Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File:                     a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier:          ujwHf/Enc5HC72tEoPqErob967/dxCGiNNrEnoX0LjI=
Subject key identifier:   0B:DF:D1:3E:C4:BF:E5:FC:B2:F0:74:88:80:F1:06:4B:3F:EE:29:35
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer:       /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial:       018F87EDB418EF4A9489F04A76081A9C7A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 19:00:53 +0000
Manifest this update:     Fri 17 May 2024 19:00:53 +0000
Manifest next update:     Sat 18 May 2024 19:00:53 +0000
Files and hashes:         1: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: thWoasDp++zg2r6JaqOuBnqJp13gSBq99mPAmEy+TcQ=)
                          2: rzdwS5vZTnR3Zs0yfSU2xTzyMiI.roa (hash: xAlGzTvCd6QJe8H6IAB8pXEmGxCDCmSaIAOc6/r4JDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b4:18:ef:4a:94:89:f0:4a:76:08:1a:9c:7a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
        Validity
            Not Before: May 17 19:00:53 2024 GMT
            Not After : May 18 19:00:53 2024 GMT
        Subject: CN=0bdfd13ec4bfe5fcb2f0748880f1064b3fee2935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:29:8a:f0:c0:ff:e1:26:eb:02:47:e2:1c:
                    27:22:37:24:1d:29:40:b8:97:c0:1a:1f:58:2d:4e:
                    f4:bb:aa:8b:39:47:2a:34:95:5f:25:5f:1b:40:8f:
                    a0:b3:9e:b6:65:26:9c:2c:0a:0f:2c:ee:2c:73:ad:
                    b2:61:c5:36:8f:44:7e:86:1c:55:98:78:f4:aa:c4:
                    85:1f:b5:7f:95:1f:5b:78:c3:26:68:80:a0:a0:78:
                    fc:d1:c4:5f:fb:93:cf:95:b4:61:c5:73:22:92:54:
                    03:51:5a:9c:c9:50:23:31:27:63:20:71:ae:c6:b5:
                    f6:41:b3:8f:0b:a1:7d:44:66:70:70:54:b5:82:79:
                    d7:dc:61:ce:58:34:05:a2:2d:16:e8:25:b7:51:e8:
                    31:f1:43:10:16:58:1a:af:ac:9f:da:39:ee:ea:c9:
                    15:d8:12:93:6f:76:40:b3:68:42:76:ad:92:80:12:
                    61:4c:61:b4:58:cb:67:68:6d:df:bc:c3:fd:0d:dd:
                    e7:34:44:29:52:b9:96:52:63:e9:18:40:a3:ed:62:
                    16:7a:4e:a6:b0:98:10:15:ba:6d:6f:a2:27:eb:43:
                    75:52:8d:d1:fb:ea:46:1c:89:e6:ca:b4:06:08:b1:
                    25:40:59:2a:c1:35:30:15:bd:86:c6:f6:0a:cc:6d:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DF:D1:3E:C4:BF:E5:FC:B2:F0:74:88:80:F1:06:4B:3F:EE:29:35
            X509v3 Authority Key Identifier:
                keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:15:35:e9:e6:bf:a1:c9:1e:c4:5c:e8:43:c1:34:4b:8e:
         a7:e9:1b:23:88:ec:0d:a0:61:24:4f:dd:b0:8e:eb:6c:31:96:
         e7:32:ec:e5:c4:10:a2:a8:06:13:76:12:f9:0b:6c:20:42:91:
         af:19:2f:5d:b1:27:20:eb:39:e9:a8:f7:e2:a1:7c:61:ab:6f:
         0f:31:95:ef:33:4e:fb:1a:d0:ce:f4:b7:11:eb:70:fb:35:c8:
         c9:75:77:3c:63:a3:92:1d:92:61:88:73:8e:82:b6:28:e3:3e:
         9f:fe:bf:18:dd:6c:51:5f:6d:7b:e2:bd:5e:d3:84:50:a1:50:
         50:d8:fc:8a:42:37:b7:c1:bf:b3:4d:43:75:f6:1c:30:dd:8c:
         0b:12:20:40:1f:e2:ea:66:38:89:51:3a:53:64:e3:7b:7b:cc:
         6b:29:3c:2b:ff:87:3f:3c:c3:5a:ad:84:5d:eb:47:8a:79:8f:
         53:0e:08:ea:6a:1c:be:29:25:14:87:cc:5a:0b:b0:f1:de:78:
         e7:14:04:1a:07:45:e5:5f:06:9e:78:f8:b8:f7:5c:17:a7:5d:
         22:5a:ce:5e:fa:bc:45:66:2a:ec:45:b8:92:52:5c:95:17:71:
         da:3b:f1:c1:ab:a0:47:94:e6:8c:53:bf:24:5d:ba:f2:8e:43:
         29:2b:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:45 2024 by rpki-client on console-ams.rpki-client.org