Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File:                     XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier:          FloeFbNm/uLCcovX1r2wUoupGjDOUczl670oxLd8yqU=
Subject key identifier:   3C:EB:09:52:A2:68:CB:25:8B:FD:68:73:48:18:FC:E1:23:73:21:46
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer:       /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial:       01905D00902F6A943A819FB8ECB85D28E32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number:          1177
Signing time:             Fri 28 Jun 2024 04:00:36 +0000
Manifest this update:     Fri 28 Jun 2024 04:00:36 +0000
Manifest next update:     Sat 29 Jun 2024 04:00:36 +0000
Files and hashes:         1: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: GwfwHKcA4kiOR/Q86s/VhMf3/x3TYbK38OU2AoCLAls=)
                          2: vpT-aB4KWbBy2ecDEFEikKZHxFA.roa (hash: oCso5g+zlwlxAIJeQgjTq+1YfVn/sB82qiPF3VrtOvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 20:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5d:00:90:2f:6a:94:3a:81:9f:b8:ec:b8:5d:28:e3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
        Validity
            Not Before: Jun 28 04:00:36 2024 GMT
            Not After : Jun 29 04:00:36 2024 GMT
        Subject: CN=3ceb0952a268cb258bfd68734818fce123732146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:56:8c:8a:42:0e:6a:10:43:d8:4e:d3:87:
                    35:57:f7:c1:4c:b9:6b:95:ee:ed:a1:d8:45:ae:81:
                    b2:d4:0c:e8:21:60:6d:73:76:9b:63:a1:b6:c7:59:
                    14:46:87:ca:de:c7:14:ac:9d:fc:aa:68:9c:04:f0:
                    ed:c3:fc:81:2b:f9:2c:7e:7c:91:6d:c4:42:ff:63:
                    9a:65:b9:4e:47:40:15:97:ba:46:3b:0a:a3:ba:e9:
                    0f:cd:25:ec:67:ff:54:69:16:71:fd:04:9b:a8:73:
                    4f:8b:e0:a0:96:73:59:99:38:f1:ce:ac:b7:80:51:
                    63:3d:01:34:00:93:e4:ca:57:96:dd:82:44:ac:a3:
                    e3:96:14:62:8c:85:1b:c2:52:28:7e:b0:e5:62:bc:
                    09:31:80:67:6f:51:d1:ac:d8:ee:53:07:e5:84:a8:
                    8b:6e:13:29:fc:81:1c:cc:54:48:15:7e:ee:51:70:
                    09:b0:cb:79:d6:6c:cd:a1:ff:b3:8a:f3:35:33:1c:
                    08:dc:02:e0:ee:76:68:2b:24:e2:e7:63:cc:a1:11:
                    1b:af:b7:37:02:c7:a1:78:0c:92:87:2f:43:48:7b:
                    96:43:76:24:74:fd:87:0c:16:df:2f:2d:8e:f7:25:
                    87:ee:57:32:30:6b:e0:34:18:f7:f7:12:c4:2d:a8:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:09:52:A2:68:CB:25:8B:FD:68:73:48:18:FC:E1:23:73:21:46
            X509v3 Authority Key Identifier:
                keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:0c:f5:fb:77:7f:94:ed:ff:2c:98:b5:69:1a:fd:8e:b6:
         72:f9:5b:7b:93:48:19:5c:64:29:c7:89:ca:4d:d3:02:cd:b6:
         76:88:e8:f0:c3:4d:41:db:78:13:fd:16:94:9f:f1:f8:b7:00:
         02:4f:e0:b4:bb:4f:ab:fa:86:f0:f3:e4:67:58:a2:55:a0:e4:
         8e:37:ed:65:6b:d9:f3:31:60:43:08:cd:5b:ba:18:14:a8:ad:
         be:77:ae:37:e4:64:6f:aa:d5:e6:b2:f3:c9:0a:c4:bc:8b:18:
         f4:6c:5e:d2:f2:4e:5a:60:0d:bb:61:fc:05:88:76:7e:36:3d:
         9c:b1:20:94:ee:4e:98:95:88:a0:5e:1a:12:c0:57:09:29:c0:
         db:05:f8:6b:bf:45:68:01:30:fd:f8:3f:4c:60:da:a1:8d:5b:
         15:42:88:b1:07:44:66:2f:a6:17:60:0f:dc:cd:af:66:25:71:
         77:fb:e7:1c:b3:c9:cc:2a:ff:98:3f:51:63:f8:2f:c9:2e:cf:
         ba:16:c8:40:11:e0:27:0d:5e:4e:e5:11:f4:c6:52:db:07:3e:
         18:41:dd:d8:62:05:8c:a0:ed:a3:f2:f4:05:c0:83:c5:7d:62:
         d8:e8:04:a7:65:d0:39:b6:3c:4d:8c:c5:e8:2f:62:7f:66:00:
         65:b0:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:06:39 2024 by rpki-client on console-fra.rpki-client.org