Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File:                     rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier:          MkfJh0oOuD+xtpYBewyXYgBNNK8u/47F4GxTAbFkBQs=
Subject key identifier:   E3:B1:D9:3E:36:13:1F:D5:EE:65:64:F4:5B:B1:B0:0D:9D:15:D4:A4
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer:       /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial:       018F87489ED3BE47C753424D8AE17A74C877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:34 +0000
Manifest this update:     Fri 17 May 2024 16:00:34 +0000
Manifest next update:     Sat 18 May 2024 16:00:34 +0000
Files and hashes:         1: 0hULTSnwFV8fFn3HXNrHVRSjans.roa (hash: s8QRjCouLCPo42I2+PMSOPVG2tklusu8cJ9rJGYO5Mg=)
                          2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: 3xykiSLA+93JJ4/0XhN+URuqAejemnqUOCPsz2siNp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9e:d3:be:47:c7:53:42:4d:8a:e1:7a:74:c8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
        Validity
            Not Before: May 17 16:00:34 2024 GMT
            Not After : May 18 16:00:34 2024 GMT
        Subject: CN=e3b1d93e36131fd5ee6564f45bb1b00d9d15d4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:1c:db:6a:17:d3:e9:dd:61:ff:f3:33:55:
                    98:14:83:b2:ac:78:a2:a1:1c:a6:d9:95:df:73:45:
                    77:7c:95:f2:59:a0:88:d6:70:04:b7:b7:61:fb:3a:
                    0e:78:56:c2:5a:7a:ae:61:1b:82:b9:2d:53:c1:ed:
                    dc:2e:26:50:32:01:b5:37:b1:45:5f:7b:40:1e:d6:
                    0d:f6:8d:3d:3d:aa:b4:bc:41:fc:8d:ef:48:16:88:
                    fb:66:f0:47:9a:14:9e:de:c5:d1:9d:7f:f5:41:db:
                    b6:fd:2e:7c:52:18:82:2e:e8:8f:ec:1e:ca:4f:d4:
                    70:1e:fd:01:5f:5e:19:a6:ed:eb:b2:8c:4c:59:04:
                    79:e2:86:f8:64:de:d9:f5:07:fe:cb:98:04:50:7d:
                    62:b7:1d:0f:3e:09:52:df:90:ae:d1:2f:7b:72:d4:
                    e8:07:86:09:35:44:96:c7:18:5e:7c:70:31:42:aa:
                    a3:cf:82:a4:8d:08:4e:4b:1e:09:c4:21:03:0f:f9:
                    3a:4a:f6:5c:a7:37:73:d7:1d:17:20:5e:f7:9c:3d:
                    8d:67:7d:21:b8:6b:94:f5:ae:35:30:8f:de:28:d4:
                    d2:74:53:b3:09:08:5c:56:e4:68:ee:69:f2:5f:1f:
                    a5:d6:18:eb:13:f6:1e:c5:de:a7:38:6a:8a:cc:18:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B1:D9:3E:36:13:1F:D5:EE:65:64:F4:5B:B1:B0:0D:9D:15:D4:A4
            X509v3 Authority Key Identifier:
                keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:34:7d:5d:18:a5:ca:af:d1:73:be:87:74:3f:5a:df:17:
         a4:ea:6e:61:b7:8c:c7:fe:f0:88:4d:4b:a9:c1:b6:f1:3c:e2:
         97:2e:d6:58:f1:02:c8:de:c2:a4:ba:e8:26:1d:1d:e8:ac:65:
         4c:51:a2:d6:35:41:b1:db:f8:5d:e6:1f:a6:c7:7c:ee:65:6b:
         37:11:3f:28:42:55:0b:6f:75:f2:ea:f4:65:5a:56:82:3e:c2:
         b3:36:37:51:cc:7a:43:b3:35:84:ea:0d:9d:b8:df:d3:71:05:
         3b:56:33:5f:ce:44:b9:c5:14:b8:89:28:a1:15:74:16:a2:21:
         e0:ee:19:4c:36:ef:93:40:1b:82:9a:56:e3:0b:70:30:1e:bc:
         9b:ef:09:00:ea:3b:16:9a:f5:5c:31:64:22:ca:12:a9:89:c6:
         39:74:c9:6f:7d:c7:03:44:f5:14:8a:b4:12:ed:dc:e3:1c:a6:
         6c:1b:40:c1:38:bd:dd:08:e5:05:6a:d2:a8:bf:58:70:ed:bd:
         5e:0b:66:61:df:4b:d1:31:63:f0:b6:0b:c5:08:38:1f:01:96:
         91:4c:4e:ff:13:22:c5:8d:4b:dc:17:07:1c:2f:73:e8:28:85:
         78:c5:ef:e1:cf:e2:2a:f4:1d:95:b4:e8:bd:54:72:9e:c3:25:
         53:6b:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:32 2024 by rpki-client on console-fra.rpki-client.org