Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File:                     b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier:          4KFvAX/c/vQ8NSd72azwopyD64E/7SbRMiZUweikfOE=
Subject key identifier:   3D:24:83:65:DE:A8:17:22:69:7A:7B:C9:57:F2:6F:F3:58:54:55:38
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer:       /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial:       018F874A088C8EAF331DB6A68A2F1AF0E803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: 9J8IIIUf5gbHg2GirykrOAPVPTY.roa (hash: Nhx05aj4Z94KY8CGpaWMUAxXqJLNyEFXODhII4mU9G0=)
                          2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: tDf+GIcKxcUCxl5BYQXL9N55cV/I5gSmMq7m0mELPwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:08:8c:8e:af:33:1d:b6:a6:8a:2f:1a:f0:e8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=3d248365dea81722697a7bc957f26ff358545538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:87:19:98:42:d0:92:b4:44:31:1a:d1:9e:d7:
                    d7:e9:84:61:5d:60:3f:73:4a:66:b1:f5:ab:d3:12:
                    b9:f2:c3:b7:33:87:a6:16:b3:a1:51:a9:1d:04:15:
                    61:48:ee:21:6f:ae:a9:23:77:32:af:78:c8:87:72:
                    5f:09:b6:ea:c1:4b:41:59:94:ec:e3:19:d7:cd:a8:
                    c0:df:c6:b9:51:15:c4:a1:6c:ef:85:30:9a:8e:3b:
                    99:64:a0:f5:71:9c:c6:5c:96:7d:5d:97:06:b3:2a:
                    ab:13:bf:5b:9f:44:4b:7f:db:61:69:0e:03:6e:00:
                    47:c5:4a:9c:49:db:6f:f8:c7:49:2f:f9:19:1d:0d:
                    37:2c:34:a7:71:ae:8e:31:e6:97:df:bf:38:75:24:
                    d8:7b:66:29:3a:ed:91:36:77:84:27:0d:cc:a3:c9:
                    e6:ee:46:a2:86:cd:3b:15:e5:17:d0:7e:9e:6b:6b:
                    fd:9c:df:41:ba:08:f9:c4:f1:b8:11:ce:fd:b4:d7:
                    1d:9d:87:61:fc:e3:39:91:d1:c8:53:46:a1:ab:6f:
                    aa:88:2d:36:69:b5:4f:3b:4f:af:19:f3:b3:90:84:
                    22:47:d3:7a:af:e3:25:28:dd:fb:33:a8:42:af:19:
                    1d:db:82:75:30:47:bf:cd:77:89:4b:3b:40:32:71:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:24:83:65:DE:A8:17:22:69:7A:7B:C9:57:F2:6F:F3:58:54:55:38
            X509v3 Authority Key Identifier:
                keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9e:cd:86:af:87:01:64:c7:94:d0:6b:a7:aa:aa:56:da:f1:
         d7:3c:a6:77:10:be:73:91:fd:a3:92:09:21:b6:f8:a7:da:ad:
         44:c4:ba:87:4f:1c:4c:76:54:a0:f1:05:f4:e5:2d:fd:2a:10:
         65:9f:27:5d:86:2d:eb:c6:16:8b:b1:24:6d:dd:be:3b:f0:f1:
         12:49:c3:60:18:e5:68:d8:a0:22:b8:44:32:a0:31:fe:5f:b6:
         e1:db:47:cf:a8:7c:e9:08:47:59:1e:56:43:0a:7b:15:77:3f:
         9c:b0:9e:97:10:07:a0:92:a2:8b:d2:f6:a1:a1:07:92:b1:b5:
         af:13:95:39:31:ad:1c:60:86:4d:db:7b:42:57:f4:aa:b6:2d:
         65:c6:50:19:89:1d:4b:a0:c9:b5:33:1a:8e:91:37:35:3d:d6:
         14:20:e9:73:77:3b:91:13:a9:c4:08:75:b5:d2:cd:d2:ac:fe:
         29:b7:8a:42:c3:86:17:0a:35:bd:95:c4:92:d6:7f:49:38:f5:
         ac:d4:4d:76:c5:95:72:34:30:32:01:df:56:5f:3d:8a:d2:ab:
         29:88:f5:1c:d5:47:d9:a1:c1:3d:42:a3:6d:80:28:86:a1:9e:
         c2:07:2b:ab:25:bb:e4:a9:20:0c:20:61:f1:3e:3f:5b:7e:05:
         a9:dc:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:29 2024 by rpki-client on console-fra.rpki-client.org