Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File:                     rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier:          KgQX+McGcdBXkRDF5NTZk7i+S9nt0bWG5PqTe4ikGAA=
Subject key identifier:   41:2D:58:00:D3:B7:FF:20:C4:91:37:BB:21:06:25:F9:94:39:AD:F6
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer:       /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial:       018F8749EBCF562F0F856A5DE6BF5EB3BD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: BLBmBxL8kru5Q4ALGte9gvWq8jg.roa (hash: vr3f0ZWGj8DsGEs3IYwBbyNhZaVHlFqkNtujQXuzcQE=)
                          2: I36mzYn9vH1UhUaU9fSsKT3KMG0.roa (hash: a1lzhU1Sp2i4f4ZjHrtFbC7rPYyhgcZWiie9d7BmqAc=)
                          3: nAX-QUlp-DfK2eV4on3kQTa1fIQ.roa (hash: dDUiOyI06rdwpg680tJmTgjMkJR1mX/rBT3S+MmJ+VA=)
                          4: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: QZMmQ3KuYLmxaijxBfXKwne6zmX9h0gIHFRJxle3Zwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:eb:cf:56:2f:0f:85:6a:5d:e6:bf:5e:b3:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=412d5800d3b7ff20c49137bb210625f99439adf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:0d:89:5e:fa:3c:c0:0f:e2:95:c6:37:98:
                    1e:c1:fb:01:52:e4:99:aa:7b:80:8b:4d:61:b8:e1:
                    f0:24:de:0f:b7:07:cf:87:9a:09:7c:8a:72:0f:55:
                    20:8d:da:2d:11:d3:69:d1:eb:0f:f2:8d:a0:e1:d4:
                    77:a3:4a:ef:f1:5a:7d:56:c0:92:01:33:82:94:03:
                    8a:27:53:22:2b:d9:b9:0a:16:c6:b7:18:1e:28:04:
                    51:92:0b:1b:46:ce:4d:57:f5:c1:39:a3:6d:46:c0:
                    62:c5:1b:2d:f0:7b:cc:55:62:66:2e:9e:1a:bb:48:
                    13:75:22:f6:7e:ae:b8:65:18:c8:d0:5d:f6:15:4c:
                    ba:f2:67:ba:3e:bc:94:b2:d2:aa:3f:21:f3:20:87:
                    e6:27:e6:49:43:88:46:96:64:e9:b9:7d:47:63:b3:
                    d1:0c:05:9d:2c:dd:b3:0d:c1:58:e4:00:92:9a:51:
                    1e:b6:a4:71:0a:bf:90:d8:aa:da:68:63:e0:4a:16:
                    cf:53:19:bd:c0:8f:a2:63:75:91:ff:96:8e:01:10:
                    db:61:14:1c:96:dc:88:26:ed:4e:54:22:4a:da:6d:
                    b6:18:a4:32:39:df:44:3c:0a:a2:26:1a:af:0f:60:
                    c4:f7:ca:e6:72:4b:39:b8:62:7d:8d:37:12:32:28:
                    04:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:58:00:D3:B7:FF:20:C4:91:37:BB:21:06:25:F9:94:39:AD:F6
            X509v3 Authority Key Identifier:
                keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:b4:24:ec:eb:bb:e1:02:30:e2:08:31:6d:7c:9f:dd:ad:
         6f:30:86:90:af:74:0b:f9:47:a2:70:2f:56:b0:72:1d:68:86:
         9e:24:f2:e9:f8:fc:8e:56:b7:d5:a0:59:ef:46:17:56:aa:11:
         46:55:94:5e:d5:aa:9d:6e:09:45:97:01:8d:5c:64:ea:a0:6b:
         78:10:ba:37:2a:22:ce:27:99:a3:e2:81:49:03:4f:9e:c0:31:
         06:66:fc:69:74:08:56:27:3d:eb:9f:e5:e4:f8:d7:42:17:79:
         d4:ba:bf:b7:a1:5c:01:c0:d2:a3:ab:ad:bc:c0:07:9a:af:3c:
         b2:48:e6:e8:e5:e6:e1:4e:98:c1:5d:eb:ac:91:9c:cc:83:dd:
         a5:e2:df:b0:9d:74:8a:5d:61:84:30:d3:6d:57:d8:7b:42:2c:
         3c:d7:d8:6d:c8:25:b3:43:ec:34:11:31:14:ce:89:03:8f:51:
         ae:7b:ac:92:92:32:04:9a:51:9e:79:40:bf:2d:91:11:30:57:
         e8:de:81:70:ac:ac:eb:de:d4:cd:2e:c0:fc:07:93:2c:7c:c9:
         c6:28:56:8b:ae:f3:e2:7d:01:bf:14:41:73:78:75:9e:2b:33:
         d4:b3:86:86:52:2a:1f:3f:a1:79:48:7f:91:f3:12:47:d1:13:
         d9:5a:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:40 2024 by rpki-client on console-fra.rpki-client.org