Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File:                     lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier:          1EFaOdYpRrhQNEp/IkTC+U9FPrQWBmLWsLaNdXJLnno=
Subject key identifier:   43:BD:EB:D6:6C:24:E6:65:6F:D5:79:45:90:B3:75:61:D3:22:7F:58
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer:       /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial:       018F87497A29AFCB050F1328310B8BBADF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: ixho2Sm4nbd0nj70c0qsODTp3Ks.roa (hash: XqTZh1gU2tVi0duiTREybSpMW84A2450xA4twjck6Lk=)
                          2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: Ys+ZxoYChRU842lMxRXWjJdOCN0fQ2qwHL5Bty/tCos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7a:29:af:cb:05:0f:13:28:31:0b:8b:ba:df:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=43bdebd66c24e6656fd5794590b37561d3227f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:ce:3d:50:06:dc:02:38:60:89:01:0e:c8:
                    be:1d:c9:0d:f9:e3:3d:64:e0:12:94:58:91:7b:b3:
                    fd:01:60:ae:f4:80:a2:8c:e8:1e:f5:a5:38:d4:fb:
                    3a:36:aa:f4:f3:ed:c7:61:e4:22:87:f4:42:8e:50:
                    04:57:f7:d5:41:ab:08:b6:4e:6e:3a:0d:bc:8f:f3:
                    c5:d3:c8:08:54:d1:2a:5d:e2:51:87:94:45:40:c3:
                    31:75:3a:28:36:ed:c0:d2:0c:92:9d:12:e4:17:b3:
                    03:2d:0f:53:3f:f8:81:07:ad:9c:17:79:03:3c:d0:
                    37:93:00:86:53:9a:3e:cb:a7:37:f1:41:d4:18:1c:
                    7f:c8:d8:39:c3:a5:52:00:4f:a5:d2:03:10:7e:66:
                    fe:f2:e8:3c:22:f1:b1:e1:50:5e:62:ca:58:f4:62:
                    cd:5e:7d:b2:a3:cd:d9:67:59:0a:31:26:6a:51:bd:
                    49:4b:ab:ef:31:aa:ea:25:50:8c:ad:32:7f:d1:59:
                    29:df:e6:1d:bf:95:73:6b:2e:4e:a8:38:f2:1b:26:
                    80:93:45:22:d3:6d:bf:67:ed:a3:86:8b:1b:4b:4a:
                    c7:72:f7:32:9a:f9:26:bd:a7:8b:1c:15:3a:73:09:
                    26:c9:d1:b2:9d:ea:b2:35:51:d5:1c:14:6e:83:0a:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:EB:D6:6C:24:E6:65:6F:D5:79:45:90:B3:75:61:D3:22:7F:58
            X509v3 Authority Key Identifier:
                keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:a1:c3:9c:9a:82:3a:a6:cc:7f:8a:3f:0d:05:c5:9e:2c:
         6a:28:8a:b3:8b:a3:ef:c8:bf:5c:91:05:ad:e6:91:33:8f:58:
         23:41:f6:bc:d5:e9:78:e7:2a:0e:75:5f:e5:93:89:0b:1f:c2:
         17:aa:1e:81:2d:f8:b1:c0:b4:aa:27:1f:6d:81:34:34:66:5e:
         63:bb:dd:83:66:66:f6:e4:47:f4:d7:e5:3b:23:94:84:77:1b:
         c8:8d:21:b2:29:cc:ec:8b:c9:5f:3a:1b:63:99:19:19:6f:fc:
         52:71:bb:c3:f5:0d:66:67:91:bd:1b:1e:63:81:38:97:b1:0b:
         22:b0:49:ef:e3:8a:ea:df:15:d6:58:30:8e:a0:5b:c6:0f:ea:
         64:74:5c:c6:eb:87:99:08:96:0a:8f:32:3b:e5:fe:79:67:f4:
         5e:e5:9c:67:58:7d:d4:cb:fb:ee:ad:b7:fb:ec:dc:56:91:75:
         3e:42:31:0b:45:d2:67:30:39:6d:6b:da:51:fc:23:79:6e:42:
         30:b8:9d:31:fa:5a:49:53:63:50:8f:3b:78:77:f5:fd:ac:12:
         76:30:bf:aa:2f:82:ee:80:ed:f3:fc:c8:dc:72:b0:e6:65:a4:
         40:71:79:dd:aa:2b:cb:cd:8b:cc:0f:bb:7b:bf:41:f4:d7:00:
         28:1d:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:00 2024 by rpki-client on console-fra.rpki-client.org