Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File:                     S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier:          qBu03HFNJGSKs3FI8dlwBo1hZ7ToH0zAPBru1XlcBJc=
Subject key identifier:   FE:E9:03:88:B9:A1:38:31:73:C8:FF:BE:BE:35:C4:F4:0C:40:18:29
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       018F8748D5CCE203B3EBA8422F10414AA6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:48 +0000
Manifest this update:     Fri 17 May 2024 16:00:48 +0000
Manifest next update:     Sat 18 May 2024 16:00:48 +0000
Files and hashes:         1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: Sa4fz6Z9ZIKtk/VXjlRaLWsIj+tz4//ul2PiBazWlC0=)
                          2: Yx4xe80VPk4Z468rCAzaleNclfI.roa (hash: cJznuRdnD9+Vk/7pR2Z/hcujuy1O+maGzXqXO8rX2F0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d5:cc:e2:03:b3:eb:a8:42:2f:10:41:4a:a6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: May 17 16:00:48 2024 GMT
            Not After : May 18 16:00:48 2024 GMT
        Subject: CN=fee90388b9a1383173c8ffbebe35c4f40c401829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:56:ae:ff:f8:2e:42:01:11:17:30:9e:aa:
                    ab:7e:74:56:7a:af:bc:42:ac:ab:d8:4d:db:59:9b:
                    d6:4d:b4:dd:c9:59:56:e6:a0:cc:ad:e2:b0:8b:ec:
                    f0:fb:61:cc:3f:05:12:93:d9:94:c4:13:20:ea:06:
                    37:c1:6d:5f:18:af:ae:30:90:9f:82:fd:00:a6:a1:
                    6a:5f:a2:d2:37:15:fa:e6:1f:73:4e:67:58:2d:f3:
                    b9:de:88:a6:2f:b5:3a:1e:c3:1f:fe:d5:03:9e:8d:
                    c9:99:b3:b2:c4:21:6c:7c:8e:ff:a2:b9:29:b1:3b:
                    b4:42:bc:44:a6:6c:db:ed:da:d5:de:f4:e4:da:1b:
                    93:02:37:a0:90:56:81:33:82:a4:64:6c:e3:49:32:
                    7d:d7:d4:44:3f:c0:39:59:ed:c1:73:7c:d6:1b:49:
                    4e:a2:87:4a:79:1c:ec:27:ec:7b:ec:e2:ac:29:32:
                    c5:9a:34:27:a2:1e:7e:d7:88:6a:d0:5b:51:87:69:
                    85:dd:69:96:fd:94:42:12:01:29:f1:71:de:f0:d3:
                    58:c1:7b:c8:5a:ff:d0:84:20:0a:c9:2a:4f:89:6a:
                    13:b9:66:2f:91:06:1b:78:f2:d3:f5:4e:d5:5f:cc:
                    43:10:0c:22:7a:aa:bc:a8:2c:56:e3:6c:cc:02:ce:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:03:88:B9:A1:38:31:73:C8:FF:BE:BE:35:C4:F4:0C:40:18:29
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:07:89:eb:75:51:50:22:ab:25:e9:59:ae:c9:74:ae:fe:
         5a:fd:42:1e:a6:e6:fe:df:3b:38:fb:74:57:60:36:af:12:3f:
         24:89:62:cf:0e:e9:da:f7:88:ab:77:7c:50:0d:10:03:47:7b:
         44:a6:96:8a:1b:38:cd:07:11:09:72:55:73:98:25:37:a2:4f:
         08:f6:0c:7c:77:87:65:bd:07:86:86:ad:97:06:e0:3e:de:7b:
         d5:a2:fd:a1:40:5a:16:91:bb:a8:93:5b:83:c5:1c:db:57:57:
         99:6d:08:a8:04:bc:af:cf:45:0c:4a:fd:c1:80:c5:15:b8:2c:
         92:6c:45:19:e4:f3:84:91:44:f6:51:d1:6f:71:d9:18:e4:cd:
         e9:f0:3f:19:9e:a7:73:ac:9f:dd:b8:e8:88:08:e9:e8:ca:61:
         e7:4d:7b:b6:88:06:9e:f1:05:67:93:35:9b:57:04:2d:cf:4e:
         0e:e9:15:61:d4:10:e0:28:aa:fd:f5:fd:f3:8a:d2:da:a6:13:
         9e:ec:c3:61:c2:b4:83:c5:9c:df:69:27:e4:92:3d:85:f1:7c:
         1e:ba:43:7c:9a:9b:92:5b:4c:06:43:2f:5c:23:e1:78:ab:5d:
         1d:ef:b8:5c:d1:94:f3:b2:99:e2:f4:3e:92:e8:a9:c5:99:99:
         9c:41:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:43 2024 by rpki-client on console-ams.rpki-client.org