Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File:                     iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier:          EhcsdGxEQ+92jyUqBGOgB4wuMVcyNma49KUa9mth8Lo=
Subject key identifier:   C5:9B:76:CA:06:45:DA:8A:98:DB:0D:06:08:BB:52:F6:55:E4:01:5B
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer:       /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial:       018F87B6BFB72492D721E0E3054F4DC36739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:51 +0000
Manifest this update:     Fri 17 May 2024 18:00:51 +0000
Manifest next update:     Sat 18 May 2024 18:00:51 +0000
Files and hashes:         1: 00T5vp1-sl5kSuRHfkFqz0FYdjg.roa (hash: b7UpyELbMrzOzqIrkRrp72+86X0ZOeG4tHoNC3PbuwA=)
                          2: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: vdxkLiSGO9gV5Sf3p6tpak2pxFJmwBDsxwxOEhWAVQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:bf:b7:24:92:d7:21:e0:e3:05:4f:4d:c3:67:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
        Validity
            Not Before: May 17 18:00:51 2024 GMT
            Not After : May 18 18:00:51 2024 GMT
        Subject: CN=c59b76ca0645da8a98db0d0608bb52f655e4015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:3e:b4:00:5f:2a:b9:83:b9:b0:e6:a5:33:
                    41:6f:35:18:c4:12:37:c7:31:18:71:b9:b1:ea:91:
                    3b:58:d7:fc:d5:61:9b:3d:d1:62:15:69:0c:97:20:
                    95:ff:83:36:32:c1:3c:f9:3e:e0:78:01:53:82:e3:
                    e4:63:0e:e8:9f:1e:c9:42:27:60:90:ec:3e:a6:b6:
                    08:15:9d:f9:b1:44:b2:b5:cc:bb:90:a2:11:cd:15:
                    1d:a8:ff:6b:c9:da:0c:b2:2d:ca:bf:fe:20:4a:ca:
                    bf:e2:c1:0a:2a:cf:de:c2:26:2d:f2:cb:34:d1:72:
                    bf:5d:37:c6:75:16:24:37:29:46:5e:ea:f2:4b:23:
                    07:38:fd:23:ae:1c:66:93:ea:58:9c:92:9e:d8:40:
                    6f:de:fc:e2:07:17:ac:ae:5d:d3:73:ee:59:50:64:
                    ee:cb:4a:a4:65:e8:31:06:a5:bc:02:23:80:ee:c6:
                    65:60:19:a7:6d:49:6d:2a:e0:16:18:82:6d:7e:18:
                    db:8a:04:e3:c1:89:c7:21:b2:cd:1f:6e:fd:41:ac:
                    ee:c0:63:ed:37:c1:59:4b:b1:cb:67:34:2f:57:b9:
                    5a:32:4a:77:43:90:8f:52:a3:82:e3:5d:f7:fa:15:
                    08:16:56:96:dc:bd:0f:49:f1:c7:55:e7:11:80:8b:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:76:CA:06:45:DA:8A:98:DB:0D:06:08:BB:52:F6:55:E4:01:5B
            X509v3 Authority Key Identifier:
                keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:98:a0:17:cb:aa:e0:a4:42:2a:db:3d:7c:78:4a:32:58:4e:
         b5:3c:44:5e:41:8c:5b:3e:39:9e:37:65:0a:fc:66:af:b7:d0:
         ae:44:58:54:68:fe:ab:d3:9f:fc:be:df:bd:bc:dc:c5:31:b8:
         cc:49:29:7c:93:8e:ef:59:5a:0c:10:32:6b:ec:ff:bc:50:3a:
         67:51:a7:ba:2d:90:25:e4:ea:06:93:14:2c:3f:b1:24:84:c9:
         c8:7f:6a:dc:85:95:a3:0f:5d:9f:16:3f:38:88:d4:b5:2e:6d:
         0a:9f:51:25:f6:98:65:05:b1:23:ad:8a:56:8d:ca:91:88:6f:
         6a:4b:b6:d3:46:23:e6:00:3e:41:0f:10:df:51:4d:39:24:ca:
         21:04:a2:04:a5:aa:bb:a4:f7:07:fe:c4:b7:7c:e1:f6:f4:5d:
         7c:c4:c0:6e:9d:b5:b1:66:bd:e4:d9:6f:de:07:78:05:f8:1d:
         0b:02:be:9b:62:c2:40:9e:74:ef:a7:eb:04:f4:ad:9d:b6:1a:
         c1:94:e9:72:91:73:14:ff:4b:d1:a8:20:06:49:a7:b8:c2:3a:
         6d:6d:d7:a6:83:ed:bd:de:1f:be:1e:22:a0:4d:94:f2:8d:20:
         88:e1:e7:91:e9:b2:bb:14:10:b9:67:6e:77:f8:16:98:cc:e4:
         58:e1:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:41 2024 by rpki-client on console-fra.rpki-client.org