Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File:                     b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier:          2aaRNphXwM3xzQkZMAdi94HQy1tt87uRK7q48/gvEPo=
Subject key identifier:   04:45:85:CD:89:10:C4:87:B1:59:E6:BB:7B:DD:99:AF:8C:D4:62:07
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer:       /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial:       018F885B4871394C9D485BB99A575AEBB4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: BE/5Ze5eL5PTY32bF8/KUuUClP2sbf0gftRsg2jnqeI=)
                          2: rz3SXWeko3RS78sSXk2HPCUyYBY.roa (hash: 6XQcrMWqxW8IDVD+5VBV6fOKJjIPnlirqifnnPbSVaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:48:71:39:4c:9d:48:5b:b9:9a:57:5a:eb:b4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=044585cd8910c487b159e6bb7bdd99af8cd46207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:fc:30:91:50:66:e2:f0:0d:1a:8d:94:33:
                    04:75:27:e9:65:66:21:22:14:8b:7e:7d:33:96:60:
                    e4:57:50:24:d7:df:2e:3e:a7:ed:32:fe:79:d2:dd:
                    42:16:48:05:87:43:34:c3:29:78:2d:39:73:79:32:
                    01:cd:0d:90:94:ae:b7:73:93:ed:96:56:bf:f9:9e:
                    73:02:33:f7:8f:2b:cb:a1:ed:e1:75:a6:ba:47:24:
                    3a:90:30:ce:01:fe:b1:c5:88:e9:52:87:09:44:e1:
                    93:92:3f:35:8d:de:f3:21:0c:51:52:89:70:6b:bc:
                    88:20:d9:e4:09:74:c4:06:4c:34:79:e5:0b:dc:91:
                    a1:05:46:bb:be:96:c4:cd:2c:aa:fa:fa:4f:94:26:
                    8a:9e:9d:93:ba:79:dd:e7:07:70:0c:b4:44:45:0c:
                    f6:11:e3:3b:7d:fa:fa:22:e0:a7:a8:4e:23:ef:25:
                    e4:66:f5:91:1c:2a:0a:1b:1e:75:78:f7:97:a8:e8:
                    4b:e0:f2:40:a1:ad:50:0a:2c:66:0c:9c:31:0e:30:
                    1a:3c:d3:e6:39:a1:33:d4:46:16:6e:cb:7c:da:62:
                    49:bf:33:ba:82:4c:88:6d:58:74:b1:a8:f4:2a:47:
                    a6:c4:71:d7:0d:39:10:b4:2b:96:39:27:16:d5:0d:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:85:CD:89:10:C4:87:B1:59:E6:BB:7B:DD:99:AF:8C:D4:62:07
            X509v3 Authority Key Identifier:
                keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:74:dc:58:ae:55:0b:82:8c:81:b9:77:d6:4a:b2:96:81:
         8c:84:5c:3f:a4:4f:cc:b6:9d:5a:2d:a7:b0:6d:37:60:72:f2:
         1c:7c:67:4f:8b:ad:6c:df:d6:b7:40:52:33:3a:3b:27:df:f7:
         ba:a0:f6:c9:c3:98:c4:03:a2:39:01:75:b3:47:32:75:03:ff:
         11:1d:9e:72:7f:2d:df:9a:a3:fb:28:8b:2b:47:43:e1:4d:53:
         9e:b4:c8:17:c6:11:f4:09:02:40:bf:99:a7:60:1d:e6:97:d8:
         19:76:2d:4f:1a:37:f4:94:da:82:23:c9:98:cd:83:16:53:4e:
         85:8f:14:e2:f9:f3:71:5e:71:2f:39:0a:47:96:94:42:47:1b:
         76:01:5e:6d:f9:75:fe:97:01:b8:ce:f4:53:09:23:7b:8f:4f:
         6c:45:d7:3f:89:3c:d1:ee:63:22:d8:0a:e7:61:f9:7b:53:09:
         cd:3e:19:d7:fe:7d:d9:09:85:fd:d2:9e:5a:d8:19:7c:b0:05:
         a8:67:b8:3a:26:01:34:d0:82:72:ed:08:e9:72:be:9c:d4:ad:
         39:56:62:51:83:e4:a7:62:78:bb:25:0a:e1:3f:49:08:d2:46:
         8d:30:f2:8f:bd:d6:a3:5c:03:3c:b3:ad:87:c0:7e:44:47:4a:
         32:b1:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:03 2024 by rpki-client on console-fra.rpki-client.org