Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.mft
File:                     p7rGF1DqL8gz8CmAn-VjoRQsgT4.mft (raw, json)
Hash identifier:          HzPP5dtBmXt9qCLlmtbnumNH4bI2zaMxLp05Z3NqnYI=
Subject key identifier:   87:F7:84:5B:BD:73:32:C6:3D:4F:5F:09:10:92:B9:69:B6:0C:D3:72
Authority key identifier: A7:BA:C6:17:50:EA:2F:C8:33:F0:29:80:9F:E5:63:A1:14:2C:81:3E
Certificate issuer:       /CN=a7bac61750ea2fc833f029809fe563a1142c813e
Certificate serial:       018F885B15E80839D9CED753C1D1EEB0FA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7rGF1DqL8gz8CmAn-VjoRQsgT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:21 +0000
Manifest this update:     Fri 17 May 2024 21:00:21 +0000
Manifest next update:     Sat 18 May 2024 21:00:21 +0000
Files and hashes:         1: SBI5TCpQwpD8Bm-TFxLfV7Knf_U.roa (hash: Wg0e24aOv1pJm+I5K+IEPKsiFKW5jJSmpYQ62MwRVbA=)
                          2: p7rGF1DqL8gz8CmAn-VjoRQsgT4.crl (hash: ZaMzatWGZ6D1kZ//3W41Fd1x5yOXM43cxuyf89RkPQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p7rGF1DqL8gz8CmAn-VjoRQsgT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:15:e8:08:39:d9:ce:d7:53:c1:d1:ee:b0:fa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bac61750ea2fc833f029809fe563a1142c813e
        Validity
            Not Before: May 17 21:00:21 2024 GMT
            Not After : May 18 21:00:21 2024 GMT
        Subject: CN=87f7845bbd7332c63d4f5f091092b969b60cd372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:a8:9b:ef:d7:a3:99:4a:5b:b3:17:8f:67:
                    b7:b1:9e:99:e9:eb:99:63:bd:64:87:9e:e0:96:d4:
                    d7:85:17:d4:51:a1:a1:49:52:7b:90:d7:10:57:0b:
                    55:e8:78:42:9e:a8:20:54:f1:7a:6b:ab:b5:54:41:
                    8e:84:be:7f:b9:b4:44:94:ea:bc:89:a8:07:6f:ec:
                    b9:71:3b:39:f1:ed:02:46:82:b8:b5:4a:2a:58:b8:
                    b0:b9:52:17:ac:8c:8a:4b:11:4c:10:37:eb:c7:89:
                    21:7a:47:85:22:a4:df:75:c1:42:f6:4d:58:64:db:
                    33:6f:53:73:92:97:7b:c9:5a:41:68:53:39:18:0f:
                    35:70:7b:07:66:24:4c:51:fc:97:f8:25:21:d6:16:
                    f2:fb:d8:bd:07:75:d8:18:2b:e8:2e:33:19:2a:00:
                    4f:33:24:ac:45:75:4c:43:f8:2e:6c:98:48:83:48:
                    75:b6:18:23:4d:4c:93:58:c0:d6:e9:fd:cd:ef:55:
                    9f:4d:b8:94:c7:0d:4e:51:ac:a9:ed:83:2a:39:0f:
                    04:d4:6a:46:b6:07:84:38:e8:d3:fa:b8:06:c9:27:
                    9b:3c:01:e3:da:55:31:2b:25:f6:93:46:a3:b8:5f:
                    f6:71:b6:31:1c:cb:09:b1:e5:9f:11:bb:60:36:95:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:84:5B:BD:73:32:C6:3D:4F:5F:09:10:92:B9:69:B6:0C:D3:72
            X509v3 Authority Key Identifier:
                keyid:A7:BA:C6:17:50:EA:2F:C8:33:F0:29:80:9F:E5:63:A1:14:2C:81:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7rGF1DqL8gz8CmAn-VjoRQsgT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:de:bb:90:61:23:07:1e:5e:d6:e4:63:0a:b6:fd:a3:8f:
         97:58:df:94:cc:e4:9c:16:73:1d:64:55:f5:13:63:db:75:63:
         76:37:3a:b7:bf:39:34:11:e3:57:e2:6f:60:1d:92:65:4c:7a:
         63:fb:30:23:ae:8b:23:f9:e6:9c:35:f7:cc:df:eb:04:b7:b8:
         dd:78:6d:4c:8d:64:13:83:7b:07:b3:1c:ea:49:7a:1f:8e:a2:
         01:b6:cb:66:b6:02:eb:1a:93:b9:d3:1c:a7:4f:cc:58:89:3d:
         a3:6d:47:9e:90:8e:02:33:d4:5f:06:93:c6:27:99:00:9b:6e:
         5b:aa:3a:35:65:dd:b2:72:3b:31:3e:67:46:35:4a:c2:ff:7d:
         45:d8:57:ee:ef:9b:7a:84:22:f8:b2:57:3b:93:9c:27:c0:57:
         91:f0:09:e3:fd:2b:b6:02:ba:15:ed:13:53:bd:8a:29:9d:7f:
         be:d9:9d:aa:19:17:69:47:17:d2:ae:eb:e3:0e:03:af:a6:5d:
         b3:e5:7d:ae:60:a4:67:ec:cf:12:27:c5:03:f2:64:1f:70:a5:
         22:e0:b7:78:a9:b4:c9:9b:ca:37:b3:a2:27:9a:65:d4:f0:fb:
         2e:dc:32:c9:47:8b:0f:94:08:c3:7c:ba:0d:a9:93:c3:1d:8e:
         99:b3:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:35 2024 by rpki-client on console-ams.rpki-client.org