Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File:                     u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier:          /tJ5FWeLUJOktueeN1MPY0rUx9ojjq1Wtbyzg1CUOwI=
Subject key identifier:   B9:F6:29:C5:A8:96:55:43:4E:82:15:A5:10:13:35:A9:6F:7E:8D:7A
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       018F87B639E799A753CA149DACB44E37ABA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: bX64W_nw3K7UOxSGi1PH7E2A9Do.roa (hash: TbYYcmiTvHbWnJltsj7xN2uxBGGy53ILLrI80ioCBg4=)
                          2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: 4CsfyXRyvJNK0MOy/4WFye8kY1LEGirylx+H0p9AXY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:39:e7:99:a7:53:ca:14:9d:ac:b4:4e:37:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=b9f629c5a89655434e8215a5101335a96f7e8d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:c9:1b:81:f8:4f:82:e3:b7:bd:a3:05:88:
                    26:ef:30:25:18:29:6e:41:00:a3:59:a4:f9:7d:0b:
                    25:9c:38:e6:59:e2:c6:48:c9:74:58:c9:44:58:b9:
                    e7:47:47:a6:42:95:68:40:51:79:2e:88:2d:b6:0d:
                    20:f0:72:f7:96:d7:97:c0:e8:32:8a:5a:5f:d0:19:
                    84:30:b3:0c:c2:a3:90:6d:52:77:10:53:7b:11:eb:
                    fd:6e:9b:1c:a4:29:db:fd:cd:14:4d:e8:fc:d6:ec:
                    11:fd:1b:61:4c:29:7b:5f:71:4b:62:40:b6:a4:90:
                    3f:d5:d9:f1:6e:a0:10:a5:f1:b5:f9:f6:d1:01:5b:
                    c7:4b:c7:6b:75:4f:4e:6c:06:8f:1f:c6:49:8b:b6:
                    41:f7:51:fe:07:f0:9e:27:77:a0:22:b7:83:a7:63:
                    31:1b:9c:4b:70:a1:dc:7a:6b:19:b6:b6:5f:eb:b4:
                    ca:4f:5c:24:31:c3:69:54:bc:79:dd:f7:b9:d3:73:
                    c1:0a:75:f1:10:08:b4:c3:9d:ea:cb:2b:27:4b:ea:
                    03:31:9e:2c:11:6c:35:6e:c7:fb:79:61:21:1b:58:
                    78:0b:bb:b8:51:f1:06:16:a1:3b:80:85:70:a0:39:
                    6b:24:6a:81:15:54:65:12:c6:d6:24:d1:ca:48:7d:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F6:29:C5:A8:96:55:43:4E:82:15:A5:10:13:35:A9:6F:7E:8D:7A
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:e9:7c:dd:c7:d5:16:dc:f7:8c:98:0b:c3:75:6f:82:b5:
         0e:3c:f5:73:2c:0d:16:b3:c6:59:a6:7a:40:0d:72:a3:30:45:
         2c:2d:30:8d:48:f0:fd:da:69:f4:30:32:18:aa:99:ef:c8:27:
         b0:1c:56:8a:85:c2:b0:27:55:0c:d7:97:c1:2e:b1:ba:46:91:
         9a:5f:39:93:6d:b6:ae:35:9b:5f:d0:24:43:22:59:5d:80:e6:
         db:07:fd:ec:44:df:0c:52:8f:c2:ef:8f:95:60:67:79:f2:73:
         db:d5:11:c3:d5:28:77:62:52:e5:1c:44:8c:e2:63:07:96:b9:
         fb:37:04:02:de:1e:03:af:23:4c:b2:1c:1f:69:24:b7:7d:41:
         f1:0a:c1:60:04:fa:5f:b3:6b:43:80:d9:6d:98:4d:94:a1:8e:
         af:d5:c3:f3:ef:13:5b:fa:91:1c:9d:19:52:52:69:ee:61:a0:
         ca:6e:62:d4:d8:3f:40:76:6c:8b:c2:01:53:04:06:f9:f7:81:
         85:93:87:24:1c:68:2f:dc:d6:1f:4c:31:d4:8b:35:01:27:93:
         b7:6c:de:18:64:08:28:b4:a7:43:a8:6e:57:93:4c:1c:83:c3:
         f8:83:14:ee:d0:c4:28:9c:b6:7b:35:a1:4d:19:84:b9:49:29:
         e6:ae:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:23 2024 by rpki-client on console-ams.rpki-client.org