Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File:                     Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier:          ajayQjm6XsUIGWPevn5cDrD0F9jyxNFn1IDA1ExTPno=
Subject key identifier:   EE:78:C3:2E:51:C6:CF:5D:55:CC:24:FE:CD:F3:D5:38:B7:9C:0C:E2
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer:       /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial:       018F9B3D7AD43C5A028B57F183DA6B07FF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number:          1183
Signing time:             Tue 21 May 2024 13:00:48 +0000
Manifest this update:     Tue 21 May 2024 13:00:48 +0000
Manifest next update:     Wed 22 May 2024 13:00:48 +0000
Files and hashes:         1: 8Yd--WpfID7EQ8p4LxecT27UZhI.roa (hash: MCof10uKAbmp5kLXB/2cXAd1APCKZE/TLIX7E5Y0oDg=)
                          2: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: kahgI3iF5AVJ0RKDiZOKGn9K9wTy2Qj8UA+rm6rEd20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:3d:7a:d4:3c:5a:02:8b:57:f1:83:da:6b:07:ff:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
        Validity
            Not Before: May 21 13:00:48 2024 GMT
            Not After : May 22 13:00:48 2024 GMT
        Subject: CN=ee78c32e51c6cf5d55cc24fecdf3d538b79c0ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:ab:3e:6a:fb:9b:5e:1b:ed:5c:29:6f:40:
                    8d:84:04:2f:4c:0f:11:58:d5:3c:af:47:7d:4c:ba:
                    c6:ea:ed:f2:82:5c:13:91:83:15:12:f3:c6:c7:e5:
                    87:ea:a3:a4:36:6b:36:0b:e6:76:12:0f:29:bd:3c:
                    88:77:7a:49:a3:11:2d:27:5b:4a:60:69:7c:a1:0a:
                    2e:ab:c9:a8:f4:ac:01:2b:20:c5:97:bb:af:79:70:
                    5b:66:45:8d:67:f2:d6:ff:ef:8f:e2:94:61:67:26:
                    19:23:94:80:e2:ef:94:c9:2d:36:86:dd:35:52:a6:
                    b4:19:91:a3:bc:0f:19:29:a1:4b:8c:38:94:6b:b8:
                    59:d0:07:69:6d:d8:bb:fd:42:22:33:9d:c7:1d:8d:
                    f4:4e:60:a4:49:02:5b:a8:72:5b:2d:38:85:7d:37:
                    03:1b:6e:f9:1b:ad:9e:d7:cf:70:4a:fb:a0:30:d7:
                    a0:46:d0:8f:92:a0:41:3c:e5:4b:e7:b6:d2:ce:c1:
                    4e:bc:5d:07:32:d1:f7:20:b8:e4:0e:6f:c9:cc:e1:
                    6f:bb:2d:05:8e:7b:35:86:5c:a4:e9:85:b2:0e:39:
                    14:b4:12:0b:d5:be:6d:94:49:19:a5:52:55:ac:c9:
                    d3:40:64:5c:65:49:33:20:72:16:d3:91:8f:ca:8a:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:78:C3:2E:51:C6:CF:5D:55:CC:24:FE:CD:F3:D5:38:B7:9C:0C:E2
            X509v3 Authority Key Identifier:
                keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:b5:4b:93:6b:16:bd:4e:1f:b4:c8:3d:d0:c3:bb:7f:de:
         05:fd:db:95:d4:0e:a4:1b:55:85:6b:9b:82:58:79:8d:9b:08:
         4f:61:c0:92:e8:48:d9:6c:62:dd:dc:db:c1:c0:f6:00:a4:1f:
         7d:7c:7d:20:fb:b0:28:d7:13:8d:23:bb:bb:fe:24:96:69:6b:
         a3:e3:3a:ac:de:55:ce:af:1e:4f:92:d5:9a:d5:8c:dc:ae:5f:
         b5:4d:12:a1:9e:b2:0b:72:78:d9:4a:53:87:ca:a9:38:25:5f:
         30:ec:7e:a8:7f:20:11:7e:5c:43:bf:be:31:f6:85:e1:8e:84:
         c7:62:44:a1:d7:71:3e:49:ad:5b:8f:f3:24:11:a6:94:fc:5d:
         c2:5d:7d:4e:87:fa:4e:a9:c8:65:99:55:e8:1d:f2:ef:67:f0:
         04:1a:c4:77:7b:a9:69:9d:d3:d6:ac:f8:df:b0:63:b7:1e:ef:
         3a:74:4f:ae:da:bd:6a:94:04:ce:a4:86:64:f2:6a:8b:74:59:
         fc:f6:bf:c7:67:98:29:61:cc:96:8e:b6:f9:63:5c:71:35:c7:
         ec:d6:25:72:4c:d9:df:f0:ca:df:4a:11:0e:cc:9a:c1:8b:0e:
         28:8a:57:37:a9:80:11:83:87:02:c6:ed:34:f4:83:8d:66:ae:
         e4:3e:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:21:11 2024 by rpki-client on console-fra.rpki-client.org