Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
File:                     US4nvokbGeypvOtT5NwjfFo1Vpc.mft (raw, json)
Hash identifier:          xh1e31fdb/+wtGNJpjCZ3vkVRRcG/K2f45BNzN+7QDo=
Subject key identifier:   69:2B:98:6A:42:16:62:4A:8C:C6:43:8D:F4:92:7D:42:F2:58:6E:65
Authority key identifier: 51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
Certificate issuer:       /CN=512e27be891b19eca9bceb53e4dc237c5a355697
Certificate serial:       018F87B6D19A4F729334D16CFE17C98B361B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
Manifest number:          0774
Signing time:             Fri 17 May 2024 18:00:56 +0000
Manifest this update:     Fri 17 May 2024 18:00:56 +0000
Manifest next update:     Sat 18 May 2024 18:00:56 +0000
Files and hashes:         1: US4nvokbGeypvOtT5NwjfFo1Vpc.crl (hash: juhUNElEsME54XqzO0zI4IrRhfZmKC6vbmeSR2vMIjU=)
                          2: hmmyl03UKDWRE76S01tPKWrS7PE.roa (hash: WHEwRnvQQvkVCS2Ywio6GZ45rLY68/Jb8HQhlja1xeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:d1:9a:4f:72:93:34:d1:6c:fe:17:c9:8b:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512e27be891b19eca9bceb53e4dc237c5a355697
        Validity
            Not Before: May 17 18:00:56 2024 GMT
            Not After : May 18 18:00:56 2024 GMT
        Subject: CN=692b986a4216624a8cc6438df4927d42f2586e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:f3:13:41:ca:96:b4:0b:de:0d:70:79:1a:
                    80:be:f9:e1:02:92:16:c5:9d:29:0c:3e:b9:61:93:
                    26:18:08:d2:d9:29:cb:ed:e9:d4:c6:20:a0:ca:bd:
                    1a:03:21:4a:e1:1b:48:08:2e:1e:24:98:54:c3:6f:
                    1a:86:f9:e9:19:4b:0a:1a:f5:26:d6:c9:eb:68:0b:
                    59:4d:f2:d0:36:ce:20:65:be:33:ba:79:9d:d9:30:
                    a1:75:66:60:f8:d4:0a:89:a1:56:85:3c:b2:d9:ad:
                    4f:e1:6c:ca:3b:8e:5f:8f:05:c9:d1:ef:d9:3b:14:
                    e7:d6:b6:9f:b7:90:63:c3:3a:02:46:1d:73:ce:07:
                    0c:e3:c1:bd:03:e3:a2:a2:6d:18:6a:71:6d:5b:c8:
                    54:95:de:09:97:8f:a8:0f:be:ef:94:d4:07:c1:2d:
                    25:17:c6:23:2c:50:02:a7:21:68:78:9d:ed:a3:41:
                    2f:02:83:58:46:2f:a5:b3:ae:5d:bb:1a:7b:e7:af:
                    84:86:b0:76:c3:a1:59:ae:55:a9:75:29:37:eb:d6:
                    5b:61:1e:65:56:af:fa:ad:38:41:65:7a:d0:6d:1c:
                    98:d5:1a:16:53:ce:0e:2b:90:38:6e:e7:58:86:64:
                    f3:36:0a:69:36:23:36:26:0f:a0:92:c0:a2:6e:da:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2B:98:6A:42:16:62:4A:8C:C6:43:8D:F4:92:7D:42:F2:58:6E:65
            X509v3 Authority Key Identifier:
                keyid:51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:f6:59:9d:36:d9:e1:9e:a9:c6:0b:5a:9f:80:02:5b:36:
         41:eb:a3:f5:e5:1f:be:a2:54:c7:1b:e7:4d:7b:bd:8d:68:78:
         94:0a:1e:ae:49:f9:27:23:20:23:80:17:c6:3e:58:6c:c6:f7:
         bc:b3:c2:4d:64:3f:ed:8a:33:c2:43:f8:41:16:18:ff:cd:07:
         86:10:a5:eb:61:3c:ac:8e:81:a0:34:6d:97:24:9b:e2:ad:a2:
         f0:37:51:73:6d:a2:62:a7:3c:8c:67:1b:74:4d:af:26:06:80:
         bd:1b:86:b1:8e:11:e3:77:31:f4:d5:9f:9a:60:e4:e8:ca:ad:
         a9:e7:27:58:e1:16:d4:39:3e:93:68:84:7a:62:d8:a6:c9:30:
         5d:80:ea:ce:0c:82:f2:f6:6f:69:a7:a2:0e:87:a5:1f:bc:0a:
         b4:22:f9:f7:39:54:91:f2:a5:34:36:2a:c7:8b:9c:b7:76:a0:
         53:c4:45:46:71:47:d3:fc:40:72:81:e7:aa:d3:53:7f:d8:6e:
         ef:cf:01:a8:51:fb:04:2b:7f:20:26:8c:3d:73:ad:ca:ca:bf:
         96:a8:fc:4a:22:bf:cd:67:6c:09:06:f8:6f:bd:cd:28:e2:5a:
         a1:56:85:66:57:e7:ae:07:55:7b:ea:74:e5:b1:51:03:5c:1a:
         9a:99:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:19 2024 by rpki-client on console-fra.rpki-client.org