Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File:                     gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier:          3Eq/hvBwF34EmrK0Q7sm3TUAqlHeJ1Zt6oSkBTjxAfs=
Subject key identifier:   EA:F1:64:5C:A8:46:D9:38:93:8D:8F:3A:D4:32:6D:13:16:EC:84:BA
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer:       /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial:       018F874963F2BA7ACC59320384EE05B73EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: f12OmVsyXk2vrKynwf3yZ2THgkVKYFXQjR7WTO9szGI=)
                          2: xrow0-ESHgBYU8kuva2IFWhtyOc.roa (hash: 6xMg8GGyzAidylC0jt25OEWSLFkyx8AVzYkmlr/s38M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:63:f2:ba:7a:cc:59:32:03:84:ee:05:b7:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80043f23936622824111e8865a50002067d95a62
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=eaf1645ca846d938938d8f3ad4326d1316ec84ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:86:7c:f3:36:09:a4:38:25:35:84:4e:22:
                    d0:30:ed:26:7d:c0:81:98:56:51:77:5b:66:08:e8:
                    58:ef:b9:51:99:d2:28:73:f7:7b:3d:9f:43:c8:f5:
                    ff:c7:f1:ef:b3:99:31:10:e1:fd:af:93:34:7e:77:
                    bb:41:c6:ec:93:e6:4b:90:39:07:3b:31:aa:d7:f2:
                    c1:40:78:3b:24:08:2c:6b:67:69:23:ec:e4:ed:0a:
                    cf:6c:b0:7e:ff:85:c7:60:51:74:ee:36:57:4b:71:
                    80:db:06:26:f1:c3:c5:a9:56:ef:95:87:2f:b6:e0:
                    3b:70:0d:0e:82:af:30:50:27:92:4d:2b:f8:2a:34:
                    b4:60:0a:fd:48:99:13:98:0d:59:9d:35:34:fc:d1:
                    33:7e:84:11:96:9a:97:18:07:3f:35:cd:e6:26:2c:
                    4d:fb:1f:34:ec:a6:b3:2b:16:df:40:3e:93:6e:f1:
                    c4:1e:fa:be:e7:74:5d:ef:44:cc:a0:93:7d:f2:67:
                    10:0a:7d:8e:92:3c:2d:a4:9f:e3:38:c8:6c:64:25:
                    28:14:c1:2e:6f:91:ea:bf:7e:45:31:cd:67:00:32:
                    46:f1:8f:7f:a4:95:88:f0:45:9b:1c:b8:dc:6c:81:
                    c5:b9:5a:b9:10:aa:1b:7a:27:97:67:b5:5e:7b:b4:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:64:5C:A8:46:D9:38:93:8D:8F:3A:D4:32:6D:13:16:EC:84:BA
            X509v3 Authority Key Identifier:
                keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:57:f9:48:be:0a:95:8a:59:08:5b:45:97:50:97:69:23:49:
         e9:12:01:4e:0c:b6:1f:19:fb:00:cd:1a:2b:80:01:f8:c2:48:
         4b:61:ed:86:37:f4:83:00:52:d6:99:68:8c:2f:08:f9:f6:07:
         c3:ad:7a:b5:db:0e:44:bf:73:45:c1:a8:0c:03:0f:9f:57:48:
         52:54:81:7d:25:9e:b0:b4:8b:99:f0:1d:5f:62:18:e9:cb:cd:
         ce:df:d5:6d:e3:1c:f6:2d:c1:3f:6f:dc:58:ad:09:3f:9c:46:
         6e:3c:81:0b:31:7a:72:db:35:3a:38:64:2d:da:a7:8d:fd:55:
         14:e1:2a:ce:80:1f:2f:c8:b2:2b:06:82:bc:a4:9b:4a:e6:87:
         a3:c1:c0:4a:f1:3c:59:57:25:1d:c1:dc:b6:14:ea:c2:27:2a:
         8d:03:c7:88:dd:04:74:4c:af:0b:8d:86:c3:9b:b9:6e:32:06:
         33:a0:e6:6f:83:89:0a:69:c6:19:82:a1:42:a7:a1:47:6f:a4:
         35:2c:74:80:23:32:51:99:1b:8a:f4:0a:ad:44:b8:ee:8c:31:
         89:ad:48:c5:92:fe:4b:ed:63:9e:65:61:36:bc:52:1e:79:c0:
         49:2d:04:49:0c:50:a9:c0:b6:49:2e:86:41:66:05:e7:b9:ff:
         a7:22:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:37 2024 by rpki-client on console-fra.rpki-client.org