Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File:                     SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier:          8yeV2O9teiFrAPKxSv2W2RgXrVBA4AFJ3/11B5DR+Vc=
Subject key identifier:   5F:B0:4C:1C:4E:7E:E5:9B:46:A9:66:E3:DD:D0:FA:13:9A:3D:8A:6A
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer:       /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial:       018F87486890716D55A74C375754ACDB4F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: GExCf-ovI0pIcmOR-pVcOhLsTYw.roa (hash: sMOwmqXHbxDj8/PkNpXEprO3cfyH91K9L+qxOWLRZkI=)
                          2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: Lmx22F+oO/hF16bBd1zZPeCni72tg3lpbWbMC1dOS9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:68:90:71:6d:55:a7:4c:37:57:54:ac:db:4f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=5fb04c1c4e7ee59b46a966e3ddd0fa139a3d8a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:d7:b4:4f:d6:9e:5b:97:d7:8d:c4:e1:04:
                    66:5e:23:71:3d:4a:a2:b1:dc:f2:33:28:a9:b0:d5:
                    08:82:d5:a7:82:36:f3:f8:eb:1f:c3:23:66:e7:45:
                    81:b8:76:96:8e:4f:28:af:e8:fd:fa:5f:d2:bb:35:
                    31:d2:e5:a3:d0:c6:f3:6d:37:5a:e6:88:a4:67:52:
                    1b:16:5c:c1:17:5b:21:77:8b:78:31:d1:81:09:d7:
                    12:fd:b7:53:a7:a6:ca:89:48:f9:02:6c:23:ec:09:
                    d1:94:8b:01:0e:ec:dc:9e:ea:cf:fb:62:51:21:38:
                    42:d5:a9:48:be:c1:48:32:4e:a8:05:95:42:4e:a3:
                    32:0b:86:c5:d3:32:45:b2:cf:da:41:f3:7d:70:13:
                    1f:d5:dd:4b:c4:0d:e0:54:f9:9c:5e:c0:ef:a4:82:
                    b2:1a:b7:bc:21:35:85:0a:86:e1:55:94:d5:6f:a9:
                    22:c6:5b:77:63:fe:5d:34:08:27:52:fc:a9:79:67:
                    f7:6f:d5:ef:aa:b1:4d:59:45:57:03:3a:7c:a5:a3:
                    7a:d3:29:57:47:7f:bd:c9:39:8f:92:4f:5d:5a:34:
                    30:c8:af:6f:b1:03:1c:25:37:40:13:63:13:42:50:
                    0c:56:88:77:37:26:47:54:7e:df:06:07:81:f5:78:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:4C:1C:4E:7E:E5:9B:46:A9:66:E3:DD:D0:FA:13:9A:3D:8A:6A
            X509v3 Authority Key Identifier:
                keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:11:4f:1b:a5:21:8f:46:88:0c:e5:2e:04:79:fc:c3:fb:fd:
         e5:13:60:b3:a1:bb:dc:6e:d3:16:8e:27:53:3b:02:65:3f:2d:
         89:e1:96:53:b6:fb:ac:06:43:87:e5:37:cb:db:9c:74:94:8e:
         63:c9:a7:b5:08:76:59:11:dc:47:e0:33:23:ba:21:dc:f8:2d:
         3f:03:a7:cb:ac:41:57:64:03:59:18:64:4b:99:50:3e:37:46:
         76:0f:3b:0f:1b:37:7b:03:43:70:f3:e6:05:30:a6:5d:b3:76:
         f6:f5:a4:04:8c:55:95:d9:9c:03:37:9d:32:a6:af:eb:98:bc:
         22:83:e8:da:55:a1:68:2e:25:22:ca:73:21:7c:6d:b8:ad:ce:
         93:26:2b:b8:1c:16:f0:e9:04:36:18:96:09:ea:78:f1:5a:be:
         22:19:d3:58:fe:f9:58:4b:f4:80:0e:0f:68:ce:a3:8a:2e:41:
         be:fe:5c:48:a0:3b:3b:6d:20:aa:4d:9f:92:f6:57:05:70:c2:
         6e:69:51:2f:f5:d0:6c:49:06:a0:0d:5e:a4:60:89:77:2c:c9:
         5b:0b:c0:a1:36:aa:36:d9:f2:29:24:61:7f:cf:7b:5b:f0:95:
         03:65:71:b7:ea:1b:5f:b0:e1:ae:71:cd:b6:1b:5e:0d:90:0e:
         f8:99:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:19 2024 by rpki-client on console-fra.rpki-client.org