Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          LydIWYTuoXRZhQ4RGbjIXleFKnh+C5Yrtv0LL3+QCHg=
Subject key identifier:   B2:5A:DB:03:2B:46:58:73:3A:05:57:34:82:BA:4B:AD:5B:F1:BB:BE
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       018F88249048D3BCD424008AE136DD7EC41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: KYR_PIIcozqRwBRmJciJRANKPXM.roa (hash: UINbezZRXXo3Be0NCts/ztM5SxfqEP5KtJQilP4W2CQ=)
                          2: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: OhW3I9yiGBnPPXezzSKBelgjwtlszjjYjMfo8S+Y+L0=)
                          3: mmzDeY2b_TyOM1wM8I0HT3JIvc4.roa (hash: 3uqQ6H9MNUH3NJNg8qKOdmzbI/dvetl/6go9okzYfRg=)
                          4: vRSxuOq93VCNb2JJcSH1g9WIADM.roa (hash: i/HFS6Hhrcp/wnnM+3QnNmz2BTAbI0wk01TZaM02L6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:90:48:d3:bc:d4:24:00:8a:e1:36:dd:7e:c4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=b25adb032b4658733a05573482ba4bad5bf1bbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:ee:17:25:c3:7f:f5:4f:3b:e4:f0:80:1d:
                    b7:ee:45:48:a4:be:c4:4f:c7:c1:2a:7c:ab:ca:96:
                    4f:e7:3f:1e:1d:a6:1c:e0:6f:71:e7:dc:17:db:8c:
                    07:cb:0e:80:8b:26:87:9b:fe:8d:e5:cd:10:16:3a:
                    67:35:72:3e:e7:e1:d6:d7:f3:0c:34:5d:c9:9f:4d:
                    63:94:9d:b7:55:01:b6:fc:24:ce:2d:ba:3c:1f:93:
                    bb:b0:78:01:93:6e:d3:60:31:bf:64:a9:87:08:ca:
                    4c:d7:21:d6:03:af:f3:ae:1a:56:65:74:a7:fc:0f:
                    38:b6:10:1e:77:10:98:78:d6:2c:34:6f:d6:47:8b:
                    85:3b:f4:fe:5e:fd:1a:61:a0:a6:0a:d8:03:01:f8:
                    b1:62:da:e4:c4:4e:8a:53:f2:ee:bd:1f:bb:60:42:
                    1a:78:ca:01:75:6f:64:3a:12:b0:89:13:37:83:77:
                    81:fd:44:33:04:a9:2f:e7:80:ed:0e:45:70:76:68:
                    0d:95:d7:f3:5d:16:4b:c8:28:cc:ec:3e:2b:37:10:
                    30:43:1d:8c:0f:9a:6e:1f:df:a4:8d:72:32:45:6c:
                    a9:72:c7:65:8e:e4:0f:1f:64:00:78:09:db:f1:b3:
                    f1:34:bd:97:fd:6b:e2:f9:8b:9c:96:e7:8f:a3:90:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:DB:03:2B:46:58:73:3A:05:57:34:82:BA:4B:AD:5B:F1:BB:BE
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0b:cb:9b:dc:86:c7:81:71:99:37:0f:3a:ab:51:ad:32:67:
         9d:e9:fa:94:e4:6e:66:16:ac:81:34:ac:69:00:6a:a0:af:43:
         c8:54:70:b0:f5:c9:06:04:f1:df:1c:2f:5a:7d:99:0e:d8:22:
         f9:52:9d:da:d0:17:15:45:74:48:2b:79:a0:7b:6e:6a:99:34:
         57:4b:9e:79:84:82:9a:2b:cd:a5:a9:a5:5f:da:a2:e8:b7:ee:
         ed:0d:93:dd:52:28:1e:da:26:22:6f:92:a6:b9:b1:9d:74:0d:
         d3:43:11:d3:a0:a8:52:75:b5:4f:8d:41:bf:9e:1e:d2:e7:b8:
         b8:01:ce:e9:31:b2:89:4f:76:c7:d2:5b:4d:1c:9d:c5:43:a5:
         c1:0e:bc:d8:00:d5:44:54:6f:03:1e:36:f7:c6:a2:14:28:7f:
         59:1f:83:da:1e:fd:47:2c:56:ac:62:ae:ac:48:b8:32:1c:56:
         5c:0c:24:45:93:d2:8b:27:55:ed:e4:07:a5:3d:fb:18:2c:6a:
         44:38:fb:c8:b2:ca:88:c0:ad:4f:7d:e0:74:6d:d6:a2:46:a7:
         aa:b3:9a:44:10:30:ca:8b:ad:d9:7e:88:1d:27:13:6d:12:88:
         a5:74:ec:a3:76:dd:19:54:4b:cf:b6:2e:22:aa:6b:58:98:1b:
         7f:b0:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:15 2024 by rpki-client on console-fra.rpki-client.org