Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          rLttlkiHt96PMWFlm9m+ATBgdeneVcVLTN7lICOuZEU=
Subject key identifier:   6B:43:5B:7F:E9:3C:E1:21:CA:3E:24:F9:08:2C:61:1B:50:8C:90:F0
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       018F877F2EF927E15A234DD80182E84634DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 17:00:10 +0000
Manifest this update:     Fri 17 May 2024 17:00:10 +0000
Manifest next update:     Sat 18 May 2024 17:00:10 +0000
Files and hashes:         1: c0pbqffkEdx_ctpKHjp5uDrWReM.roa (hash: /kv5rRirbOvjRoV98oBr3JuMGbfxRsDIxAZmRNSQ3Ms=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: Y8WkkfEVm8xqW6TOSJEqLWYuFo3uSPy7E7MX7G1JtHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2e:f9:27:e1:5a:23:4d:d8:01:82:e8:46:34:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: May 17 17:00:10 2024 GMT
            Not After : May 18 17:00:10 2024 GMT
        Subject: CN=6b435b7fe93ce121ca3e24f9082c611b508c90f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:e8:0b:c7:1b:99:df:7a:d6:50:30:97:46:
                    9a:40:29:36:e8:d9:85:de:00:45:d2:17:db:ac:9f:
                    fa:a6:9c:18:2f:55:dd:c6:dd:11:bf:a1:cc:82:8f:
                    3f:2b:7f:fb:2a:00:ef:d4:b1:31:cb:65:55:78:90:
                    36:0c:35:7d:e8:f8:9e:c2:07:a3:4a:d3:40:17:0d:
                    0c:c8:e5:62:c1:69:7c:f6:9a:dd:48:74:6e:90:33:
                    66:17:e9:fe:bf:79:9d:7a:b3:b4:d5:d7:c0:c2:8f:
                    7d:76:46:16:20:6e:6f:a2:3f:92:1e:ad:38:59:13:
                    3e:9f:5b:d2:22:3c:f4:4c:a0:b5:39:0d:61:c9:e7:
                    2e:39:78:59:73:01:85:af:ca:f3:4d:1b:fb:21:0d:
                    41:dd:f0:df:31:29:eb:4c:e3:b8:70:e6:20:19:c9:
                    43:16:69:c4:2b:c7:6a:c1:4c:27:f3:d7:1c:ee:95:
                    ec:26:8c:69:25:9d:d0:2f:da:73:c7:ea:e6:1f:fc:
                    77:aa:b3:4e:0f:cb:c5:53:bc:d3:6e:ab:02:26:d3:
                    d7:a5:db:34:f6:79:9c:9b:a0:45:2a:8d:9c:44:e4:
                    44:9a:dc:2e:1a:8b:60:e7:39:e1:11:41:b0:d4:61:
                    32:ce:fd:9d:81:da:eb:79:e0:96:21:fe:7e:5e:f2:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:5B:7F:E9:3C:E1:21:CA:3E:24:F9:08:2C:61:1B:50:8C:90:F0
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:64:2d:a9:58:f5:eb:f7:ee:a2:1d:79:22:1f:6c:c0:07:
         7a:96:a7:19:9f:da:de:7d:db:61:33:58:ff:3e:e2:1c:ff:35:
         3f:03:44:15:78:85:20:67:a1:a7:d4:97:4d:87:83:d7:10:ac:
         7f:2e:12:d6:90:09:99:9c:6f:af:85:3d:6b:04:fd:5e:f7:98:
         86:f8:69:fc:0a:9e:e4:26:a0:8a:f7:7a:58:22:e9:43:f7:4b:
         82:e6:27:08:25:4a:f7:ca:4a:cb:e7:4b:e5:1e:1c:8f:5a:64:
         06:5a:69:41:8a:12:ad:9f:2f:06:27:f6:bd:2f:63:b2:80:14:
         db:da:13:be:c9:49:2a:a2:1f:14:7d:9f:86:92:c1:79:05:38:
         8f:0b:ea:66:da:ce:b8:4e:ab:11:19:4e:1f:71:c1:f0:69:7b:
         76:c4:36:62:2f:36:9f:49:65:96:6a:0a:da:63:90:69:5f:c6:
         ed:fd:4b:c5:48:89:60:cb:c2:1d:f7:4d:df:5d:d1:bf:d6:ba:
         41:3d:86:c7:84:43:d3:92:87:fd:74:61:ff:7e:5d:05:7c:f8:
         96:18:cc:bf:41:e1:4a:59:85:4b:e6:9b:bf:bb:57:64:9c:b2:
         4f:2d:39:4d:06:56:de:34:69:92:be:ad:16:5f:23:ea:1e:a3:
         b3:30:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:23 2024 by rpki-client on console-fra.rpki-client.org