Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
File:                     cqdZqCUCUkHhqOASv57Mbyp8Uns.mft (raw, json)
Hash identifier:          D+2uMahHvaLgjMhAqySwFe9LmHoTcA2QV7XkNx2U7Iw=
Subject key identifier:   13:A5:7C:29:7C:27:E2:33:A0:87:F5:23:83:E5:6E:D4:D3:74:BE:DC
Authority key identifier: 72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
Certificate issuer:       /CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Certificate serial:       018F87485ACF1654E4BE22A365EFA26E5141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:16 +0000
Manifest this update:     Fri 17 May 2024 16:00:16 +0000
Manifest next update:     Sat 18 May 2024 16:00:16 +0000
Files and hashes:         1: 8k6GkAOae_jBFbQbLdXCkL41trs.roa (hash: mDxeFwwYKV92WPAg0+nnbr5JYz2pP6RQagd/3AjluUQ=)
                          2: cqdZqCUCUkHhqOASv57Mbyp8Uns.crl (hash: U0CsrVdRQjKXYCoLkU25LS0CkqHu4zbJNeqQaTvWMA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5a:cf:16:54:e4:be:22:a3:65:ef:a2:6e:51:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
        Validity
            Not Before: May 17 16:00:16 2024 GMT
            Not After : May 18 16:00:16 2024 GMT
        Subject: CN=13a57c297c27e233a087f52383e56ed4d374bedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:6f:1d:e9:0b:f5:0b:85:be:00:ee:97:8a:
                    a4:86:83:22:a9:4f:c3:fe:be:0c:af:8f:9a:d4:4b:
                    43:e7:cd:68:d0:0e:78:83:77:f4:5d:6d:d1:17:59:
                    6f:3f:cc:68:82:d4:cb:59:6e:36:8b:8b:59:ca:c5:
                    ed:76:d1:49:d3:5c:0d:39:06:44:34:6d:85:b6:b8:
                    37:64:cb:95:f1:70:e4:43:09:03:e8:a0:58:2e:69:
                    9b:b6:f1:3d:b1:ac:da:ba:0b:34:77:c9:85:14:51:
                    40:69:23:53:47:41:12:f7:df:b8:db:bb:26:40:8d:
                    8b:0e:fc:01:a0:6a:73:b3:a4:63:b8:fa:7d:ea:1f:
                    e9:91:5e:e1:3a:1b:8a:76:81:83:f0:da:13:c7:3e:
                    f1:d3:13:80:fc:71:9b:46:58:22:1b:8a:60:8d:da:
                    6e:d2:70:74:f0:53:44:35:a0:33:ed:9c:a1:25:00:
                    26:ea:b0:52:a8:ef:19:63:4e:1a:b8:48:41:2f:41:
                    c5:2c:cf:37:5d:14:2f:93:7a:6b:58:86:a5:96:fe:
                    24:49:43:65:c7:dc:52:10:c1:57:a3:11:72:42:5c:
                    a5:02:19:e0:34:8e:6d:e5:25:de:56:2d:22:f4:1b:
                    a4:32:cf:5d:ec:3a:ed:31:4d:19:10:fe:50:21:0e:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A5:7C:29:7C:27:E2:33:A0:87:F5:23:83:E5:6E:D4:D3:74:BE:DC
            X509v3 Authority Key Identifier:
                keyid:72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b7:7b:cd:97:8e:0e:d1:51:4a:60:17:cb:ca:18:f4:99:8a:
         d7:f6:89:35:29:ee:00:fe:18:b8:4e:8e:31:d0:14:77:cb:fb:
         a2:49:4b:c2:66:c0:4e:d4:b3:a6:75:f6:90:12:c2:b2:91:41:
         b3:12:65:83:ff:d5:6a:37:78:ac:eb:29:2a:cd:3b:83:83:dc:
         4f:32:13:89:c9:66:3e:2b:72:f6:b1:f8:5e:4c:b4:8e:d7:02:
         71:f8:ce:db:a1:59:fc:08:d9:20:4c:75:6c:43:d0:1b:f4:df:
         52:8f:a5:fd:48:f2:3d:a2:4a:c0:15:e7:a3:df:27:f8:a1:46:
         17:c2:e6:0a:23:62:a2:bb:c9:08:13:dc:0f:0e:21:e5:45:2d:
         d9:0f:86:bc:8c:b8:e8:1c:7d:9f:16:f4:8a:f2:70:fb:99:e6:
         59:c6:64:aa:d9:57:6a:a3:c2:5a:c7:5e:82:67:83:21:44:ba:
         eb:6a:6f:7a:45:ee:30:d9:3e:f1:2d:d4:cf:67:a8:1b:3b:e2:
         c9:51:87:28:04:aa:79:ec:64:43:b9:c4:bc:dc:6e:92:2e:db:
         c8:3a:1f:a1:34:c5:4c:37:53:28:bf:a3:60:36:b2:2a:69:3a:
         0b:2a:1d:a1:62:8b:03:14:2d:b5:f3:73:ae:9c:a5:fb:c1:73:
         54:8e:4c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:09 2024 by rpki-client on console-ams.rpki-client.org