Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File:                     bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier:          YAGaNByKLoD7k32I5ichIyRsJ0b63xS9QLOlfHVasbk=
Subject key identifier:   6D:1B:74:F2:35:B2:81:CC:DE:26:C0:F4:E4:B3:12:47:F6:48:3C:78
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer:       /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial:       018F874B1EFE542235DC9AE86F74D4F8681F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: rM10IG+jbjMBz1BOAxneVahsY4k5ctc7ILMi5FQNzt4=)
                          2: j38aB9YsZ1oAsxL0gfaw50vGATQ.roa (hash: WPHSV59T6Lu3apfyT3Bb1s5PRcyNY32p1UeU4hw4sk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1e:fe:54:22:35:dc:9a:e8:6f:74:d4:f8:68:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=6d1b74f235b281ccde26c0f4e4b31247f6483c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dc:8d:2d:d7:54:4b:0e:15:ef:b9:ac:b0:2f:
                    a8:0e:d5:92:e5:51:11:07:da:20:1b:66:f1:f9:e0:
                    23:21:3c:f3:3f:23:9f:1f:99:c9:fe:5d:61:d6:2a:
                    27:34:aa:b2:eb:9c:29:4d:1b:1e:a0:c9:ee:e4:85:
                    f4:70:89:f2:15:ec:5b:42:22:85:d7:d6:e2:3f:59:
                    7f:cc:d3:9f:f3:3c:6e:bf:61:1b:66:38:ca:15:bc:
                    cb:88:ec:c5:ca:98:13:0e:13:9f:0d:6c:d9:1d:d7:
                    af:5b:5e:02:d1:f7:23:b9:fe:f1:07:20:d4:8e:45:
                    a6:f6:2b:9c:36:7c:b5:a5:b0:a6:3a:2a:4e:b6:95:
                    56:f8:34:e7:55:ae:14:ea:07:e7:c5:c0:9d:57:63:
                    fe:24:f7:3e:c7:80:93:4a:34:eb:b7:a6:f5:35:76:
                    58:bd:69:d8:35:5f:55:21:9c:70:31:a7:f3:cb:5e:
                    ec:31:05:fa:6d:63:15:bd:31:78:7e:4e:e3:aa:78:
                    eb:19:bf:0a:35:2c:5d:40:f4:11:f4:32:1f:68:a7:
                    73:f1:8c:09:8d:73:05:44:bd:17:7f:67:15:b7:c9:
                    d1:f4:fd:db:cc:7f:38:6e:21:56:da:3d:f4:f1:01:
                    cd:29:03:53:7a:67:81:4e:05:e5:7b:35:4a:f7:05:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:74:F2:35:B2:81:CC:DE:26:C0:F4:E4:B3:12:47:F6:48:3C:78
            X509v3 Authority Key Identifier:
                keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:56:1b:21:fe:48:2d:66:0c:8f:26:d9:04:c1:bc:80:7c:
         46:c1:80:c8:9a:45:83:51:43:99:44:82:ec:bf:c5:e2:44:13:
         e4:1c:21:57:b2:98:67:1b:d5:0a:44:57:7a:c3:1b:b9:b6:62:
         6c:20:13:2f:dc:df:35:a2:6f:64:6e:b3:ff:1a:51:2c:b8:7f:
         d4:16:f8:2a:a1:12:7f:e0:59:89:b9:22:e0:07:98:34:4c:17:
         ff:31:fb:be:b2:e0:1c:31:07:96:4f:e1:05:88:ca:81:7c:12:
         eb:10:3c:ac:28:d9:67:4f:51:31:23:bf:d1:12:e8:c3:99:03:
         27:c8:f8:10:0a:73:4b:58:73:12:8b:60:8f:d6:77:e7:cc:f8:
         c2:52:de:35:ff:f8:7a:bf:05:e0:95:0b:c6:78:39:7b:d2:0a:
         41:24:57:08:4b:3a:84:95:0b:33:73:b9:24:43:9e:52:23:58:
         76:f2:66:1a:2a:60:9d:ad:31:de:2c:e2:4a:9e:59:64:f2:07:
         a6:d3:31:16:7d:af:16:39:ca:73:4b:50:37:bf:bd:48:da:bf:
         49:e4:71:7a:93:52:70:4b:17:e5:29:cd:cb:13:da:8d:db:46:
         b4:4c:97:55:e0:69:35:93:06:25:69:58:5c:1a:40:10:9f:47:
         10:44:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:25 2024 by rpki-client on console-fra.rpki-client.org