Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File:                     yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier:          xEuA253KfdzsZQywJUSRjEcbRc0GC9NQhq+y7fwikXU=
Subject key identifier:   8A:A7:78:1E:86:C5:41:15:C9:7A:91:DB:EB:2B:28:F0:BD:5E:62:F0
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer:       /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial:       018F86A3A4C5DFEB2C57AE7D89AFFA78B868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number:          118C
Signing time:             Fri 17 May 2024 13:00:22 +0000
Manifest this update:     Fri 17 May 2024 13:00:22 +0000
Manifest next update:     Sat 18 May 2024 13:00:22 +0000
Files and hashes:         1: NIWRjRw_azzWwi7j-eTC7bMPq24.roa (hash: 1bi20YfM5qPGX0JXzgpx0diIDrcA9q5yJu3YTEzy7/k=)
                          2: jlSXRAhVUXZAInCHYMFql-MvPP4.roa (hash: /Yhm/BD1ZDKFP4UhvYnItGt+tvB0eMqKDyBbW2ZEE3w=)
                          3: o5Ar4uqh9OYoWnDpxwZzXQfNFZk.roa (hash: m57amYZzYHtzPPhdP2RADimLDuMpXJp/UydEHVMq9Xs=)
                          4: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: /j9HKc5kFZSRgwcqSLSqrypbx5bwwE2ciaaoj7t0/gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a4:c5:df:eb:2c:57:ae:7d:89:af:fa:78:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
        Validity
            Not Before: May 17 13:00:22 2024 GMT
            Not After : May 18 13:00:22 2024 GMT
        Subject: CN=8aa7781e86c54115c97a91dbeb2b28f0bd5e62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:89:6a:6c:73:1c:6b:8b:b8:45:6f:b7:2e:
                    92:c6:53:9a:32:67:20:f2:c2:e2:f6:29:ad:ae:2b:
                    76:e9:f5:2a:d4:da:56:08:78:87:2b:36:5c:7d:09:
                    eb:3f:72:44:a9:57:31:03:3b:fd:72:ce:15:a8:c4:
                    cf:31:6a:90:09:06:d7:21:28:9b:63:68:0b:94:0c:
                    a3:5a:22:c3:cb:01:04:68:86:16:ad:68:81:42:5b:
                    b7:6d:f4:ff:9a:e3:ad:7f:47:f4:b4:ce:80:a7:d3:
                    d9:03:6d:d7:98:ea:4c:e9:87:a0:00:38:37:39:17:
                    52:14:39:c6:2b:86:42:58:7e:91:4c:9c:f2:23:ac:
                    66:24:0f:fb:81:13:43:5c:00:84:66:0f:ff:96:9d:
                    11:16:51:50:2d:1f:01:70:ea:ef:75:f9:e5:7c:7c:
                    61:b1:b6:cf:6e:d4:6b:1e:00:1d:49:32:ae:0a:bf:
                    b1:87:48:6f:52:fd:fd:1f:e5:e2:d1:14:67:78:4b:
                    d8:76:af:22:15:0a:40:90:8f:ae:4d:80:3c:db:3d:
                    f6:a4:a5:a0:bf:3c:cc:1c:9d:d7:f5:ea:71:3d:53:
                    92:a8:2c:91:99:8d:b4:66:58:0f:bb:fa:8f:50:a8:
                    1f:07:a0:35:f3:c3:c4:31:f0:2b:c0:12:d4:c0:45:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:78:1E:86:C5:41:15:C9:7A:91:DB:EB:2B:28:F0:BD:5E:62:F0
            X509v3 Authority Key Identifier:
                keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:ee:a4:49:1d:cd:aa:74:1e:3e:ca:20:73:c0:2f:6d:73:
         ca:cd:09:27:02:1a:96:e0:0a:05:35:84:aa:07:0d:fe:04:84:
         4c:2f:2e:3e:27:73:88:1e:d3:08:2f:2b:77:e6:6f:94:d6:e7:
         f4:9c:f6:a8:73:f6:06:47:f6:a0:dd:18:f6:a3:57:ee:34:f2:
         4c:64:cf:36:83:c3:b8:67:1d:2c:93:31:57:69:6a:a9:07:c0:
         2f:ae:8b:52:33:e4:ab:4a:d1:49:81:f8:7a:fd:ec:ae:ef:c3:
         8a:2a:4c:57:96:0e:1b:eb:52:a5:8c:e6:3d:cd:92:65:93:47:
         db:fd:49:e2:3c:f6:97:de:8c:26:f0:a2:45:19:e3:e7:3c:43:
         11:20:a0:6f:15:ba:61:80:36:f6:b7:45:c1:ab:4d:ba:d3:19:
         c1:d3:0f:6c:21:f1:d1:56:27:84:70:37:a5:cb:c9:3a:eb:d3:
         68:5c:0c:e3:44:66:ec:57:91:58:a1:42:a1:d1:58:09:6a:7e:
         3e:50:c6:2a:8d:93:0c:0b:af:5b:fb:91:a6:7d:6b:e1:16:8b:
         39:a5:c6:7f:ac:ca:4d:fc:66:6a:0a:d8:78:c8:6f:d0:e5:1e:
         31:cd:58:14:4b:4a:ba:26:e4:65:67:ff:ac:1e:9a:fc:fa:07:
         a0:82:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:25 2024 by rpki-client on console-ams.rpki-client.org