b:72:05:e9:5f:4c:1b:
                    19:1a:cf:1a:86:90:d9:d0:cd:3e:d9:f0:70:25:01:
                    9d:45:8a:7a:b3:95:2a:7f:4a:02:69:3d:d8:d0:9e:
                    7e:ab:c2:56:7e:6e:e0:ff:0c:d0:68:eb:05:73:b6:
                    5d:e0:cf:e0:d5:d4:fc:e5:56:35:a5:0f:50:cb:89:
                    af:25:8c:c8:45:f7:d3:5f:a2:1f:76:57:3e:2f:c3:
                    b1:13:2e:4d:5a:f9:56:6c:c0:51:a3:05:ef:17:ab:
                    71:ff:4b:cb:30:a3:0d:38:6e:38:a9:73:10:8e:77:
                    3d:1c:e0:75:e0:38:fb:17:c1:21:c9:0a:56:8c:32:
                    47:24:1a:b7:f5:06:31:ac:e8:c2:29:76:b3:81:6d:
                    03:8a:3c:35:0d:91:f9:08:e1:76:af:46:f8:05:01:
                    e2:b5:e3:ed:3b:02:1e:2f:65:85:10:0a:87:c1:8f:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:E8:63:29:5C:41:50:AC:71:10:37:53:72:D6:AE:F3:6B:1A:E0
            X509v3 Authority Key Identifier:
                keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:78:c7:0a:c8:ec:17:f0:49:54:74:2c:18:4a:32:17:4f:
         37:28:d9:9a:43:2e:b8:54:b6:7c:1c:f5:14:68:68:40:de:a2:
         08:3f:ae:86:b9:a8:f8:f7:ee:c4:83:96:9a:e0:b3:9f:70:e6:
         f6:cc:fe:a2:c1:f8:21:90:a9:91:38:20:8c:d4:a0:f0:6b:c9:
         b2:7e:99:ab:ad:bb:0c:94:5b:2f:f2:15:1f:c5:70:a9:2d:1b:
         ca:b5:92:e7:28:14:b1:c6:9c:50:48:3a:89:6c:34:10:27:2a:
         b2:96:f2:b1:bc:4a:10:1f:1f:ae:9f:f7:a1:18:aa:47:e3:82:
         b2:72:6b:3f:d2:bb:13:2a:32:07:c0:4d:1b:42:19:d1:fe:97:
         e1:8a:e2:da:90:25:d4:dc:fd:56:a6:a0:8c:4f:6d:d5:60:16:
         96:4c:34:df:e0:68:5e:bd:4f:e1:05:f5:d3:95:2f:f9:24:21:
         bb:2d:a2:74:67:e4:ce:a6:31:75:18:38:82:ae:ff:e9:54:68:
         ca:90:0d:73:7e:b4:6d:4c:9a:73:db:d5:52:99:54:33:e2:7e:
         ae:bf:88:b6:24:3b:73:59:dc:48:62:d2:93:51:03:ad:12:3e:
         6b:e1:f2:26:f0:c4:10:00:60:9e:5d:a1:bd:82:03:04:42:d0:
         7b:d3:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:20 2024 by rpki-client on console-ams.rpki-client.org