Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File:                     w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier:          kdthOOUwr9p08SPjzE8Wj9aisAD3XMmRYrahPMW6DZE=
Subject key identifier:   55:42:34:07:54:7E:AF:D3:A2:D6:9E:48:0D:B8:72:58:99:06:EF:C5
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer:       /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial:       018F87B69794865C054E6ED2ECBE18FAFEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:41 +0000
Manifest this update:     Fri 17 May 2024 18:00:41 +0000
Manifest next update:     Sat 18 May 2024 18:00:41 +0000
Files and hashes:         1: mjK2-IvECOhowGlXUSDOKkzCEq4.roa (hash: WxFNt3K11nwNNWpdxRLmx/DqbpyCRBBnCBRicxiTUKg=)
                          2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: cXeOWCx/IyGEog11WQlpZ5kItFjLvuHjM0p2qHHg094=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:97:94:86:5c:05:4e:6e:d2:ec:be:18:fa:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
        Validity
            Not Before: May 17 18:00:41 2024 GMT
            Not After : May 18 18:00:41 2024 GMT
        Subject: CN=55423407547eafd3a2d69e480db872589906efc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:fb:1b:59:4c:af:1a:ca:35:07:2b:32:24:
                    a8:2c:94:5d:22:4b:e9:7b:dc:1e:ff:d1:36:22:16:
                    ac:de:bd:25:1b:55:62:c5:a0:9a:39:f6:c7:42:da:
                    1f:e6:9a:e1:35:d9:a3:8d:b6:6b:94:97:2e:dc:db:
                    ce:ed:13:f1:f2:ed:be:0e:98:80:fb:58:1b:8b:f3:
                    b2:c2:35:0a:02:2e:38:51:ab:03:4e:ee:a9:cb:50:
                    f2:4b:fe:30:12:79:46:17:8c:b9:fe:da:64:50:d4:
                    4c:b4:bb:b1:59:bb:9b:e3:85:fc:f4:4f:09:11:47:
                    02:47:90:01:0c:ab:95:16:3f:60:88:85:b0:19:88:
                    f8:a7:ee:b5:6e:ba:81:d2:9e:a6:e1:24:74:27:3d:
                    39:4a:e4:24:9d:ce:9b:be:4b:ff:7e:c4:c3:3d:78:
                    ec:88:e0:91:4b:cd:e4:e8:5d:cc:1e:cc:d5:51:16:
                    d4:a4:a5:a3:bd:94:ad:33:98:f2:c0:50:69:67:7b:
                    b5:44:f9:75:4c:d6:d1:5b:be:ad:61:30:a5:26:fc:
                    61:a0:69:30:fd:c1:ee:ad:1d:85:81:27:f5:10:ee:
                    00:ac:15:04:0a:29:81:05:a3:ae:d2:7e:b2:6d:5a:
                    ab:de:b5:eb:d7:24:e6:15:87:8b:95:ea:fa:71:51:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:34:07:54:7E:AF:D3:A2:D6:9E:48:0D:B8:72:58:99:06:EF:C5
            X509v3 Authority Key Identifier:
                keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:f3:df:20:a2:24:5b:db:08:fb:d7:34:d3:0c:ca:61:a8:
         04:e0:1c:c7:46:67:aa:d5:e1:8d:db:0f:fd:5d:69:21:bb:66:
         d6:6c:4f:c2:57:3a:60:de:a4:5c:e3:81:e1:6a:d9:48:ff:de:
         d3:6f:01:b1:4d:d5:0a:8f:0a:ea:28:c5:27:e9:6c:5d:b1:1d:
         12:68:e9:de:c5:90:62:c2:dd:e3:9c:a6:1e:cf:c9:b5:31:e4:
         b5:9e:17:0e:9b:45:e1:ee:c6:8a:01:0d:e8:37:5a:8b:3d:65:
         2c:6f:5e:b1:cb:3b:0b:f2:34:23:a9:84:18:a3:4e:30:10:92:
         78:53:8a:e2:f1:a6:e1:88:82:d0:13:87:62:cd:62:1c:d7:45:
         55:cc:2b:91:66:ef:38:18:3b:59:f1:10:18:e9:84:ee:92:7c:
         e9:88:ed:4d:22:02:d9:16:de:7c:aa:5e:7e:75:04:3f:87:91:
         79:e5:8f:81:a4:fa:8a:69:15:cd:65:18:8a:72:87:19:f0:14:
         a7:70:0b:8d:de:1a:50:2b:8a:f0:80:be:dc:18:45:7a:84:5a:
         f1:51:0a:61:4e:6e:29:1f:54:99:84:86:a7:28:1f:37:49:bc:
         29:46:c8:98:af:ec:0f:4b:ea:bd:88:eb:08:77:20:e3:d1:4d:
         90:ad:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:06:06 2024 by rpki-client on console-ams.rpki-client.org