Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File:                     hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier:          KqCrIv7q1/BgfOMZ9QkyhovGrJK9Ry6g22+vmlPHaTo=
Subject key identifier:   35:B9:B0:5C:A9:88:AC:AA:4D:91:BF:C8:6A:57:CA:DE:9C:E5:8F:EC
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer:       /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial:       018F7CC54B7C84C4F98A2F089A5B1E864EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number:          1171
Signing time:             Wed 15 May 2024 15:00:55 +0000
Manifest this update:     Wed 15 May 2024 15:00:55 +0000
Manifest next update:     Thu 16 May 2024 15:00:55 +0000
Files and hashes:         1: C7dOxW-wtL054x9B685fbBYMnkI.roa (hash: 06hcl4cdDbCtC3KU5DEwtaQ2b20An3D8gt6jX1czpcw=)
                          2: X9OzfqRiGOmHyDpuqpWMZVVJw7I.roa (hash: OhFeQ1Z2D8/EhgkinRGKlmJelTBT8ADi8azoz9TtOvY=)
                          3: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: N0IUIgFRMbyfpoAEaBTI2tfYm2HAJitW86feitXiyjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:c5:4b:7c:84:c4:f9:8a:2f:08:9a:5b:1e:86:4e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
        Validity
            Not Before: May 15 15:00:55 2024 GMT
            Not After : May 16 15:00:55 2024 GMT
        Subject: CN=35b9b05ca988acaa4d91bfc86a57cade9ce58fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:3a:0e:46:c4:07:cd:e7:80:9f:37:f2:8e:
                    35:d6:dc:8a:ab:7c:a2:76:bb:89:0a:f5:ad:b5:19:
                    32:32:40:15:99:02:92:90:0a:01:91:4c:25:2d:7b:
                    d5:2a:e7:99:b9:9f:a4:d3:0f:d3:ce:01:2e:5b:8e:
                    a0:f5:16:85:4d:9a:8e:0b:ea:5f:ae:af:8e:a4:73:
                    a1:75:fd:f4:2a:70:98:2f:61:14:bf:42:35:5f:f6:
                    14:aa:63:9d:10:75:cd:06:ef:b2:4b:9d:1c:f5:10:
                    7e:c4:51:f5:91:40:29:de:e3:57:aa:79:d5:f6:34:
                    5c:4a:53:a6:30:84:c7:a1:7b:4e:47:15:2e:48:30:
                    11:71:58:fc:0b:c4:b6:8f:db:e2:c1:4e:65:2c:91:
                    27:a7:1b:15:60:14:53:27:39:0c:85:8c:41:f2:fc:
                    50:f1:af:26:82:96:33:7a:b4:54:0d:b9:09:5d:d8:
                    f6:5c:72:13:6c:01:45:1a:5c:07:cf:cb:7b:ae:b6:
                    a6:29:45:73:3c:42:b3:73:44:6c:a3:fc:12:ed:fc:
                    10:14:bc:7c:66:78:3b:96:53:9d:93:9f:d4:0a:83:
                    f5:5a:62:45:c3:a0:73:51:5f:d4:ad:51:88:54:8b:
                    e9:5a:bd:da:cc:14:2e:83:a5:a4:f5:14:c3:49:ee:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:B0:5C:A9:88:AC:AA:4D:91:BF:C8:6A:57:CA:DE:9C:E5:8F:EC
            X509v3 Authority Key Identifier:
                keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:60:53:7a:8c:b2:59:6f:ef:32:ed:f6:13:c5:7f:73:14:
         46:50:cb:94:c3:7b:70:b0:0f:60:50:66:fc:ec:ae:7e:2c:5a:
         0d:93:10:96:d7:76:7e:d3:50:e0:7b:4f:a8:84:84:41:38:6d:
         ff:c3:8f:f4:87:6f:bf:38:7f:76:24:79:e1:1d:ab:d8:d1:d5:
         86:78:3a:01:5d:5b:72:f1:3a:b5:02:9a:e3:09:1e:4a:aa:00:
         c1:2a:d4:54:37:fa:e4:37:6e:f3:c6:e9:cd:8a:6f:cd:e6:ce:
         33:c1:6e:85:8b:86:de:88:c8:52:7a:12:8b:9f:e3:66:ad:6a:
         a0:88:35:91:40:d6:d7:9a:26:11:1e:36:e5:0e:eb:74:79:78:
         d3:51:ff:4a:78:b1:f7:85:77:67:ed:ac:f3:ed:00:6f:5d:05:
         97:52:98:46:12:fb:65:cc:ba:87:0f:38:5b:3f:b0:4a:d9:0f:
         33:cd:da:74:7e:d7:be:12:a0:e8:a6:9e:64:a1:96:82:38:a3:
         94:dc:b5:24:49:17:d2:0d:70:e3:b0:3b:1e:78:b2:d7:da:5d:
         d0:f1:f0:f3:17:4f:b3:c9:e3:13:93:b0:57:3c:f6:4b:70:47:
         3c:28:15:81:1f:85:ee:1a:bc:ce:0b:64:ce:11:5d:a6:8b:6e:
         7a:67:a5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:26:32 2024 by rpki-client on console-fra.rpki-client.org