Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File:                     ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier:          8rE3xBDt4f7yUFiVrsbD0g9dhOKYnH+F0YqS7XJs+kQ=
Subject key identifier:   BB:AB:D1:8D:AF:5B:22:6E:3B:61:1A:EC:41:77:2C:18:9F:D8:28:0D
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer:       /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial:       018F882461A86930934D23E5641E586046ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: 7weK3gN3ufeTxRDesy-CigbgHF4.roa (hash: 6DB06+uJ6z7Fb1LGF2xFFmVf/7wKUIWbjMulS4MPmgc=)
                          2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: VSxRVoGy2qqoKmF8yhHVkLMcPFe6qMuqoXXzN4D8XQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:61:a8:69:30:93:4d:23:e5:64:1e:58:60:46:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=bbabd18daf5b226e3b611aec41772c189fd8280d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:e9:bf:d1:cf:d9:6f:a6:f0:18:cf:2a:6e:
                    8a:ec:55:1d:d1:59:01:4b:53:93:b7:13:49:4f:2a:
                    48:5b:30:41:60:5c:17:08:5c:2d:28:d4:7c:7a:05:
                    2c:3b:64:4e:19:9e:3d:4f:d6:e1:e6:6e:54:18:db:
                    1f:7c:36:06:17:53:11:95:f1:85:fe:01:8e:a0:78:
                    3a:09:b5:e3:d0:6d:13:98:2b:2e:f9:5f:52:14:7c:
                    f2:5b:e8:bc:cb:32:01:45:00:6d:f6:d5:8b:e5:4e:
                    f6:93:fc:0e:22:5d:d7:ef:74:da:b3:3e:e6:a9:ea:
                    5c:03:d5:7d:03:ce:28:fd:09:7e:c8:90:5d:0f:f5:
                    54:7d:fa:60:e8:71:ef:4c:5b:3d:0a:ba:73:97:1f:
                    46:e5:55:2b:fe:53:1a:64:b9:63:3f:a6:53:c6:2a:
                    3c:4c:61:f4:8d:3a:89:0b:44:7a:1d:43:c1:35:23:
                    26:19:ed:2d:ac:5e:8b:8a:27:5c:18:97:f7:2d:27:
                    9c:39:e5:b3:a4:a4:60:f5:fb:21:f0:40:d7:29:bb:
                    0e:69:de:50:3d:37:90:01:8d:12:14:ea:1d:d8:c3:
                    ff:c7:98:a9:21:00:a1:fe:b1:a9:8c:ed:43:f0:87:
                    e2:36:09:4a:59:5a:46:b4:dd:69:7e:69:88:2e:6a:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:D1:8D:AF:5B:22:6E:3B:61:1A:EC:41:77:2C:18:9F:D8:28:0D
            X509v3 Authority Key Identifier:
                keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:32:18:cc:3a:82:48:4d:e2:d4:52:a8:b5:35:d4:2b:b1:
         63:dc:71:df:73:0d:4e:6d:ac:81:23:cc:eb:10:cb:14:a4:c6:
         f9:75:27:20:a8:b3:42:a4:e8:91:27:ca:12:a1:5a:48:81:56:
         5b:0a:48:67:41:72:3f:ac:4a:ae:41:fd:94:da:e6:7d:52:2d:
         5f:ee:12:4a:ee:6b:c7:e1:48:e6:4b:4d:97:f1:cf:89:2e:7a:
         23:43:d9:66:a8:99:9e:ea:1c:24:cd:df:fc:db:21:e0:cf:72:
         e1:4e:9d:69:70:c3:c9:c4:49:fc:46:d5:34:4b:db:44:6d:1e:
         5d:e0:62:81:e7:7d:f8:cd:92:6c:22:90:ca:e5:4a:20:4e:70:
         9a:57:3e:50:9d:6e:14:7f:8e:12:56:34:e2:65:cd:44:d7:77:
         7f:93:a4:c1:8f:60:8e:cc:85:79:d8:9f:39:4a:7e:eb:c9:b4:
         88:4e:ee:90:d1:d8:bf:66:1c:de:37:be:95:c8:a3:f0:63:5d:
         0a:46:30:ce:b6:09:7a:90:81:97:d9:c7:b0:c2:8e:06:03:4a:
         fc:cd:08:09:69:9f:bf:23:5a:f9:fc:8a:7c:ac:dc:dd:4d:1e:
         e3:2e:0f:cc:53:3d:52:13:44:fb:12:cc:6b:e6:53:ce:ea:54:
         40:55:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:17 2024 by rpki-client on console-fra.rpki-client.org