Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File:                     Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier:          bkueSK5kgoOhdZ4CKImx87RZrhvGzha4ps/F5D5H7lI=
Subject key identifier:   C5:97:1B:34:28:4E:F5:58:93:8C:22:2E:60:D6:92:A6:39:33:E2:8F
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer:       /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial:       018F89399268888D975CCC4D62BD2B8F9E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:03:22 +0000
Manifest this update:     Sat 18 May 2024 01:03:22 +0000
Manifest next update:     Sun 19 May 2024 01:03:22 +0000
Files and hashes:         1: CyfKJlWtfzN3cnDaJ-KcOAI9saA.roa (hash: qp4OJrcK3KdVfUhZkiOrF99LH4Y6mSKKpAjpgb2jF6s=)
                          2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: R0EqSMfznNRWgZsxtuuxrr9CVRfrwkXeD1UabhzI1G8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:92:68:88:8d:97:5c:cc:4d:62:bd:2b:8f:9e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
        Validity
            Not Before: May 18 01:03:22 2024 GMT
            Not After : May 19 01:03:22 2024 GMT
        Subject: CN=c5971b34284ef558938c222e60d692a63933e28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:69:2e:8b:7f:24:f9:dc:92:f6:fc:38:5d:
                    d5:53:6e:fd:65:9f:cd:fe:d1:d7:79:e3:e0:38:4f:
                    b8:63:9e:a1:47:ca:bb:cf:75:0e:db:c1:48:38:7b:
                    58:a7:b5:ba:f0:e0:93:1f:ef:da:ac:2b:97:e7:96:
                    1b:09:c6:31:5b:2b:5e:4d:25:59:b0:8f:40:62:93:
                    58:8d:48:c1:fa:60:48:aa:0c:0b:d5:4a:56:73:27:
                    58:dc:1d:51:e7:e0:36:34:1b:e1:15:24:ed:6c:e7:
                    24:1c:cc:d9:8e:78:e5:3f:ef:58:e5:1e:6e:92:92:
                    ee:bf:bf:20:c5:ce:90:bc:c5:90:1b:bd:44:22:2f:
                    f2:3b:47:d4:35:64:2d:39:ff:4e:c6:0d:71:04:1f:
                    db:cd:7d:76:d1:ad:b1:2d:76:ea:d6:ef:3f:2d:f9:
                    50:37:b9:a8:d4:0c:6c:2c:51:e1:ca:2c:c5:ac:6f:
                    55:27:f6:58:d9:67:6b:d6:e4:ce:a7:85:94:1b:c5:
                    bb:0d:49:bc:f9:16:71:52:28:25:a6:56:fa:7e:ce:
                    67:a4:3f:f1:23:d0:8b:26:80:bd:16:fb:73:31:99:
                    3d:5f:77:33:1e:df:f0:e8:ea:c3:2e:f6:56:ad:2d:
                    c6:9d:58:01:74:06:09:10:08:5b:c5:91:1c:47:cb:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:1B:34:28:4E:F5:58:93:8C:22:2E:60:D6:92:A6:39:33:E2:8F
            X509v3 Authority Key Identifier:
                keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:b4:49:4e:3a:f1:e0:e9:d4:d1:b6:c3:78:38:65:ee:83:
         a6:62:97:09:00:27:10:66:81:99:14:03:58:a2:97:a0:75:4c:
         37:36:be:9f:63:e5:f8:4a:aa:45:76:bc:5b:c8:f8:3f:c7:b9:
         b1:35:7e:c6:62:98:35:3c:ac:11:71:b9:e8:f9:c6:62:04:e4:
         b9:1b:ec:95:76:30:ff:9b:00:12:c6:8f:7e:f6:77:3c:ef:a7:
         f1:55:26:ba:d0:20:7d:e0:60:23:64:30:4f:bb:b5:71:12:83:
         d5:5b:6b:1b:51:69:b3:59:a7:ae:a8:29:bd:5f:c9:2b:48:c8:
         d7:19:c0:ef:4f:ee:0a:a0:c5:e7:87:2a:9e:8d:32:df:e1:8a:
         ed:51:3e:5e:42:75:65:b2:48:7e:dd:69:cf:4c:56:83:d1:73:
         de:71:94:15:0d:42:26:13:35:1a:47:be:fa:a7:e8:9b:78:d7:
         ab:c1:4c:a9:fc:a2:61:89:ab:4d:4d:26:eb:fb:5b:90:57:11:
         69:fe:60:bb:92:74:c7:70:33:cb:48:2c:40:fa:77:39:a0:d6:
         67:14:d9:9e:07:59:df:b3:d0:6a:ef:96:8c:9b:a1:f4:4c:61:
         b8:ef:84:1f:e7:18:a3:d0:58:2c:7a:69:15:bb:82:15:f7:fd:
         2e:1f:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:53:22 2024 by rpki-client on console-ams.rpki-client.org