Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File:                     XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier:          b9gS9fIUC8/eMryvR5NZLToqMjUES6/ZL0zrJxtwWos=
Subject key identifier:   EB:96:1F:58:6C:F7:15:23:95:4B:BA:37:55:E8:49:49:37:99:B5:FB
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer:       /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial:       018F87B61DE6CFA912892FE1F4FF30DC97E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:10 +0000
Manifest this update:     Fri 17 May 2024 18:00:10 +0000
Manifest next update:     Sat 18 May 2024 18:00:10 +0000
Files and hashes:         1: NVvdX4gJb4J3pDfOfj6Cga2rwjw.roa (hash: tVCtLe0qWVemWVcqhu0nhLmrCDoJ0zcNYEVA6+Rm3FQ=)
                          2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: k2VeH7rLfdnxvhhEnSDUGto/vI7unVpudqTeX8WBSP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1d:e6:cf:a9:12:89:2f:e1:f4:ff:30:dc:97:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
        Validity
            Not Before: May 17 18:00:10 2024 GMT
            Not After : May 18 18:00:10 2024 GMT
        Subject: CN=eb961f586cf71523954bba3755e849493799b5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:93:a0:69:c7:1d:f9:83:ef:75:02:e1:35:
                    b7:19:d6:3c:71:83:af:33:58:17:0f:b3:36:ae:d7:
                    69:8f:a3:83:80:c8:ab:db:da:0f:f2:c2:1f:17:f1:
                    5d:18:b3:fa:a4:c4:42:5b:5d:75:02:83:4f:73:68:
                    c3:b1:41:99:46:b7:4d:83:5c:78:df:9e:74:5c:d4:
                    ac:ce:0e:12:8f:90:e8:04:1b:51:13:8f:0a:16:90:
                    09:b8:27:c8:42:bf:fb:a6:e9:06:bd:48:fe:de:08:
                    b6:84:21:34:7d:c0:b8:d5:2f:04:48:48:35:83:23:
                    0a:e2:73:7f:08:b8:3b:90:56:a8:31:9d:49:d9:ea:
                    54:24:a6:50:ef:64:02:ea:6c:51:60:a2:3c:22:8d:
                    56:17:c7:9c:5e:ca:37:33:ce:07:13:62:0b:62:8a:
                    b4:5b:c0:d1:dc:00:85:b7:2f:74:11:fa:49:a4:47:
                    2d:0a:af:e0:a7:1d:1b:2d:94:f6:c5:d7:cd:e0:17:
                    30:7f:a7:1d:5d:68:e7:b1:2b:df:56:c7:68:19:3a:
                    06:6e:88:7f:3d:b1:a0:97:60:37:f4:1f:a9:11:2e:
                    86:ce:f0:f3:ea:1d:0c:1a:d9:75:7f:e6:2e:79:ac:
                    da:e3:eb:56:96:bf:e3:b6:e7:39:4e:24:31:5d:02:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:1F:58:6C:F7:15:23:95:4B:BA:37:55:E8:49:49:37:99:B5:FB
            X509v3 Authority Key Identifier:
                keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:0d:83:96:21:c4:46:a1:db:2a:cc:c1:bb:cf:ba:a3:95:
         df:63:39:44:0d:4f:e3:26:ba:06:2e:01:85:40:7a:af:42:83:
         5b:a3:8f:c7:0f:00:b9:2a:79:39:8f:c2:32:47:fb:46:f5:4c:
         15:d6:eb:c1:f7:54:7c:e4:ab:05:89:b1:6c:d5:7e:07:62:1a:
         ee:b8:b2:90:a9:18:0b:73:12:59:e8:53:66:9d:08:f6:98:ff:
         f3:29:21:50:14:10:a8:5e:c1:0d:53:f8:94:b1:63:56:71:cd:
         55:c7:65:eb:26:ce:a1:4e:da:89:cd:ef:51:00:d0:0a:c0:0c:
         31:a3:1a:b3:d7:a7:43:85:66:89:26:35:da:6c:f5:ab:2d:bf:
         91:16:98:88:69:4e:8f:1f:2a:71:97:9a:0c:c8:d4:4c:5c:7c:
         61:23:24:36:d2:9a:94:b3:94:ee:24:6e:ca:e5:a8:a3:b2:e9:
         e5:17:67:9b:fc:86:7f:f8:90:1f:8a:0e:26:a1:7f:04:83:09:
         7a:8d:b8:02:3e:cd:86:91:2a:ab:50:47:69:13:a8:ff:33:f2:
         29:d1:7c:0a:61:89:31:02:18:50:77:e0:69:b8:14:34:89:4b:
         72:2b:cf:21:fa:35:68:50:d0:76:d8:ed:3b:33:7b:1a:c4:e6:
         80:b7:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:23 2024 by rpki-client on console-fra.rpki-client.org