Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
File:                     q0U2TkncOhW-_yacOjKzwFQci2Y.mft (raw, json)
Hash identifier:          EdG58xWtap6QlFUWpkImdFDXUBU+VtdAb14qQVupU/Q=
Subject key identifier:   5B:AE:43:F2:80:57:D0:8F:C4:78:BC:10:58:41:5C:89:14:A5:E1:32
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Certificate issuer:       /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial:       018F86A3DD2F13787D07F9FDED3B0765E042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 13:00:36 +0000
Manifest this update:     Fri 17 May 2024 13:00:36 +0000
Manifest next update:     Sat 18 May 2024 13:00:36 +0000
Files and hashes:         1: RzNVuMXf9uQ_3ERpykVtGFwjdLw.roa (hash: SmP9ukQdRHY1zmZ9vU26ZS/6EtGITI1tXIVx5W0Ky9A=)
                          2: q0U2TkncOhW-_yacOjKzwFQci2Y.crl (hash: CKnT2l5K4OXi2GH39ngEGWE7V1nisfDpHnclc0us5IM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:dd:2f:13:78:7d:07:f9:fd:ed:3b:07:65:e0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
        Validity
            Not Before: May 17 13:00:36 2024 GMT
            Not After : May 18 13:00:36 2024 GMT
        Subject: CN=5bae43f28057d08fc478bc1058415c8914a5e132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:18:80:30:d5:86:bf:cb:8c:af:39:d9:ea:
                    eb:3e:95:52:bd:d8:3c:72:d0:77:26:40:9d:0e:7d:
                    73:aa:28:19:24:d2:b4:ad:f0:07:2b:be:8a:d8:1d:
                    a1:2c:45:03:f5:78:07:6b:8a:ec:b2:f4:53:77:cb:
                    25:6d:d0:47:a9:18:85:b7:f6:e4:45:72:45:5b:b7:
                    17:3c:01:e8:9c:9e:52:32:c8:48:c5:3a:f4:08:2c:
                    ee:8a:bd:5f:54:56:11:04:bd:ae:b5:80:9d:bf:7a:
                    f5:8c:00:c5:ca:29:1f:69:fb:b7:71:ac:05:f3:43:
                    da:f9:4e:a0:a6:7e:0c:58:af:83:40:65:5b:70:db:
                    4b:b2:fd:8f:c1:49:9c:1e:44:c9:dd:81:52:66:37:
                    78:b4:97:63:6b:4c:01:77:f7:4d:34:78:0c:d3:75:
                    b5:f7:9f:01:09:0b:db:fd:a1:d0:99:25:f4:53:86:
                    e3:e2:cc:a4:a5:36:d1:ed:cc:16:6e:c0:a3:58:ee:
                    9d:61:b8:cb:23:14:d4:1f:75:0b:d4:10:73:08:cf:
                    6d:0a:93:db:d0:0d:23:cb:a2:a2:dc:40:87:98:72:
                    33:eb:02:60:9c:0c:fc:71:19:8d:24:39:96:e4:f6:
                    99:4e:54:f9:04:26:b9:77:94:54:b9:4e:1a:95:40:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:43:F2:80:57:D0:8F:C4:78:BC:10:58:41:5C:89:14:A5:E1:32
            X509v3 Authority Key Identifier:
                keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:f9:bc:59:6e:aa:b2:3a:20:30:00:bc:04:7a:3d:35:f7:
         f1:7b:c7:15:30:59:a1:e6:a5:87:a1:2b:97:72:42:d1:2e:88:
         7c:c9:73:8a:18:29:8f:f0:bf:28:d3:e6:db:04:1b:48:8a:07:
         c3:b1:0d:86:92:4d:8f:ac:76:58:b1:f6:e6:b4:0f:d4:82:44:
         2a:9b:50:2f:84:58:41:47:dd:d4:aa:c2:36:c9:09:62:ad:62:
         35:aa:84:f3:83:a0:9f:a1:8e:67:19:2a:8b:53:a1:42:67:bd:
         62:e0:af:55:c7:32:fe:d5:02:40:a7:66:2c:7d:b6:cc:80:ce:
         96:53:fe:b9:17:73:44:2c:17:58:45:54:20:4c:b6:69:41:ec:
         c0:7a:0a:9d:77:98:17:42:6b:5b:48:b8:07:83:87:c7:c0:da:
         05:0a:2e:98:2c:6b:71:7e:20:29:e1:47:1d:b0:0e:1c:2a:83:
         b9:02:1b:e3:88:b3:2f:8f:86:d9:44:91:86:4b:1f:87:2c:be:
         bb:d0:77:6d:92:bc:b3:60:f2:57:6f:7a:e0:f7:1b:26:d6:a8:
         af:06:92:51:46:ee:64:0b:7d:60:c4:ec:95:63:7c:f6:a8:24:
         4c:c0:67:50:8f:8c:57:0a:b1:76:5e:df:6e:54:5f:74:d0:7d:
         b0:52:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:26 2024 by rpki-client on console-fra.rpki-client.org