Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File:                     hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier:          9jE5xEqgjPAL+jqIWWpAAQ+QpxYqoUfuFmuhVzBLtGM=
Subject key identifier:   A5:82:D8:2F:9D:47:32:0B:36:8B:DD:7D:DE:A1:64:D6:B6:F0:D1:78
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer:       /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial:       018F8749AD706AE1030D382800608B444B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number:          0667
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: 72jh0UTBGXFwYjPM4OHckwBZ8vQ.roa (hash: wUujGeovMZP9es46HWZ1PnagLxeVjnTA2P8Xa4R3Fto=)
                          2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: R5lJ21kyluhmRF5RpLYSBJy45O8WtEUMuwtvcC4xy0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ad:70:6a:e1:03:0d:38:28:00:60:8b:44:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=a582d82f9d47320b368bdd7ddea164d6b6f0d178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:96:c5:b9:9f:c9:56:83:62:ee:da:b7:46:
                    da:7a:f5:e3:38:e2:18:e8:f5:c0:05:d2:e6:60:2e:
                    12:02:33:23:50:14:ba:ea:54:2d:4f:61:44:52:16:
                    0e:8c:71:a6:f1:8a:38:9f:7e:12:7e:26:72:fb:9f:
                    84:9c:30:d4:ed:17:25:9b:93:a4:fb:99:0a:fb:7d:
                    c2:ca:25:b2:0d:c5:1e:a7:84:38:54:29:9a:9a:8a:
                    37:e4:a3:81:31:c5:7a:e8:bc:c6:53:e6:3e:b2:37:
                    c6:7d:ec:bd:b9:d9:8d:6f:98:20:22:92:43:9c:81:
                    8e:7b:21:73:0e:9b:ff:11:03:6f:b5:9e:87:ef:f6:
                    65:50:a4:9c:63:7e:77:ce:69:2c:65:8c:7e:f8:55:
                    c2:11:66:6b:df:e7:03:f9:f4:99:9a:df:f8:31:1f:
                    24:49:df:98:09:b7:c3:00:82:95:c5:6f:d9:f8:b1:
                    d7:c5:5b:94:9e:49:b3:62:a3:54:b3:ec:18:dd:49:
                    10:34:b5:f3:ee:7d:ac:88:03:dc:32:24:5d:6d:4d:
                    56:c8:ef:cb:a7:99:b8:2f:d0:2f:c5:29:4b:67:99:
                    6f:a7:cd:79:f7:07:b1:4b:d2:85:9f:91:e7:17:e6:
                    0d:42:67:59:39:5a:b9:f9:11:56:61:4a:7f:e3:16:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:82:D8:2F:9D:47:32:0B:36:8B:DD:7D:DE:A1:64:D6:B6:F0:D1:78
            X509v3 Authority Key Identifier:
                keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:71:c3:35:e5:d5:4e:e2:90:2c:13:1e:7a:91:74:20:b8:
         43:fb:30:d1:8d:9c:70:f4:d5:8d:76:28:6a:4c:6d:3b:37:54:
         2c:5f:7f:5e:b3:ec:81:e9:a0:78:a6:0c:f4:57:3a:e5:19:0f:
         72:04:c5:4e:55:16:f6:20:4f:d1:ca:92:dd:09:a2:ab:a8:5b:
         09:9a:dd:ef:50:0a:33:62:20:3d:95:e4:03:8f:5f:44:cf:34:
         e7:29:c8:de:f3:b0:d5:a9:30:8d:71:f6:48:ec:a7:e0:ff:3f:
         db:e4:0a:32:6a:ea:16:b2:b8:03:b8:f6:e9:27:59:c3:17:04:
         9a:4f:69:80:53:14:f6:5f:23:4e:42:7b:ec:a4:cb:3b:86:20:
         04:28:0a:e8:a3:e2:28:e3:2b:c0:71:79:bf:fa:95:3f:14:f1:
         01:fc:29:e2:2c:c7:24:59:3b:1e:a8:96:3c:7e:74:4d:34:ad:
         a1:2c:17:e8:93:2b:1a:a5:36:21:cd:54:ad:c2:35:07:a6:e4:
         d0:63:8d:5a:47:40:72:14:2f:8b:99:43:26:25:3b:07:aa:16:
         d8:87:b0:fe:18:a8:8b:9a:d0:fb:bb:46:f9:16:d4:0f:bc:e4:
         24:10:71:96:5b:40:eb:41:0a:b2:5b:3e:19:5c:7e:e4:83:7d:
         de:ed:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:13 2024 by rpki-client on console-fra.rpki-client.org