Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File:                     gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier:          /YljEfR2AvIJBvNauB/Ni8EzZ+bq+zVUREBrkB4tgwI=
Subject key identifier:   26:EA:EB:95:9D:B2:E5:9A:73:CE:BC:74:97:40:AD:D1:84:4F:5C:CB
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer:       /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial:       018F874910002D93564D52C0FF5D3F1AD58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:03 +0000
Manifest this update:     Fri 17 May 2024 16:01:03 +0000
Manifest next update:     Sat 18 May 2024 16:01:03 +0000
Files and hashes:         1: _qGZb_TecJRANix3DthGXe0ho-Y.roa (hash: xWfkNMIea/qbk4vGIR3TTCoHuHa22g9JRQpoRFkayS4=)
                          2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: 7eYBE/hxEX1rfA0kAnGu8y5LyzzCVa+9Nnqew3PIUUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:10:00:2d:93:56:4d:52:c0:ff:5d:3f:1a:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
        Validity
            Not Before: May 17 16:01:03 2024 GMT
            Not After : May 18 16:01:03 2024 GMT
        Subject: CN=26eaeb959db2e59a73cebc749740add1844f5ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:1a:38:fc:b6:1f:7c:20:60:f2:aa:e2:51:
                    65:a7:fa:73:af:a0:64:ff:b4:59:13:34:91:65:74:
                    41:b6:f5:08:f4:7f:1a:7e:34:2e:3f:67:03:f3:51:
                    c0:3b:77:77:aa:95:4c:69:37:11:99:ee:6b:9c:43:
                    72:ff:70:5e:3c:ed:a0:d3:9b:3d:f9:4a:6e:9e:2f:
                    36:db:15:4d:e4:50:d4:b3:7d:bd:22:a0:6d:ae:d6:
                    e1:2e:f3:34:64:01:39:d1:e5:bc:94:6b:09:40:03:
                    25:f3:f6:af:d2:42:4b:0d:7f:76:bc:11:10:d5:c6:
                    81:64:aa:72:08:04:c7:c3:69:67:e3:0f:1c:89:81:
                    f5:d4:f6:26:8b:16:70:34:26:69:16:c0:88:a1:29:
                    a0:95:44:f6:43:97:7e:74:f7:85:41:12:2d:6b:ae:
                    6f:1f:ff:e9:2c:d3:00:f0:85:77:d5:a4:8e:a1:27:
                    64:a3:5b:47:65:46:0f:d1:66:80:f3:1c:d7:9d:fa:
                    bd:1e:3c:1a:65:c3:bb:54:cf:52:bc:01:2b:71:ab:
                    c7:4f:f2:54:bf:87:5d:ea:ff:bc:25:26:45:98:f3:
                    31:94:55:d8:ca:4c:33:a0:ef:b0:34:5b:c4:e4:09:
                    d4:54:53:0a:ab:cf:94:5d:a3:41:c5:81:f3:1b:ee:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:EB:95:9D:B2:E5:9A:73:CE:BC:74:97:40:AD:D1:84:4F:5C:CB
            X509v3 Authority Key Identifier:
                keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:76:0b:91:59:1b:7b:ac:25:fa:6c:b5:16:30:48:61:48:e4:
         b6:32:82:cd:f2:3b:46:27:a9:81:f2:06:c6:7d:87:9c:30:55:
         da:17:85:28:2a:a5:90:21:11:eb:f6:b9:9f:13:df:26:38:cd:
         08:b1:65:d6:bb:1b:0d:b3:1d:f8:11:23:f9:86:42:a1:66:5e:
         c3:9e:be:99:e6:f4:8c:2c:34:f8:c2:54:3c:63:10:44:d1:1d:
         8b:37:44:84:ca:38:c4:2b:fd:45:0c:e9:fa:ba:74:67:9c:c0:
         a3:64:7e:f5:47:84:38:be:8e:ce:df:a9:93:06:01:fe:f0:3a:
         88:4e:be:ef:82:56:59:1b:8c:58:7c:bd:55:ee:0e:b4:38:d9:
         4f:11:20:62:10:3c:53:47:28:37:8c:22:97:d0:5f:07:6c:70:
         16:86:5c:f7:9d:95:39:c5:59:0d:12:9c:f6:c6:5e:85:43:32:
         34:61:bd:1b:3f:8d:96:8a:7f:26:91:67:9c:ef:49:0e:9d:14:
         87:31:87:0c:bf:96:95:8d:10:04:a4:3a:73:c7:f6:26:10:19:
         db:fa:6e:d6:9b:1f:08:05:31:ea:d4:c5:69:e2:ca:b3:ab:20:
         44:7f:df:56:f8:ba:c5:51:32:97:8f:09:02:e7:e1:44:1f:19:
         f6:e7:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:09 2024 by rpki-client on console-ams.rpki-client.org