Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File:                     ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier:          3HMlhoaLH6HgRG+QqdSo1MmRqnvPcY1ZOaLDxRKml98=
Subject key identifier:   BB:9D:86:AC:09:52:6D:FF:C8:B6:D7:ED:D4:F7:F2:98:60:04:77:33
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer:       /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial:       018F874A094CA1E39EB5A0033A99BFE7D5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 16:02:07 +0000
Manifest this update:     Fri 17 May 2024 16:02:07 +0000
Manifest next update:     Sat 18 May 2024 16:02:07 +0000
Files and hashes:         1: TcEiBPrnQCX817ojtwnEyYWcoy4.roa (hash: e1C86YsxQ0ICRFXCBhTEfXBlPBN6Co3VPhvPKCE36kk=)
                          2: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: uA2h22VmRK/g5Ts5ZGIcprdVDROm/KaUWoZIFTo3KRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:09:4c:a1:e3:9e:b5:a0:03:3a:99:bf:e7:d5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
        Validity
            Not Before: May 17 16:02:07 2024 GMT
            Not After : May 18 16:02:07 2024 GMT
        Subject: CN=bb9d86ac09526dffc8b6d7edd4f7f29860047733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:cc:a9:7a:53:95:9e:45:cd:4f:69:84:4d:
                    76:e7:3f:61:ed:d8:e2:a3:a1:cc:62:eb:26:f4:65:
                    e8:88:11:1f:fa:bc:24:57:75:d4:03:51:6f:f6:09:
                    5d:fb:cb:fd:61:d2:44:0e:38:a8:ba:8b:9c:33:d5:
                    c2:6f:db:f4:cb:f5:04:e3:b4:9b:80:88:4d:ce:0d:
                    e6:8c:db:73:36:ed:b9:f5:2c:78:0e:29:e3:dd:8b:
                    ec:ec:6c:f4:a8:03:f2:6a:55:40:0b:91:09:02:e7:
                    55:fc:f2:67:f8:5c:e4:2b:a0:23:f5:4f:16:86:94:
                    d4:ea:00:eb:ff:45:9a:e1:43:fc:00:51:ee:fa:0f:
                    6b:65:66:a8:83:b9:38:dd:3a:9a:98:eb:bf:cc:ed:
                    cb:50:37:79:91:9f:e7:ad:57:34:44:f3:4e:d9:40:
                    49:b6:49:f6:fe:15:f7:49:4d:3e:32:5a:31:fd:f3:
                    a6:45:45:87:d7:3f:c6:7f:e1:ee:90:b7:16:dc:e1:
                    ed:57:f9:74:66:a8:20:4c:c2:88:ae:f8:ad:e6:4a:
                    3e:17:90:65:4d:98:a5:69:43:f5:74:7f:6b:79:2a:
                    18:b6:0e:32:fd:19:5d:18:56:8e:34:4b:42:8b:1a:
                    d0:e0:c3:76:ad:4c:f4:0c:6b:6c:12:9c:9f:49:93:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:86:AC:09:52:6D:FF:C8:B6:D7:ED:D4:F7:F2:98:60:04:77:33
            X509v3 Authority Key Identifier:
                keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:7b:ab:66:bc:ec:48:dd:55:c4:22:29:04:db:dc:b3:93:eb:
         47:f7:f9:fc:92:32:a3:a5:6e:4f:f8:ed:a6:ec:84:29:23:b3:
         cf:7e:6d:59:b7:98:c5:be:1d:0c:46:22:e6:f1:ff:61:c8:10:
         4e:bd:9f:90:6f:67:66:b2:82:d3:ee:4b:d1:4c:2b:74:39:57:
         5b:83:b3:39:34:e0:c9:24:55:b7:31:f4:97:fb:74:8d:d7:51:
         5a:e3:62:30:4a:a8:b7:95:d2:79:6c:5a:23:04:b3:ed:a5:a2:
         f0:d5:68:c5:55:79:e8:bb:c2:d4:93:f0:27:62:28:05:d5:b3:
         1f:ae:fd:bd:5e:cb:f4:8f:86:45:ad:5e:ed:47:3d:61:a2:e4:
         c0:d7:de:73:b8:46:fe:1e:5a:ea:14:f0:76:9e:f8:2b:b4:2f:
         5f:aa:20:4f:d1:12:3a:7f:2a:4d:27:60:0a:81:98:2c:1e:0b:
         5d:5a:f5:a1:9f:4f:ee:d5:5c:36:03:de:6f:84:7f:88:6a:5b:
         71:96:8d:02:2b:62:8e:98:4c:cc:c0:0c:5b:4b:dc:11:86:d0:
         d7:99:a3:d1:fb:60:63:77:74:3f:bf:fa:5a:30:47:c5:31:38:
         ee:54:dd:06:e4:aa:85:fc:18:ea:c7:99:5f:5e:57:68:07:47:
         2f:56:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:07:28 2024 by rpki-client on console-ams.rpki-client.org