Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File:                     l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier:          C7eG5o//9AuHQ1rddWmoB4UYqk2rbP24Sr0Gx2908gw=
Subject key identifier:   47:DD:A9:AD:BD:72:04:55:B5:83:EB:A6:6E:A4:DF:A5:0B:04:27:68
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer:       /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial:       018F87ED330F1E906553B20E0DECC2E454B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: MhvWAE50wkc3iJBUqAcAxpSswow.roa (hash: oKAzseOxraW1Cu5QLTDmdb2JApt4G3EYO/O1eCjIMoM=)
                          2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: hqOrQgSSpminU8qTy4OY8mqxdaFzxDbfMfx78DOBZ1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:33:0f:1e:90:65:53:b2:0e:0d:ec:c2:e4:54:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=47dda9adbd720455b583eba66ea4dfa50b042768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:bf:8d:8f:11:9d:95:4b:59:e2:86:1d:ae:
                    bf:f5:70:a4:17:bb:72:67:6b:1c:05:de:4d:8b:42:
                    a7:4d:e8:9f:96:58:bd:a7:65:06:2a:2f:f8:01:92:
                    04:38:f7:34:39:dc:f3:2b:02:43:4d:92:16:7e:be:
                    b9:b9:68:89:54:43:a4:c7:b9:b9:a7:9a:64:de:aa:
                    2f:39:6b:5d:ff:7b:5b:d3:9e:80:d4:b7:6d:d6:8d:
                    67:b9:45:af:77:09:c9:c3:94:c5:5d:09:67:fc:c9:
                    a2:1f:f2:44:87:8d:d1:8a:7d:a9:fa:59:77:bc:c8:
                    d2:5c:27:38:ff:7a:0d:ba:ac:63:8d:d9:13:e2:ec:
                    f8:a6:74:91:58:3b:ff:8a:ba:48:34:20:ce:8b:c0:
                    6d:93:81:68:bc:48:38:6e:ee:57:4c:86:79:ad:5b:
                    34:1b:ad:15:53:77:78:94:74:71:69:aa:37:7e:e2:
                    67:9f:6b:ad:22:5f:04:16:86:fd:9c:e3:84:87:34:
                    07:56:0c:df:b7:b9:fa:ad:12:97:08:99:58:9a:f8:
                    6f:cc:5e:42:db:a5:9e:8e:37:75:ab:0b:c3:0d:cb:
                    b2:26:82:7f:ed:2f:5b:3d:4a:79:64:b2:b1:29:bb:
                    35:ba:74:fc:9e:08:03:c8:e8:c0:63:3a:8a:1a:4d:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:A9:AD:BD:72:04:55:B5:83:EB:A6:6E:A4:DF:A5:0B:04:27:68
            X509v3 Authority Key Identifier:
                keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:41:47:97:fe:3a:39:09:63:51:b0:72:df:08:a5:ab:2b:
         f6:08:db:96:aa:cc:71:2c:46:8a:ad:0f:c4:84:59:be:1b:75:
         e8:04:c7:75:c0:f1:d9:4e:9a:43:0d:37:93:1b:a7:49:10:fa:
         48:40:c2:63:27:37:80:e4:6c:a8:22:58:03:32:9c:bf:eb:56:
         03:87:70:3b:90:d5:d1:2c:e9:da:81:19:c1:75:58:33:82:23:
         93:3b:16:93:9e:05:b5:d7:46:17:a2:39:6f:54:9c:81:73:40:
         8f:73:3e:78:96:52:9b:6a:0a:ea:d8:88:bf:6e:9a:01:2e:b5:
         52:30:42:30:ee:44:3e:a2:52:55:47:cc:59:c5:29:ef:83:0b:
         f5:88:a5:24:5d:07:c8:52:49:93:6a:33:e4:21:93:b0:12:0b:
         f1:c9:a0:a6:3f:ce:fb:73:e0:ac:30:7b:0e:d0:5c:8b:0e:9f:
         ac:d2:32:ce:94:d3:86:ac:fa:f5:81:74:b8:9d:73:2e:25:77:
         34:d6:92:42:68:d0:1e:d8:8d:f1:cf:17:ac:ea:e5:b4:8a:1b:
         b7:57:be:7c:7a:fd:d4:12:4b:1e:7c:8e:67:c1:07:44:d0:98:
         f8:ca:b5:90:16:0b:82:c7:52:82:f8:84:02:b1:bc:ce:cb:86:
         1b:b3:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:37 2024 by rpki-client on console-ams.rpki-client.org