Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File:                     kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier:          MkHTDECacxdSMvONRXJAxJtdkLD20PsiKqAdyTWQGfQ=
Subject key identifier:   C6:F8:CA:7D:5C:46:E2:D6:48:2A:9A:B9:D6:01:61:60:D5:7B:0C:44
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer:       /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial:       018F874AB3D137B4CB1AC08247E7B6B13836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:50 +0000
Manifest this update:     Fri 17 May 2024 16:02:50 +0000
Manifest next update:     Sat 18 May 2024 16:02:50 +0000
Files and hashes:         1: 1Oz2TycldyHxmtakQX-1HGXNfYA.roa (hash: jtDUW0vLTGuS+6XPgIsYD7INVk9FL6kJu7I01J+xahA=)
                          2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: y9v43M4haxSB7JHtpbt2jFCikrsfSRABbxIBia3rdaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b3:d1:37:b4:cb:1a:c0:82:47:e7:b6:b1:38:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
        Validity
            Not Before: May 17 16:02:50 2024 GMT
            Not After : May 18 16:02:50 2024 GMT
        Subject: CN=c6f8ca7d5c46e2d6482a9ab9d6016160d57b0c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:f9:fb:18:17:8e:3e:51:c7:47:b8:2d:7a:
                    a9:4f:fd:ab:24:9a:45:a5:c7:62:0f:bd:c2:f4:e1:
                    17:8a:4c:d9:5a:b4:72:6a:fd:ea:e6:ff:2a:5e:69:
                    b4:9b:bb:cd:9d:b9:8b:64:05:cd:96:99:30:c8:7e:
                    e7:12:d0:cf:82:dc:27:4d:fd:c2:a6:a6:83:5c:4e:
                    11:9f:96:4a:ae:0d:ab:e4:09:fc:27:ce:72:0d:5b:
                    9d:1d:ff:0d:6a:01:ed:1d:68:2a:a9:6f:98:95:45:
                    25:51:c0:49:8a:5c:2e:6c:2d:29:65:59:4e:65:e7:
                    37:0f:97:31:ee:8f:e6:b9:cf:35:11:db:36:b5:10:
                    48:85:dc:e5:88:cf:f8:e1:27:43:23:80:5c:30:b4:
                    ea:65:36:e9:3c:f1:7b:6a:5d:f4:85:74:ab:3f:45:
                    4b:07:34:65:d9:d6:eb:ab:e4:8d:18:f8:96:88:fc:
                    0e:31:cf:77:ab:2f:01:4c:f5:81:ec:8b:75:82:e9:
                    4e:e8:f8:23:6f:1f:3a:79:95:b7:c1:e9:bc:c6:03:
                    b2:ae:d9:e4:b4:18:f5:c8:15:3e:ac:34:5c:38:d8:
                    7a:2e:93:b3:4c:3b:4e:71:59:19:4f:aa:d5:0f:c3:
                    7a:a1:e5:65:cf:e4:cb:03:41:36:c5:1c:6d:df:72:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:CA:7D:5C:46:E2:D6:48:2A:9A:B9:D6:01:61:60:D5:7B:0C:44
            X509v3 Authority Key Identifier:
                keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:cf:94:6f:4b:78:37:53:3c:e4:19:38:3e:39:02:df:a1:
         c4:31:39:f0:5d:f2:4e:dc:a8:67:e1:a3:f1:76:ca:fc:39:f0:
         85:2d:52:36:55:ee:54:99:27:8c:0a:0b:ca:bb:d4:d2:16:09:
         f5:ab:cc:a4:7f:b1:00:d4:26:f0:81:ee:77:bd:1d:fb:9f:4c:
         09:35:eb:7e:c3:b2:ad:cc:88:d4:29:bf:ee:1d:61:d3:14:5a:
         7a:65:2a:53:ab:d6:6b:2b:d2:d3:2e:d1:91:42:86:23:0c:8f:
         73:d9:df:d9:ca:4e:4f:4b:92:a5:4b:1c:a8:2b:34:80:8d:b0:
         0e:69:0e:a5:6a:27:25:3c:e7:62:c2:68:9e:d4:8a:6e:40:79:
         0f:82:64:2b:22:87:74:c7:bc:96:a8:b4:7d:2c:c5:72:d5:57:
         48:b1:65:f6:37:3c:b1:3a:02:d6:d4:0e:12:9e:e3:e2:7c:5b:
         23:14:f7:39:54:f6:1c:93:6a:bd:ac:3a:1c:0a:f8:f9:93:fa:
         14:0b:7d:a8:18:cf:aa:84:83:76:f8:8a:23:31:7d:3f:02:3c:
         8e:f3:50:3b:25:76:1f:a5:81:80:e1:cd:9d:9d:3e:14:82:53:
         3a:c4:3a:95:49:2e:9f:a0:a6:92:0c:8f:a8:4f:a5:a2:9f:9c:
         ce:e1:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:00 2024 by rpki-client on console-fra.rpki-client.org