Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File:                     SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier:          /lbAkQQRZ4TymMwYaImUGU3rwh7q0pTRa13p18tMUIo=
Subject key identifier:   8D:45:BC:78:53:1B:A1:08:59:4B:F1:B0:93:48:EF:9C:47:A5:25:8B
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer:       /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial:       018F86A3E379D0EB4A592FDFC033D76ED44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 13:00:38 +0000
Manifest this update:     Fri 17 May 2024 13:00:38 +0000
Manifest next update:     Sat 18 May 2024 13:00:38 +0000
Files and hashes:         1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: hiev5LAnt14PQMIeFDRgujc9bEZP9WbJIe/inPoUs9E=)
                          2: T9sK9Mvt--GzbL2GfwxFvOSy1N4.roa (hash: Y1ECemc8o0Gza7WQNVFEHnxMH4iKDnWiDgkSRZz783w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e3:79:d0:eb:4a:59:2f:df:c0:33:d7:6e:d4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
        Validity
            Not Before: May 17 13:00:38 2024 GMT
            Not After : May 18 13:00:38 2024 GMT
        Subject: CN=8d45bc78531ba108594bf1b09348ef9c47a5258b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:36:b9:4d:a7:b6:1b:0a:cd:70:a1:ed:99:
                    eb:88:6a:d5:b1:10:86:15:20:1d:66:21:93:11:7e:
                    1e:07:77:fe:76:32:3e:26:e4:6b:d8:a8:c3:06:0f:
                    7c:24:f3:33:f4:b9:cb:d4:a1:88:f5:3d:07:40:69:
                    3f:e4:64:06:c3:94:43:1f:ca:fc:84:cd:fa:76:fc:
                    02:00:6f:a7:06:df:44:75:b2:bd:4a:39:b1:28:da:
                    60:e4:79:34:3d:87:0c:18:8e:e6:fd:7b:7f:fa:b1:
                    85:ff:53:00:91:56:2f:0b:79:0b:0a:05:f0:40:3e:
                    24:f3:54:91:71:5c:e1:c7:1b:57:fa:cd:e7:1e:ac:
                    b9:6a:bc:4b:7d:05:a7:6e:9c:3c:2c:3b:d6:d2:9e:
                    10:96:34:c2:46:00:00:2c:0f:e9:1f:3e:ca:89:b0:
                    22:2c:d3:47:a4:e4:bd:3c:99:dc:eb:c1:d0:4c:ed:
                    2b:fd:a9:91:cf:28:d4:8f:d7:8b:a6:4f:8e:f8:ce:
                    0a:8f:d6:69:26:f5:8a:88:6b:26:06:45:1f:31:b4:
                    e2:84:3d:17:62:fb:f2:58:d5:4e:05:ce:59:c6:23:
                    ad:46:a7:7b:a5:9d:60:09:5d:b3:ec:ce:da:34:ea:
                    48:5a:5d:86:ba:a0:de:15:c0:1a:f6:f5:93:89:6a:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:BC:78:53:1B:A1:08:59:4B:F1:B0:93:48:EF:9C:47:A5:25:8B
            X509v3 Authority Key Identifier:
                keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:74:c1:60:18:20:17:2f:8b:2f:33:72:25:a3:59:54:cf:d6:
         28:ad:61:2c:91:61:26:fa:8c:42:e9:17:42:b3:3f:48:b4:80:
         b3:93:23:fc:65:53:b3:d2:3c:e4:bd:f4:19:9d:1c:bf:15:98:
         cb:9a:f2:a2:75:6b:34:d5:9a:3c:87:32:03:c8:a6:ef:be:f3:
         94:d7:8e:bc:5d:5b:63:de:b4:11:c5:30:d4:bc:f1:52:98:9c:
         06:6b:6e:af:e0:ad:dc:f2:ee:e3:fb:80:a0:08:93:f4:7c:9c:
         45:51:60:87:67:3b:f5:11:31:f4:bd:af:1a:86:05:7b:79:6f:
         d1:00:92:d4:ff:04:20:51:a5:76:70:93:b2:8d:f7:f1:c0:32:
         4a:6f:95:92:4c:54:a2:f1:71:ff:10:96:5f:f0:b1:ba:02:68:
         eb:7a:e0:02:b2:3c:02:b9:67:94:b4:bc:22:54:06:1c:5e:ac:
         41:24:b5:8f:b9:13:0b:d6:bd:a5:95:e9:a8:68:48:9a:07:63:
         d5:82:32:3e:c6:46:77:cb:b7:82:ba:13:03:08:29:5f:86:9d:
         89:d8:e0:b0:35:0b:45:fd:8c:6f:22:5a:b6:50:14:a3:04:ff:
         b4:c9:ab:c0:33:94:9f:53:a7:ec:9f:53:81:83:ea:29:a6:e9:
         41:03:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:03:50 2024 by rpki-client on console-fra.rpki-client.org