Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File:                     bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier:          LnYEXuhHcQ68jy6lNSHKPKnPNMDJDu5fK5hu7J8T87s=
Subject key identifier:   C6:94:FD:E8:50:73:11:F9:2D:9D:7A:86:42:C7:EA:D1:B5:41:86:F4
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer:       /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial:       018F88242CC6D12918F87C1254FC14966E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:22 +0000
Manifest this update:     Fri 17 May 2024 20:00:22 +0000
Manifest next update:     Sat 18 May 2024 20:00:22 +0000
Files and hashes:         1: N1ZJ3a2BRgc1YXTHPky5Abpnwtk.roa (hash: TfUE65tsgha0+DC/hNvWj0YLBiDFPt3JxFs9fDO3sGw=)
                          2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: e3+k+p/D9Cw3SHqS6fkjvKkUiFCeAi2Tfw0/ytVhd8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:2c:c6:d1:29:18:f8:7c:12:54:fc:14:96:6e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
        Validity
            Not Before: May 17 20:00:22 2024 GMT
            Not After : May 18 20:00:22 2024 GMT
        Subject: CN=c694fde8507311f92d9d7a8642c7ead1b54186f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:02:7b:f2:50:8d:93:e4:67:e3:b1:55:18:
                    3b:0e:be:45:b0:66:26:fa:da:9c:2d:9a:31:60:51:
                    92:b7:ff:ce:65:34:b7:eb:9d:3c:e6:dd:b3:79:5f:
                    f8:a5:23:e4:26:4c:55:e6:44:bc:cd:e0:14:69:db:
                    95:99:19:15:96:c9:b2:7a:d2:67:76:7b:25:d9:75:
                    04:c5:a2:33:14:77:0b:9c:4c:02:7e:19:53:a0:08:
                    6b:4b:3a:38:9d:e0:c8:9d:07:42:50:d1:b2:ff:7b:
                    4c:9a:a0:bc:ab:d2:3b:9c:c4:27:cb:6a:1c:05:ff:
                    72:88:a0:f2:bc:5d:6f:6b:b6:95:7f:87:f9:6b:e7:
                    8d:a3:2f:19:86:64:bf:b3:b7:89:02:a3:65:84:d5:
                    16:b8:96:02:ea:81:5c:e2:2a:42:ae:c7:11:2d:63:
                    8c:9a:3a:af:6c:6d:cc:87:d0:18:c8:5e:87:50:02:
                    11:21:ed:0f:b6:7b:ee:31:7a:9c:d9:18:60:54:d1:
                    31:17:35:29:e7:b3:81:08:52:56:dd:c8:f7:77:e2:
                    8e:db:a2:3f:b6:b5:74:83:b6:ca:b5:0c:b7:a0:19:
                    26:b8:2d:1b:ec:13:6f:8b:3d:22:93:57:fb:ad:fa:
                    4c:74:5c:93:30:fd:8f:47:c0:54:ce:e9:0f:ac:0a:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:94:FD:E8:50:73:11:F9:2D:9D:7A:86:42:C7:EA:D1:B5:41:86:F4
            X509v3 Authority Key Identifier:
                keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:96:85:f6:9f:26:03:f7:e9:94:a9:f3:f9:7a:4a:c6:13:
         48:d1:17:a9:36:14:e9:6e:f1:a3:a7:57:67:11:8b:d1:fc:ca:
         cd:5e:1c:14:64:1d:00:87:f1:05:9c:b8:9a:5c:63:3b:52:33:
         a9:75:e7:e5:d6:a4:49:84:56:44:7c:99:a3:bf:35:24:84:03:
         07:fe:28:0a:d1:37:3a:0c:f7:c4:10:97:e6:ad:f4:98:77:c5:
         b2:74:41:dc:4e:97:37:6d:92:68:c5:4a:de:39:55:a5:a3:31:
         85:be:87:83:89:43:91:f8:fa:d5:10:30:3e:24:13:36:48:a4:
         f7:28:c5:a0:c8:05:9a:58:3c:32:d7:8f:a1:9b:72:bc:41:2f:
         27:7c:a5:78:a1:ae:98:b4:65:fc:e9:b1:b3:91:08:1d:df:d6:
         88:92:1a:0a:0c:be:97:4d:04:16:55:2c:65:97:5d:56:18:c1:
         00:4e:a8:c1:7c:80:c7:22:af:07:5a:4b:d9:e6:2b:2c:2e:e3:
         d0:9d:2f:72:3f:51:08:80:11:b6:93:be:c7:e9:df:53:66:c1:
         28:37:96:c2:6b:45:99:04:0f:d8:d3:af:a8:53:13:75:53:13:
         ab:73:31:ad:9b:3f:1e:63:0a:dd:c6:2b:37:58:ad:0d:9a:2f:
         1a:0a:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:59:21 2024 by rpki-client on console-fra.rpki-client.org