Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File:                     dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier:          omr8y4zlYKga+602k5ozUTWHLvM82KQLTri2yD9nNRM=
Subject key identifier:   91:25:88:8A:89:D1:A0:BB:FF:DC:77:F7:DA:EE:1D:24:FE:30:5C:22
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer:       /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial:       018F87ED3616758ACBF0271B39CCA43560D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: L6UKaAv2OWoRCAuOjc7h9BTVylufoYILHF+H8HlJuUQ=)
                          2: iE_J5TR7yLawG_RBgmvBn_qOjfM.roa (hash: FjRqZAiYW4YRqA3uB4w/5c31fhdcldNFiQrhNXVKP6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:36:16:75:8a:cb:f0:27:1b:39:cc:a4:35:60:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=9125888a89d1a0bbffdc77f7daee1d24fe305c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:47:96:9b:b8:35:1e:d7:6a:41:c2:96:74:
                    34:69:3e:4a:85:ac:86:91:65:4f:cb:f7:b2:94:d0:
                    42:2b:81:6d:58:5b:fa:78:14:ab:69:09:30:61:ff:
                    0b:37:0d:8f:02:d7:fb:32:91:7a:5f:ce:ad:95:50:
                    e6:f3:57:fe:e1:7f:32:0b:b2:b4:1d:81:9b:36:a6:
                    05:2a:0d:df:aa:9e:ae:9a:1d:2c:83:c7:e2:12:7a:
                    e5:42:14:15:77:38:85:08:2a:7c:95:9f:b4:71:bf:
                    f3:ce:d8:f7:19:56:3f:41:6f:2c:12:d5:82:67:0c:
                    79:d2:28:b0:9c:f7:d8:5c:2e:54:b0:1e:be:43:a5:
                    66:94:06:f4:7b:43:50:88:8a:8f:86:08:6c:ba:4c:
                    8d:46:99:27:bf:52:f0:bf:e7:da:6b:0a:1c:de:aa:
                    05:06:51:2d:bc:1a:13:9b:a9:37:88:eb:53:47:d7:
                    2c:16:00:2c:20:92:c7:ed:8e:4a:71:4b:e7:81:81:
                    f5:73:a0:75:08:e8:99:8d:fd:dd:8e:9a:ff:64:f6:
                    fe:fd:16:88:eb:88:63:c6:86:dc:27:14:52:05:7b:
                    b4:38:ac:de:0d:62:9d:65:1a:f8:cc:ad:9a:04:10:
                    4f:f5:5a:43:3c:46:7d:5d:40:7d:4f:f8:61:f2:e1:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:88:8A:89:D1:A0:BB:FF:DC:77:F7:DA:EE:1D:24:FE:30:5C:22
            X509v3 Authority Key Identifier:
                keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:80:1a:6f:76:5f:41:e6:09:61:b6:ed:3d:c9:02:c6:d8:e6:
         19:8e:e1:32:a8:33:b9:2d:5e:55:01:b3:bf:77:3f:1b:b8:96:
         c7:85:4f:de:08:f1:76:8a:c0:a1:5b:b8:4e:cf:d0:b6:92:95:
         36:a7:b7:43:d4:cf:72:e2:c7:2b:53:53:ef:55:83:15:e5:2b:
         cd:f5:9c:43:44:ef:b7:2f:56:58:3f:dc:04:c7:54:6b:c8:27:
         d9:d1:51:30:4e:db:39:f5:4d:9f:f3:79:3a:f8:8e:f9:c2:5d:
         ee:38:39:82:c6:0e:94:d0:86:2d:f6:48:93:9a:5f:42:69:7d:
         f1:8e:9f:c3:c1:3e:fd:6b:2e:95:55:00:71:f1:06:7a:0f:54:
         ef:be:68:01:85:aa:42:e0:ce:29:36:8e:4c:99:65:4d:92:f0:
         3d:22:aa:4c:ee:54:b2:7a:de:65:54:f2:61:3f:9a:c7:33:34:
         84:a1:26:f8:00:85:bb:2d:90:cb:5c:17:d4:7b:dd:ff:91:6b:
         1b:7f:34:e5:48:0e:94:86:43:eb:11:c2:d1:73:27:84:74:a3:
         0e:16:01:49:75:c1:e3:d3:81:b5:38:b0:90:62:b7:9e:30:9e:
         fd:24:a2:46:df:2f:e5:38:40:a6:8b:5d:25:30:e9:ab:b4:ba:
         72:33:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:03 2024 by rpki-client on console-ams.rpki-client.org