Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          rVGatnrNNqI3kNeKN70/Tdq+gmU6mk3YUpjWbjpQ3ko=
Subject key identifier:   F1:6E:3B:50:67:0F:2E:EA:73:61:B0:08:3A:43:E7:3B:F2:10:F9:7D
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       018F87B6CEAFBA63DAE80BF0113ECE79CA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: Keir4GQt_xK2AMSqC5Gty8KlRPQ.roa (hash: 9ofOIAEcRqd+tVSQFgghpabhzWnyPNjBi8UjGqzQCxE=)
                          2: XxvfJmTkWtmlpvaOkZae8cXP4cA.roa (hash: tEbtSxoBGzvascIxCqmb8Ve+uQX7g8UXpGVLNYyliGo=)
                          3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: uFhvb/hQu1tvAqfwHTHrmSArKhu/Aj9cWZG4uWU4SZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ce:af:ba:63:da:e8:0b:f0:11:3e:ce:79:ca:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=f16e3b50670f2eea7361b0083a43e73bf210f97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:99:9d:23:b2:5d:f4:c3:3c:17:d3:44:e5:
                    00:36:ee:44:d5:75:33:20:c9:b7:db:af:48:ff:a7:
                    d7:1e:51:cf:64:66:8f:1f:bc:25:f0:7f:a2:df:89:
                    a8:af:20:1d:81:d6:c7:a4:92:45:8e:e3:c3:ed:8f:
                    ba:dc:19:cc:60:a6:f3:0f:53:95:82:09:c6:91:49:
                    ae:0f:76:dd:a0:5a:14:ea:31:65:a5:2e:8d:f9:0c:
                    f9:1e:b8:2f:7d:78:a2:24:b7:09:45:58:0f:28:a3:
                    cc:9b:05:12:dc:be:dd:48:c3:c0:5d:b3:51:f1:6b:
                    d3:1e:c5:80:dc:6a:f3:44:52:31:ee:6c:ac:12:14:
                    cb:b7:41:1a:57:c3:f7:61:9c:f5:37:f8:e0:90:f1:
                    4c:20:f3:0c:47:f6:9e:54:24:68:73:82:79:ca:92:
                    ba:73:af:63:e0:1b:4d:03:12:57:b6:a5:0a:47:98:
                    2a:c4:63:bb:63:ed:13:6e:3c:39:f3:43:8c:a3:c9:
                    31:46:a9:8c:f7:4a:22:16:df:7c:8f:ce:f0:76:5b:
                    33:b0:c7:18:ca:38:8f:60:0e:1f:17:fd:d9:05:c6:
                    ab:32:aa:e8:51:1a:fd:7d:3e:b3:48:86:99:85:c5:
                    b0:82:1c:4f:44:52:a3:41:02:bf:ed:62:de:c7:47:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:3B:50:67:0F:2E:EA:73:61:B0:08:3A:43:E7:3B:F2:10:F9:7D
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:3e:90:a0:c7:83:cf:08:2f:4f:03:ee:bb:6b:58:5b:44:
         62:72:58:ad:3f:2b:a6:c6:d7:04:24:35:67:04:c7:cd:95:5e:
         62:0c:c9:82:b7:6c:8a:b6:f5:ec:8a:18:05:39:98:53:92:4a:
         c7:4a:51:57:24:94:2a:cc:9c:f2:d8:54:9f:b6:29:6c:0e:7d:
         98:51:6c:2e:18:fc:6d:e5:fd:35:e6:1f:46:80:da:28:95:8d:
         2f:3c:2c:0b:77:5f:f2:6c:03:79:ef:d4:21:bf:00:c2:88:89:
         7b:2f:ca:60:d6:c8:ca:79:cb:67:8c:87:17:a5:3a:ad:eb:dc:
         77:be:eb:37:4e:a9:aa:26:76:6d:66:73:8f:03:1a:fd:b5:2f:
         ae:3a:38:bc:3d:9d:15:02:ce:eb:97:75:da:f0:8a:6b:2f:e6:
         d4:c8:b6:44:35:f3:f0:21:3d:f1:d2:82:99:3c:c6:54:86:81:
         5d:1e:63:ef:ae:de:ce:1d:22:77:9f:ca:f2:23:6b:7a:cb:a9:
         a5:8d:fc:cb:66:be:90:a3:ec:94:71:bc:ca:01:93:b0:fe:d7:
         7b:de:98:24:cf:73:69:67:73:ff:2e:96:69:82:0e:32:01:c4:
         fb:3a:17:9d:d0:b9:9c:3d:b1:88:b8:6e:6b:6a:3a:4e:d4:69:
         49:cd:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:23:28 2024 by rpki-client on console-fra.rpki-client.org