Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File:                     RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier:          CSSjCIeAtjACeF+qO2Tc89sfJQ8LB2i3wb6iC3GVB1I=
Subject key identifier:   13:DB:79:DA:FB:2F:46:6A:56:1D:32:F6:2D:EE:A4:9B:77:12:EF:BE
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer:       /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial:       018F88247D9AD8B1AC2262A4966C50B2906E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number:          0523
Signing time:             Fri 17 May 2024 20:00:43 +0000
Manifest this update:     Fri 17 May 2024 20:00:43 +0000
Manifest next update:     Sat 18 May 2024 20:00:43 +0000
Files and hashes:         1: 11pTaKQuECQPd9ZWJX6lAcBuLQQ.roa (hash: F6bHSLG0rAHnSAQ2a355m4PDwHvSnvbxRkbXbPp35hA=)
                          2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: uVEwxjDJ0VfuxmnY+srOImhR5al4+4pB8U/4R+ZEsic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:7d:9a:d8:b1:ac:22:62:a4:96:6c:50:b2:90:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
        Validity
            Not Before: May 17 20:00:43 2024 GMT
            Not After : May 18 20:00:43 2024 GMT
        Subject: CN=13db79dafb2f466a561d32f62deea49b7712efbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:4a:1f:af:14:e9:9b:6c:d4:52:51:7f:36:
                    99:51:54:5c:31:3b:e9:5c:f1:3e:69:17:98:d6:8a:
                    9a:2a:d9:70:c5:b7:a3:c9:b9:11:1c:97:2c:31:37:
                    b9:2e:c9:5e:d8:9b:a3:39:a5:f8:0d:72:ab:bb:36:
                    7e:cb:69:68:20:2b:68:d0:9b:7f:77:d9:a1:ce:43:
                    16:1e:90:b1:69:23:59:3a:5e:49:38:2e:85:2f:45:
                    fc:44:d9:ae:c1:b5:4e:62:68:ca:7a:5b:ef:fe:61:
                    e5:05:e2:a4:94:86:b5:3a:0e:6a:5b:6f:be:84:b9:
                    6c:0d:85:53:58:6c:6b:43:fc:62:16:b1:fb:52:1c:
                    54:c4:e7:83:ac:89:92:60:ee:38:6a:fe:22:61:e2:
                    80:02:2f:5c:ac:08:36:59:17:aa:97:8a:1d:2f:6a:
                    26:7d:06:e4:e3:3d:09:9e:6b:54:a4:4f:1f:26:02:
                    26:28:24:c3:8a:1a:a1:3b:d5:51:50:6c:49:22:06:
                    1a:7f:67:e8:3d:99:9f:03:1f:e8:ec:c7:40:db:4a:
                    83:be:13:31:5b:6b:84:af:e0:e8:76:f8:69:f6:f5:
                    5a:f7:20:91:3a:f9:8f:50:b4:60:54:cf:22:ff:16:
                    1e:05:e2:67:90:fb:7e:4d:54:2e:05:28:fb:cb:74:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DB:79:DA:FB:2F:46:6A:56:1D:32:F6:2D:EE:A4:9B:77:12:EF:BE
            X509v3 Authority Key Identifier:
                keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6b:20:02:e4:73:6e:23:c0:4b:6a:89:60:1d:c5:ec:c3:d5:
         aa:73:c2:0d:08:fa:6f:e9:54:97:4f:d1:62:f4:b9:1b:b0:fe:
         1c:5e:a3:a3:56:9e:d0:95:6c:bd:5a:76:83:29:81:59:ff:75:
         53:fc:e3:75:f1:80:68:85:43:5c:83:76:8d:30:96:8b:38:74:
         e6:54:de:c4:e7:70:4a:09:31:d6:54:d0:e6:ae:19:fc:cb:5a:
         8e:f8:e0:a5:68:d7:5c:a2:f3:97:9c:76:6b:51:6a:be:67:f0:
         ff:9a:14:ff:9e:f8:b6:08:24:88:d9:9b:e5:c9:7c:5e:0f:3b:
         fe:35:65:af:20:b9:92:08:1a:99:3d:56:9c:1b:ee:64:d2:ec:
         35:ed:86:b4:5c:d3:f1:4b:ee:92:0b:0f:04:3d:aa:a6:19:db:
         4d:40:b1:fc:02:bf:74:86:d0:9f:3f:51:c4:11:05:a2:af:b8:
         d4:cd:1b:b6:cb:f9:3f:a4:14:33:0c:70:fa:78:54:d1:55:f7:
         32:14:58:bd:8b:08:bd:21:83:70:f1:57:47:c1:76:f7:d8:15:
         d7:1e:56:c2:e2:7c:96:90:8a:03:b6:ae:2c:c6:ef:e8:65:e9:
         5d:fe:37:3e:c2:48:47:fa:a1:a1:8d:e9:c6:07:3b:f5:b1:61:
         1f:66:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:09 2024 by rpki-client on console-ams.rpki-client.org