Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File:                     aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier:          U+fIRu1DpzQNYhAWNzFK0AuxgJGRXfAVhY/xSmq3ubU=
Subject key identifier:   D1:03:6F:25:49:76:B6:D0:94:E7:5B:85:CE:58:33:7B:D0:35:53:EA
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer:       /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial:       018F86362C23FE4F7E42E2D8FB1B4D88031C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 11:00:48 +0000
Manifest this update:     Fri 17 May 2024 11:00:48 +0000
Manifest next update:     Sat 18 May 2024 11:00:48 +0000
Files and hashes:         1: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: rhgkzglYxHbKJdNqcmc8XiSH15wKEMFcsaZF+CTqHVo=)
                          2: qcY67Pn-iWQ2ccHDLYRONBZDU8Q.roa (hash: 2gQg4zG/mAwK3hRYH7ccXgHkRNVXIvQIgsqxZ/6160Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:2c:23:fe:4f:7e:42:e2:d8:fb:1b:4d:88:03:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
        Validity
            Not Before: May 17 11:00:48 2024 GMT
            Not After : May 18 11:00:48 2024 GMT
        Subject: CN=d1036f254976b6d094e75b85ce58337bd03553ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:a2:d6:60:20:ab:bc:e7:b0:69:7e:a2:7e:
                    79:fa:36:fe:37:4e:90:50:ac:66:db:41:c6:aa:45:
                    0a:99:ad:3b:69:ab:f6:a2:a4:be:83:27:64:81:34:
                    c3:9e:24:5f:7e:f0:75:50:b2:9c:d7:a0:aa:82:94:
                    c2:ef:08:c2:d0:19:23:28:88:1a:3a:b9:9b:cc:ea:
                    07:62:12:ac:98:9b:7d:68:a5:5f:c7:76:c4:5c:6e:
                    d6:1d:3c:a8:74:ed:14:4a:d7:68:9a:59:6e:61:6f:
                    b7:17:42:62:b5:ca:32:c5:e6:2a:ea:3a:2f:8b:44:
                    fc:0f:56:3f:39:22:91:d3:bb:84:c2:91:6b:a0:27:
                    62:61:be:aa:3c:1d:d8:93:85:68:41:81:21:85:19:
                    9f:9d:13:be:10:87:08:43:ab:35:72:07:ac:74:1f:
                    4e:d2:5a:8a:04:34:80:a1:f4:7c:f4:2e:b5:3d:b5:
                    b0:2c:df:8d:b8:eb:04:cc:45:51:23:8b:94:d7:a9:
                    3b:11:6b:fe:5e:05:32:15:ec:9b:4a:7b:83:21:59:
                    79:dd:f3:26:77:fe:a3:0b:1b:82:cf:50:e0:fe:08:
                    c5:95:f5:77:43:83:a6:dc:74:93:f6:7f:d5:ea:cb:
                    60:51:17:30:d5:c6:fd:85:02:ae:39:89:0a:d2:1e:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:6F:25:49:76:B6:D0:94:E7:5B:85:CE:58:33:7B:D0:35:53:EA
            X509v3 Authority Key Identifier:
                keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:f6:e4:76:6f:72:0b:0e:a0:3d:b1:bc:a5:63:44:24:8b:
         3c:2c:a5:e8:e9:03:ed:e4:8e:d3:ea:b4:fd:99:ee:8b:63:6e:
         25:e3:34:1b:70:a8:de:12:5f:27:c2:24:68:34:25:43:2f:30:
         ed:1f:a8:83:6b:dc:b7:69:3c:77:6e:ce:14:4d:40:bf:9d:39:
         01:c6:f4:26:0a:f5:28:04:82:6a:c8:fb:88:8b:f4:c8:19:16:
         41:7b:c2:8c:cb:18:f8:2f:56:dc:20:88:43:88:74:05:89:27:
         5a:54:b2:1f:6d:72:97:b8:21:7a:ce:e6:df:05:60:23:4d:fb:
         c4:df:49:16:82:e8:36:1c:db:4b:81:e6:db:d5:64:ed:0a:db:
         72:cd:a0:19:c9:71:98:34:c8:96:98:c1:a8:fc:be:69:a1:01:
         00:01:c1:be:49:eb:8c:c4:c1:91:05:86:41:f0:7e:fc:35:35:
         47:3f:51:68:fb:b7:cc:e0:b2:b8:80:e3:1c:b7:c4:99:91:6c:
         54:f6:dc:b4:9b:7e:25:88:4a:ea:29:df:fa:55:b8:cd:34:c0:
         92:63:a4:94:ae:74:15:9a:12:25:3e:31:58:22:18:85:4a:9a:
         81:62:65:1a:4b:67:fe:07:60:d7:a9:93:f9:65:f5:c0:58:a5:
         ce:6c:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:35 2024 by rpki-client on console-ams.rpki-client.org