Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File:                     L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier:          KvCWeZqkSJMHbWyiFZvAVagGxWSJMyptKmgsB2mJ/vc=
Subject key identifier:   08:3B:AD:34:06:4E:DF:FF:3A:72:21:54:A3:E4:96:71:52:ED:58:DE
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer:       /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial:       018F88245AAA6AAE72CF7A35FF9C25ED5CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:34 +0000
Manifest this update:     Fri 17 May 2024 20:00:34 +0000
Manifest next update:     Sat 18 May 2024 20:00:34 +0000
Files and hashes:         1: BM2hlOjMOYuZQvlGCrZi24bmtLc.roa (hash: 6o52l/F5v1Rl8Hxn1VhTzLQ43klZsbSPORZsXhcpPtg=)
                          2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: ydWk/kdHxxYF4Y+mljQD1TljGhaiCj6ygypEJnLSrok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:5a:aa:6a:ae:72:cf:7a:35:ff:9c:25:ed:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
        Validity
            Not Before: May 17 20:00:34 2024 GMT
            Not After : May 18 20:00:34 2024 GMT
        Subject: CN=083bad34064edfff3a722154a3e4967152ed58de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:8a:e3:bc:4a:d3:c6:a8:a2:4c:4e:a3:a7:
                    90:72:fd:a0:77:81:17:46:56:69:9f:29:ae:05:da:
                    3b:3d:ac:fd:91:42:37:7f:51:bb:93:e6:57:c3:23:
                    ee:13:21:62:75:75:70:69:f7:90:a1:0c:f1:6e:77:
                    0c:5e:b0:ab:53:6f:ad:83:1d:25:de:45:9a:b3:26:
                    68:68:ae:51:3d:fe:fd:3b:10:b7:0f:32:ec:84:27:
                    16:aa:35:e5:b4:c5:19:f7:42:b1:51:79:eb:3e:56:
                    03:9f:59:3b:f2:20:4b:39:ce:0e:35:79:5d:35:de:
                    d0:f3:29:1b:89:7c:a2:f5:ed:5b:90:6a:46:df:68:
                    bf:6f:4e:2f:a5:fc:37:f6:e7:76:40:7d:43:dc:a6:
                    63:5b:f9:ad:4e:7a:cd:1a:db:e2:3a:af:a8:76:6c:
                    51:60:a8:74:dc:53:24:cb:02:02:b1:24:a5:65:e7:
                    7e:e1:31:95:6e:a1:4a:3d:0e:0f:dc:de:52:35:e1:
                    d9:9d:aa:75:05:05:8a:9b:00:f9:84:bb:29:89:6b:
                    da:66:75:cb:8a:d6:c0:2f:4c:6e:b8:f1:78:77:08:
                    7e:78:bf:dc:02:e1:6b:de:03:c8:73:cf:37:4c:5d:
                    43:79:5b:f8:6e:94:b6:08:75:df:b2:a7:51:c6:cf:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:AD:34:06:4E:DF:FF:3A:72:21:54:A3:E4:96:71:52:ED:58:DE
            X509v3 Authority Key Identifier:
                keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:e9:b3:cf:85:9e:84:b8:0d:79:01:40:d1:59:14:40:39:
         34:75:f2:96:52:00:9d:ab:c1:15:c6:7c:48:34:41:43:e1:24:
         fb:3e:41:0f:26:a7:44:a2:a9:80:a9:51:2a:9b:41:1a:8b:1e:
         d8:ee:c4:d8:24:65:ac:65:ff:d2:70:85:13:84:2f:d0:75:30:
         54:af:10:2d:33:b7:87:35:53:4f:b7:cb:20:f9:94:7d:78:42:
         af:ab:f6:25:d8:b9:2d:ce:66:04:3e:4a:8a:22:9b:32:bc:81:
         0d:08:c0:77:80:58:8b:2d:02:cf:3c:9b:f7:d8:53:0f:92:60:
         6a:14:e6:db:ac:e4:63:2b:28:f7:a1:8a:70:92:16:53:19:da:
         38:38:24:b9:7d:9d:36:79:e2:e3:36:6a:5f:88:72:f3:aa:6f:
         1b:83:a0:8b:f3:90:e0:d7:50:ee:01:38:2b:e3:b5:7f:2e:2f:
         36:bf:87:75:53:11:05:6c:35:0d:87:b4:c6:90:57:f7:dd:b9:
         a1:30:b8:8b:aa:11:8f:64:b0:be:3b:e4:e9:dc:f7:da:3f:94:
         19:7a:d8:83:24:ee:ff:ff:a5:fc:dd:82:df:ce:21:d3:04:9a:
         da:a7:12:75:df:d8:7f:2f:d0:48:b4:56:07:d1:6f:80:d2:48:
         11:58:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:41 2024 by rpki-client on console-ams.rpki-client.org