Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File:                     vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier:          QddAkv9Ea2KeXFa28D/90zJEk8wMK3VxB225++ahgaM=
Subject key identifier:   EE:B7:7E:31:67:51:1B:2B:8B:39:3A:B6:1E:60:1F:18:1D:E9:BE:D6
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer:       /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial:       018F87493CFFA0C862F46783ACA96238F7B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number:          1180
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: 8-rwKw2cIL0S43j1LeLRpQJtAQQ.roa (hash: cVXCAq7KDXmf5EGWEq4Sm9ruwtWd2bFiBOjobb+o08E=)
                          2: 8PLiusOVRspaPd-oSU4UnYcoADY.roa (hash: M6fUS34eXxDemspMkwKXdnqbeQg7ek7CFmmG7kQAs8I=)
                          3: AmW2NySToODC32aJkhGvG2CTVlU.roa (hash: 7B8fWaEDmdkK0OUuAVvFl3RhusNQicihxefNE3Hnyhg=)
                          4: btPvnb5o4dsLMaVyZkGPQqo5Gt0.roa (hash: ftiD2VCz/hoSe4pql+bwdRWvMT0MlljUgTs3ttQX72Y=)
                          5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: FtZilLGPKip2G8aUDQGf3xyhOocOyNCFLkIgqDIVTLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3c:ff:a0:c8:62:f4:67:83:ac:a9:62:38:f7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=eeb77e3167511b2b8b393ab61e601f181de9bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:7d:46:08:3d:bd:33:f8:ab:48:0b:b9:2e:
                    21:f9:d8:d1:3d:0b:63:ff:61:3e:14:2d:57:77:6f:
                    73:ac:eb:ab:75:ca:49:f8:37:62:2e:b5:f6:5f:49:
                    9b:37:cb:fd:7f:ad:af:19:1f:17:ee:d6:d3:c8:8c:
                    c0:57:de:46:b3:b2:f0:ca:84:c8:7d:ed:01:48:77:
                    2f:83:c8:b8:42:b3:cb:7b:a0:21:9e:7f:0d:83:23:
                    61:00:5f:4d:ef:3d:ae:a8:ac:36:bc:f8:78:d7:31:
                    2f:80:91:ba:bf:0f:59:0e:a7:f1:8a:11:ed:8f:0d:
                    93:99:fb:e0:23:24:d6:33:bd:27:aa:b6:64:02:93:
                    ec:db:86:6e:e0:4e:c2:7c:f4:5b:28:97:94:d3:c4:
                    72:00:93:9c:89:b8:8e:ab:8a:9d:98:55:2a:82:40:
                    f6:6c:14:d8:74:64:fa:36:9e:16:76:b8:07:0f:90:
                    14:0b:6e:2c:c4:8a:78:ae:53:84:8d:a1:46:ba:1d:
                    97:e5:a0:95:c4:a3:30:99:62:4e:13:a7:69:1f:60:
                    51:06:df:62:ef:03:6b:f6:f3:78:02:21:7d:55:5b:
                    97:23:7d:19:30:c1:d3:35:e3:18:1a:34:6a:14:71:
                    36:a0:e8:65:a0:3b:b5:9f:5a:c2:6d:86:06:ba:ff:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B7:7E:31:67:51:1B:2B:8B:39:3A:B6:1E:60:1F:18:1D:E9:BE:D6
            X509v3 Authority Key Identifier:
                keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:17:b3:62:bc:fe:86:bb:ba:5d:3c:1b:30:c7:ae:dc:69:
         3d:ba:a9:7c:26:9d:b4:7d:ac:64:fd:71:7f:b9:03:ce:14:23:
         c2:75:11:14:c7:20:47:41:0f:7f:1d:c6:69:01:ca:ba:ae:f4:
         44:25:49:8d:08:d6:6e:9b:c8:5e:55:79:c3:98:66:32:12:28:
         e7:cb:ac:9a:5b:9f:b9:10:77:a4:5c:78:c5:8f:5d:65:40:0f:
         a3:f6:e1:68:3a:d3:6e:b8:fd:dd:73:75:e3:8f:8e:b2:79:d7:
         fd:9c:e2:f0:ec:96:01:65:d1:dd:5d:b1:8b:e2:b8:0c:eb:c2:
         e9:d2:73:db:2d:a1:ce:14:56:86:a0:1f:eb:fc:fa:49:96:55:
         03:77:0c:2c:70:7a:60:76:38:df:e8:73:80:0b:25:be:b5:9a:
         e4:e4:90:8f:0e:95:14:e9:2b:b2:5f:ff:61:d0:4e:a0:78:4a:
         27:8f:4c:2e:8c:9f:18:5b:d3:7b:4f:57:99:31:4a:e9:2a:a0:
         d3:57:3d:e5:fd:48:b9:d4:5b:a0:f6:f6:a1:95:7e:d2:0a:05:
         4c:6b:d5:4a:7d:3d:09:96:6c:96:20:60:c1:dc:af:79:fc:06:
         a9:59:52:39:ca:7f:83:ed:71:1a:ad:ba:e1:0d:0c:39:fb:ac:
         b9:d3:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:44 2024 by rpki-client on console-ams.rpki-client.org