Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File:                     XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier:          YL0+65uTLi/eBZ90QxW8GJF/pDDOj2R56KCMTowtA/8=
Subject key identifier:   FD:A3:BB:C7:63:58:50:5B:4A:D4:4B:56:13:13:29:89:72:A3:8E:C4
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer:       /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial:       018F87B6756A080B45D9F4990B78F9D8D954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: VMwsc35unOvedstPUcxM4PUYgGG1SmsTp4QHhiyfOt4=)
                          2: wiFwvlb4P1lUc4u0Ig1Rv8rBN24.roa (hash: JcrVbAr3EkZBZNASqlnVilO3B003i4kGZ/FXdXAiDT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:75:6a:08:0b:45:d9:f4:99:0b:78:f9:d8:d9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=fda3bbc76358505b4ad44b561313298972a38ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:0b:08:9c:a5:d2:4e:d4:1c:8b:57:50:5c:
                    49:98:85:f3:65:33:a0:e4:e0:0f:76:46:de:57:fa:
                    41:fc:d0:21:c8:8e:c0:2a:5a:bf:4f:5a:d3:8c:91:
                    c3:8b:ca:5f:ca:e5:67:73:a7:f7:ce:e6:c8:47:6b:
                    71:fb:9b:56:23:14:51:84:86:5e:ba:db:0c:f3:3b:
                    65:91:c4:4c:0e:0d:82:64:fe:b6:c7:f7:71:f1:85:
                    20:21:9a:95:4b:36:72:22:87:94:29:07:be:75:b2:
                    a8:1f:6c:5d:98:4c:9b:59:e4:10:48:49:44:2e:47:
                    5a:94:35:bc:ba:09:0a:3c:4a:49:d3:32:94:ea:db:
                    5b:f9:96:b6:8f:ba:48:61:7e:ea:60:ed:9a:69:2d:
                    73:36:8d:a9:92:03:83:f6:74:c4:7d:e3:00:d8:c0:
                    ad:a4:94:5a:2e:0e:b9:07:23:bb:ac:38:42:8f:69:
                    96:51:fd:75:6d:94:26:81:ba:b4:c9:d4:4f:21:91:
                    d1:ac:93:29:ce:e3:0a:93:68:8f:3b:93:a7:fc:42:
                    d0:a4:c3:a2:34:57:29:a8:f8:cd:ec:c9:a8:27:a9:
                    77:59:95:c5:33:18:df:89:ab:65:c7:68:21:aa:47:
                    73:0e:ab:df:52:d4:2e:0c:66:cf:d9:e1:1e:52:15:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A3:BB:C7:63:58:50:5B:4A:D4:4B:56:13:13:29:89:72:A3:8E:C4
            X509v3 Authority Key Identifier:
                keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:83:c0:f9:16:60:97:62:29:7d:81:90:ba:7c:7e:ad:64:
         82:18:12:f1:35:a0:50:69:89:dc:b9:80:8a:7b:19:9f:de:ac:
         1f:19:ee:58:a0:11:c4:6a:34:d8:3d:c4:d0:4e:b7:44:d6:68:
         a4:25:ef:e6:36:6d:89:e0:f6:08:5d:36:8e:b6:9e:3d:6b:7d:
         c2:1d:6f:2b:15:25:72:9d:1d:db:c4:5e:c0:bf:8f:13:96:ce:
         56:d1:0e:44:ce:9c:c7:d5:e4:bf:c1:5f:3e:24:78:c8:9b:dd:
         89:71:36:af:03:92:8f:4f:9c:03:7f:35:ab:27:6c:57:a5:47:
         91:42:0c:e0:e2:b0:1f:2a:f2:d3:fb:a0:f5:9b:a3:2f:1b:cd:
         c0:4b:97:43:3a:62:c2:76:84:75:c3:b7:25:3b:d1:e5:2d:32:
         4a:aa:e2:0f:7c:90:29:26:36:74:ab:fb:2f:af:2f:5f:e4:45:
         76:42:3e:a5:54:c1:63:f4:df:7c:b4:1b:df:e8:e4:7a:fb:74:
         ac:b1:61:ab:74:f9:89:db:7c:9a:79:f9:aa:47:8e:40:9b:3a:
         11:15:ae:d1:08:22:c9:4c:7b:15:69:fa:18:a1:e9:8c:99:84:
         3a:fc:9c:92:ab:82:d5:e1:8d:da:10:60:e7:d6:c7:df:91:ec:
         92:82:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:56 2024 by rpki-client on console-ams.rpki-client.org