Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File:                     XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier:          BKiAD1S1UvcBbLHZYlFg8CB3D90974KdtCcC2HSCemk=
Subject key identifier:   77:D7:D7:3C:F7:05:8C:33:81:EA:86:05:64:5F:4B:64:45:42:BF:6B
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer:       /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial:       018F8749641361207A477672ED8249C9562E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number:          1068
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: QSCagCKR6E-iwPatTgiBzu5EJFE.roa (hash: l2nH81wdsY/P5BV+bhy/lxv+QGFXe/gZFUO/AvDXpNc=)
                          2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: bxCjCNe7ko5t2VHIbJa8fKdiU4TdYG+wv1c1dJMJD3s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:64:13:61:20:7a:47:76:72:ed:82:49:c9:56:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=77d7d73cf7058c3381ea8605645f4b644542bf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:e9:3b:47:e3:71:b2:52:cd:e9:95:f8:74:
                    63:2c:cd:55:86:c5:a1:a1:30:0d:32:0c:44:a8:b9:
                    96:a7:f7:7f:32:a1:08:7f:d0:bd:d2:e7:17:76:89:
                    c5:e7:2f:b0:d4:81:7b:9a:92:03:63:46:98:d4:8b:
                    ba:9f:8d:50:6e:54:43:6a:bf:a5:d0:b8:f8:83:76:
                    d3:d3:8a:1f:32:24:dc:c4:96:d4:6c:41:6f:f1:f1:
                    c4:ab:8d:be:60:09:54:05:a0:bc:15:09:ae:7a:af:
                    f6:b4:6f:cb:63:d5:c2:b4:33:58:df:71:4c:6b:40:
                    b8:0b:f5:0f:12:4c:35:c5:f2:1f:bd:66:d5:21:2c:
                    89:74:a0:5b:9c:68:a1:e6:5b:10:13:b6:0b:1d:41:
                    99:a0:5c:8e:66:4a:bc:c2:f6:8f:c3:b9:59:1c:b2:
                    11:a9:2d:31:05:c2:42:ac:ba:01:3b:e2:ad:ba:62:
                    0b:6e:22:82:46:c1:c9:db:64:6d:d7:f5:5b:46:7c:
                    b3:a5:82:83:ce:40:65:9c:cc:b4:a2:0b:92:e3:fe:
                    ed:68:26:54:7a:33:8b:bb:64:fc:75:ce:1b:ea:36:
                    3a:75:8b:3c:9e:3a:ad:b4:bf:05:ee:55:e4:85:42:
                    17:03:0d:36:aa:5e:7a:76:af:97:99:88:42:f1:c8:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:D7:3C:F7:05:8C:33:81:EA:86:05:64:5F:4B:64:45:42:BF:6B
            X509v3 Authority Key Identifier:
                keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:b1:eb:10:87:4a:b9:a6:bc:d9:99:da:4c:b0:74:03:b7:
         3b:17:6a:86:93:66:81:2b:4f:c1:0f:0f:e7:73:14:50:14:4d:
         e3:99:3a:56:80:02:29:c7:4d:6b:c0:ba:8e:f7:e5:d9:f3:e7:
         f8:9f:6b:8e:ef:93:11:f7:8f:b4:3b:be:6e:99:aa:e7:b2:7b:
         f2:ce:da:90:a1:47:4a:ab:df:2b:bb:2b:b6:41:f0:3e:1a:73:
         06:e8:37:f4:90:7b:9e:e7:65:33:fc:4a:58:92:2c:a5:c0:77:
         b0:a6:2c:7a:09:7b:31:37:35:37:1b:ff:8d:af:34:c5:d4:fa:
         e4:7a:94:28:5c:b1:b0:b3:50:b4:6f:ba:a9:fa:a3:c9:cd:c0:
         76:b7:cf:d0:f0:8c:f0:14:58:2e:8a:44:2c:3b:1d:0d:86:8a:
         48:f2:45:d0:a1:f3:cb:cd:18:f5:f3:32:7b:92:e0:41:e9:a0:
         dc:ea:9b:f9:c9:75:f9:bf:78:d6:0e:fe:1a:20:db:02:60:bc:
         2c:00:10:20:14:5f:b1:1d:17:4c:87:c3:78:42:44:37:16:dc:
         dd:1b:7d:7b:bd:6c:e5:08:4f:43:ed:b1:9e:26:e3:df:25:62:
         a4:84:40:af:68:c9:74:9b:c6:ec:3c:6e:01:bb:e6:f4:18:07:
         81:b6:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:20 2024 by rpki-client on console-ams.rpki-client.org