Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File:                     rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier:          /bjAWP4KvqTAwTgMB21SI6tG4AWKeqPVn4Kw/696v14=
Subject key identifier:   3A:E3:0B:96:B6:D3:B8:58:89:1C:D4:B3:E8:9E:B3:EC:24:91:7F:72
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer:       /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial:       018F874921EDD08BF5EE1B513D6D5785BBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: AF86ctvxfEoXhtJ2G77F8mRIZ9M.roa (hash: uGbOVc2coLS6yXqtRsOkPmkA1VvnrFkhJeb3EuZ7Wac=)
                          2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: Q1YjzVpVL0SYEfmCfzliaAyCS539GrEGMcBAsKE/SJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:21:ed:d0:8b:f5:ee:1b:51:3d:6d:57:85:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=3ae30b96b6d3b858891cd4b3e89eb3ec24917f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:9b:e2:48:e1:48:a1:73:c0:97:c8:7c:b8:
                    bd:cb:11:66:aa:15:42:29:ac:16:1e:27:3d:1e:26:
                    81:34:ff:98:82:9b:26:77:fd:50:dd:76:0c:9b:97:
                    ff:c3:71:ed:cf:95:e9:80:06:b3:a8:a7:ec:2a:ab:
                    a1:a5:53:7d:59:15:71:27:16:b7:3a:37:bb:cb:b5:
                    3d:12:c9:fb:14:df:49:d9:73:44:5e:bd:91:80:2a:
                    94:35:39:44:23:2a:a4:b6:9b:2b:0d:fa:f4:a8:1b:
                    03:04:44:57:96:41:4f:9e:02:7e:55:0f:92:3c:7a:
                    75:0d:54:24:b7:c4:b9:24:d1:ba:b4:ef:61:fb:3a:
                    20:57:b7:17:d4:29:af:6c:60:a8:4a:83:23:33:51:
                    d7:41:7f:5a:d7:f6:38:b7:26:88:ed:89:28:c9:fd:
                    78:d3:02:6f:f4:8e:be:88:4c:f7:99:ac:ae:0a:9e:
                    8a:2c:6e:a1:79:b8:0b:be:d5:3b:74:70:b6:18:0b:
                    6c:bd:23:fd:58:8e:cf:cc:7b:ba:55:5f:a7:37:10:
                    a2:88:1e:30:68:3e:73:74:ae:e2:61:cd:62:85:a6:
                    08:81:0d:a4:e3:62:0a:ef:20:6f:09:03:e8:6f:3d:
                    c6:31:b0:3f:df:99:14:8c:a6:c1:14:80:83:2b:48:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:0B:96:B6:D3:B8:58:89:1C:D4:B3:E8:9E:B3:EC:24:91:7F:72
            X509v3 Authority Key Identifier:
                keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:1c:8a:78:0e:ae:d0:de:33:72:ac:04:93:38:65:4f:05:05:
         e0:77:44:f6:df:86:8b:f1:85:94:d3:8a:2a:e6:35:d7:0f:60:
         3b:73:2c:ca:7c:41:4e:94:71:bb:58:6a:0c:40:3f:9b:fc:01:
         0c:7e:f6:ae:44:15:9f:45:0e:0d:f3:7b:59:8a:f1:6d:94:28:
         29:a1:b9:d5:8a:23:90:d7:78:5e:ae:f0:73:f8:f2:c9:69:f4:
         45:b6:9c:68:cd:e6:21:6a:08:01:b1:7a:56:a5:bf:92:fc:93:
         cb:6a:b1:b2:78:b3:80:fa:19:95:53:0c:b5:88:a0:5a:93:52:
         4f:26:a3:5a:2e:66:3f:a4:39:06:3c:c3:62:72:1c:c8:00:35:
         66:5c:a0:4c:1c:82:de:93:d6:5f:f5:b0:c9:30:0b:99:09:80:
         00:5c:05:25:10:03:bf:0f:5d:43:a3:20:e8:d2:4c:25:64:2c:
         51:92:d5:c7:22:6c:16:ae:23:cd:39:3a:33:d5:d9:13:5f:78:
         16:a3:43:f9:6b:dd:74:49:a7:88:e2:99:48:fb:9e:a9:ec:cd:
         7c:da:14:76:30:d2:77:41:5c:5f:82:69:80:70:ee:d5:db:54:
         8d:1f:19:9f:58:45:86:a2:35:83:eb:0e:83:ec:5d:04:4d:6b:
         21:c7:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:54 2024 by rpki-client on console-fra.rpki-client.org