Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File:                     d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier:          Q6YyurmWJ8A2PY9iUjlth8c0nnjDKTOgJSgnxXsfQzg=
Subject key identifier:   03:33:90:1C:97:CF:F5:E2:2D:18:46:25:97:F2:72:1B:F8:18:59:00
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer:       /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial:       018F87ED56755C19982DA8C8C737375E707E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: HrfJx5R-OHQDOYmBpEj-AJRQ4Yg.roa (hash: 31lBesmQkTGhkWiWRq6SW5+gH2kipqepw+h8F93LtuU=)
                          2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: uSMPN6NABGPvTPvaH/hT+CS9Ytx495qXez9w3+Boxc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:56:75:5c:19:98:2d:a8:c8:c7:37:37:5e:70:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=0333901c97cff5e22d18462597f2721bf8185900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:ec:f7:61:58:23:6e:11:99:a1:46:fe:8f:
                    73:79:99:e9:7a:c5:a1:68:8f:fc:d7:01:fc:5d:f7:
                    dc:4e:a5:e2:e1:fc:f5:cc:c8:a4:1e:e5:dc:fa:35:
                    bc:67:cb:be:16:e2:aa:b3:1a:5c:9d:93:77:4f:85:
                    21:b8:d3:c1:ed:ac:fb:3d:3c:13:2a:b2:e0:67:18:
                    fc:57:2c:e0:55:b6:c5:55:6d:e9:34:dc:33:02:e2:
                    ea:78:48:a7:84:e9:2f:32:7a:0a:e3:3a:73:03:ef:
                    e5:c8:70:b5:94:03:15:ea:1b:30:37:69:39:cf:a6:
                    4e:0f:a8:00:54:ed:b0:d5:4c:53:b5:46:7a:90:d3:
                    3b:19:d8:d1:97:6d:e7:ca:0b:d1:3a:ad:b7:26:a8:
                    19:77:d6:a7:1c:ac:6f:06:91:4d:51:a6:62:8f:da:
                    a9:12:c3:6c:58:0d:f0:24:6d:d9:3e:5b:f7:03:a1:
                    3e:31:5c:84:39:40:0b:39:62:75:cd:1c:6b:7c:d9:
                    f3:61:8c:0d:bc:de:83:2f:38:30:b9:a1:20:c2:1c:
                    a1:54:f2:f7:cc:d0:ae:5e:dc:5c:c2:ac:7b:0e:bd:
                    60:27:aa:9d:b8:5e:92:97:92:a5:29:cc:70:22:23:
                    f5:e5:20:90:cd:7a:f6:25:07:32:c2:bb:84:1a:71:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:33:90:1C:97:CF:F5:E2:2D:18:46:25:97:F2:72:1B:F8:18:59:00
            X509v3 Authority Key Identifier:
                keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:76:15:73:2e:3f:91:24:76:c0:4a:31:b8:ce:ab:63:df:
         e7:47:a3:51:52:78:66:53:41:b0:75:9a:f7:ec:59:02:d8:15:
         8b:d1:e7:a1:09:87:81:a8:4c:4c:c2:28:26:e2:e0:34:df:e8:
         41:61:39:40:21:3a:a4:0a:a7:21:18:11:1f:5f:b4:9a:71:bb:
         a7:b3:e8:67:d1:aa:09:8b:23:62:fa:76:6c:fd:98:ed:9b:74:
         87:54:13:bb:d1:ef:4e:72:17:19:6a:80:65:a1:f3:e7:56:72:
         6b:ae:6b:6c:38:97:e7:f2:9a:45:4d:e0:1f:06:c3:3b:39:e3:
         a6:8a:5b:b7:38:6d:e1:28:0e:88:e2:17:b8:19:83:88:64:36:
         09:f2:b1:f2:a4:14:8a:4f:f7:5f:8a:e7:95:31:7c:6a:a0:fb:
         88:50:af:da:83:82:d8:f4:f4:96:58:fc:6f:95:30:03:2e:ae:
         fa:86:0e:63:2c:c9:3c:d5:23:5b:36:3e:43:f8:b7:f6:e0:c0:
         c7:7d:45:3a:4d:87:12:82:8d:a2:85:78:4e:61:6a:cf:0f:2b:
         2d:42:29:cd:4f:b7:0c:89:d0:07:00:82:31:0c:fd:6f:99:85:
         cf:7e:7c:e8:c0:0b:f4:6b:4d:bb:59:84:ce:64:e3:e9:b3:c9:
         22:95:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:54 2024 by rpki-client on console-ams.rpki-client.org