Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File:                     r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier:          mmwtLNfzrOrdHvqJRn3MmAktMqE3rV7CplAibQBE9PY=
Subject key identifier:   87:65:3C:A8:A8:32:4C:C5:F8:06:8C:1D:4A:1C:3A:1E:EF:5C:5E:DD
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer:       /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial:       018F893926FDD66AFDB814E7FA246A69FB6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:02:55 +0000
Manifest this update:     Sat 18 May 2024 01:02:55 +0000
Manifest next update:     Sun 19 May 2024 01:02:55 +0000
Files and hashes:         1: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: BsV967fGuCVkL4/4eHNrShBfAJVRUPesk+ZIts32nBI=)
                          2: wj_EheMramg881EItdEv3vuyW5A.roa (hash: twki4QK/rJLCoQSYpRxOKMMjGGuFs2xd1MC5fV9V/bo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:26:fd:d6:6a:fd:b8:14:e7:fa:24:6a:69:fb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
        Validity
            Not Before: May 18 01:02:55 2024 GMT
            Not After : May 19 01:02:55 2024 GMT
        Subject: CN=87653ca8a8324cc5f8068c1d4a1c3a1eef5c5edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:94:ca:7d:3f:e5:84:e5:5e:bc:5c:6d:a5:
                    1c:57:65:90:b3:d7:41:42:1a:3d:96:26:10:39:45:
                    00:df:d7:c8:a0:7b:47:d3:0b:37:d8:34:ba:4e:0d:
                    69:ff:59:fc:f0:2a:4f:e1:4f:19:c2:55:56:1e:b8:
                    d4:db:b8:34:8a:f5:9b:23:ac:3d:42:a4:c0:d7:a8:
                    73:21:c8:f0:63:36:82:d7:a2:59:ce:0f:de:ac:d7:
                    c7:02:08:26:f4:f4:4c:d2:81:52:b7:07:73:a2:b0:
                    ad:8a:25:93:0d:51:b9:54:0b:a9:66:bb:47:eb:bf:
                    3f:3e:20:e9:40:a1:13:0e:0a:cc:7b:6e:8b:cc:da:
                    a3:34:b1:5d:05:d9:a1:2f:a7:5b:e3:44:cc:b0:e6:
                    6f:0b:bc:59:3a:78:87:da:d9:5c:97:08:96:b8:ef:
                    d7:35:6c:fb:1c:c6:26:e2:d1:b8:3c:5a:01:66:86:
                    df:19:49:d1:2c:1e:06:11:2b:6b:9c:68:33:b0:22:
                    6c:22:eb:35:60:6a:af:0c:eb:76:d8:74:cb:5f:ef:
                    59:4c:24:8b:f4:25:f5:0f:2d:e4:f6:04:59:30:9d:
                    f6:34:74:5e:67:fd:58:8a:c2:37:f9:a5:82:ba:72:
                    27:9c:2b:60:d9:76:83:60:31:d4:c9:9f:6f:02:d4:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:3C:A8:A8:32:4C:C5:F8:06:8C:1D:4A:1C:3A:1E:EF:5C:5E:DD
            X509v3 Authority Key Identifier:
                keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:bc:0f:33:9b:be:8e:7e:52:4c:05:d7:04:a5:e5:34:7d:
         26:53:a7:62:b9:16:48:6a:73:47:80:cb:22:05:e8:d4:cd:04:
         f1:00:c7:10:04:78:19:1b:1a:0b:10:1f:94:d6:86:99:d8:21:
         0b:78:f8:ce:82:ca:1a:b5:55:dd:3f:0c:9c:55:47:7d:69:a4:
         3e:2a:50:7f:06:a9:c9:b5:1a:12:45:75:b2:b6:3a:1e:b2:51:
         25:2c:34:15:3d:fe:c5:fc:65:e2:43:37:d6:de:87:f8:82:9f:
         26:33:4e:53:f8:10:5f:08:c1:44:8c:73:cf:33:4f:d6:02:34:
         cd:f9:10:76:4d:5e:d1:08:ad:a7:af:80:2d:0e:d7:98:54:bb:
         6b:49:0f:63:06:07:ae:f7:2d:e5:ed:ad:66:90:ff:90:ca:fa:
         8d:75:42:b6:fe:cd:d5:9d:4f:a9:4d:85:eb:55:93:48:23:fe:
         60:eb:b1:f6:73:5a:a7:ea:33:7d:6b:eb:70:f7:21:00:ad:ce:
         08:1d:fb:2b:52:1e:9f:97:d4:9a:f1:d8:2d:ef:92:27:4c:0e:
         6d:f8:41:52:7f:ec:69:ba:60:12:23:d7:7a:5f:ec:aa:c5:49:
         92:21:19:42:07:47:65:f6:7d:df:96:9e:79:6a:76:e8:7c:c7:
         52:74:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:18:53 2024 by rpki-client on console-ams.rpki-client.org