Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File:                     hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier:          bn8gOFTdQyWW9eyOkQivFEAGpT4LzMZY7honxXE8Kso=
Subject key identifier:   9E:58:C6:E6:73:FD:4F:6E:6F:C1:7F:E3:E6:CB:6F:0A:63:74:58:2A
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer:       /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial:       018F874979E0032325E5A6E5E18E1AA98455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: 1-HnGzdhcGaEHLfLBFhp78llqAa8.roa (hash: JktoSVq2050DethKJlzy7Wku/7HMilY0ZhkqDwP508o=)
                          2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: UuAlMqTfX/+4PgX1+7KNefIKUXN2+j9rigoTnqVfEAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:79:e0:03:23:25:e5:a6:e5:e1:8e:1a:a9:84:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=9e58c6e673fd4f6e6fc17fe3e6cb6f0a6374582a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:38:77:d0:f8:d5:a5:e6:0a:bd:0f:1b:b6:
                    2f:cf:b6:15:97:4f:8e:8b:87:bf:d0:44:e0:d1:37:
                    b7:2a:fb:75:b5:fa:14:83:22:fc:a5:db:5a:2d:82:
                    3e:50:4c:07:24:dc:97:d6:de:7d:8c:77:6c:fe:9c:
                    15:50:db:2b:2e:69:5a:39:7f:5f:f6:87:5c:41:c3:
                    eb:1a:c5:e6:02:2d:ba:a3:52:f3:80:d2:0a:94:fc:
                    ce:0a:ef:d7:af:25:b2:9f:bc:3b:a7:0f:c7:6a:77:
                    8f:36:8d:dd:64:f9:2d:48:9f:a2:8a:70:c8:11:6a:
                    d1:42:d9:41:12:77:59:70:96:52:2b:c0:47:a3:c2:
                    4d:0b:2d:51:02:1f:b1:aa:c0:74:9f:d9:b4:90:b1:
                    74:48:12:4e:61:0b:c2:96:73:24:92:b2:0c:18:bc:
                    7c:c8:7c:0a:5e:0a:80:03:79:3c:e0:dd:5f:2e:09:
                    0a:01:87:ec:71:a7:9f:8d:75:d1:77:55:e7:26:65:
                    d8:82:de:c2:f4:93:03:ab:23:e8:1f:6e:3e:6a:39:
                    e8:83:46:da:02:bd:3a:f2:12:9b:f4:60:cc:e0:49:
                    bb:b8:12:25:58:4d:79:ef:d9:5b:01:28:53:6e:0e:
                    8f:e0:3c:3e:b2:b7:f6:f5:7e:3e:e2:c1:b6:45:d3:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:C6:E6:73:FD:4F:6E:6F:C1:7F:E3:E6:CB:6F:0A:63:74:58:2A
            X509v3 Authority Key Identifier:
                keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:1e:93:8f:42:98:ed:be:0a:10:3f:1b:06:72:e1:85:39:
         67:06:d6:e7:e0:84:f2:f3:ed:e9:87:83:8a:29:3e:d7:f4:1b:
         80:1f:19:7f:23:01:b8:a4:80:35:26:8d:e2:cf:aa:4f:c3:8e:
         7b:22:61:af:b9:55:d5:09:45:e3:9c:4c:36:a5:e2:c6:7a:01:
         49:18:a4:65:c0:a4:99:ca:46:64:34:a9:3d:10:54:da:d7:93:
         60:4c:d1:d6:75:e8:8e:d1:12:b7:c0:84:ce:44:de:3b:7d:69:
         97:07:e5:f6:a4:3c:18:98:03:26:a1:11:46:5a:89:18:56:9f:
         d1:b7:d2:33:c7:f7:95:e4:33:19:89:bd:b8:b5:d0:a1:1d:c7:
         7c:5c:d5:d2:c9:9c:ff:df:6d:de:b3:39:ee:27:d5:d7:bb:4a:
         59:ca:9f:b4:79:8e:25:02:20:08:bf:e2:20:ab:00:fb:17:6c:
         f1:e8:02:1e:7e:84:e7:bd:dc:0a:e2:b7:90:bb:94:62:7a:66:
         46:38:2d:a0:50:95:df:64:07:99:e7:16:69:b5:23:5e:df:fd:
         95:e0:c4:5b:85:3c:3f:03:69:7a:81:fd:9d:c1:89:03:0a:4f:
         4f:69:67:33:08:50:c8:a4:33:11:10:fc:94:f9:0a:e2:8a:39:
         e5:94:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:22 2024 by rpki-client on console-ams.rpki-client.org