Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File:                     cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier:          gOXGHir1Mxz536rN016EJWliT+z7Kb+svUo+YvSXyIQ=
Subject key identifier:   2B:19:22:AF:69:FB:36:10:B2:FD:1D:57:56:FD:67:53:D3:D1:19:19
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer:       /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial:       018F8748E831C0A235B8F015DB7E571021AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:53 +0000
Manifest this update:     Fri 17 May 2024 16:00:53 +0000
Manifest next update:     Sat 18 May 2024 16:00:53 +0000
Files and hashes:         1: 5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa (hash: r5XUfzzHcur/gnxXxGhTGluWLHJHqVgpbyQJEnNA4VE=)
                          2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: I9gNScGydaZPYKxm9KcQQC7iz2hgJi1SwrCZD/gN0E0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e8:31:c0:a2:35:b8:f0:15:db:7e:57:10:21:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
        Validity
            Not Before: May 17 16:00:53 2024 GMT
            Not After : May 18 16:00:53 2024 GMT
        Subject: CN=2b1922af69fb3610b2fd1d5756fd6753d3d11919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:ea:c4:45:5a:18:27:38:81:6e:c8:6c:c5:
                    7c:02:08:1f:c1:58:1a:32:38:1e:3b:dd:bb:87:71:
                    8c:2a:c4:45:4b:17:47:df:b0:86:f4:cb:b9:f3:cf:
                    9b:5b:5e:b5:e2:bd:39:55:5e:40:f0:f3:7c:c6:33:
                    3c:e6:8d:e8:b2:b3:93:53:15:67:b0:f1:b8:91:37:
                    1c:f2:0d:83:61:e1:27:79:cb:6c:00:b1:3f:2b:f3:
                    e9:09:26:c8:37:f1:e5:e8:3e:2b:68:28:ff:ac:2b:
                    0f:c6:aa:60:78:5b:af:84:07:c6:93:66:46:a5:0e:
                    9d:6a:c5:1e:78:a6:d9:0d:a3:14:5d:eb:50:05:7d:
                    72:ff:8c:ec:59:c1:75:a5:14:24:65:32:20:06:61:
                    43:9d:76:9f:cf:0d:3c:91:09:46:d3:1a:bf:78:65:
                    8e:cc:a6:31:63:0f:26:6e:7b:c3:5a:63:1f:1c:8a:
                    16:63:2b:dc:ea:e8:01:fa:d6:e5:24:5e:5a:e5:34:
                    8c:04:9f:3d:df:3a:86:dc:ed:16:b6:cf:77:6a:c3:
                    fd:0c:fc:13:61:bb:10:cc:12:58:63:00:21:29:a9:
                    06:ea:6d:09:a9:92:b6:03:10:79:76:7a:09:d6:77:
                    06:7e:5d:6a:04:11:30:bc:8c:26:cb:30:df:51:26:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:22:AF:69:FB:36:10:B2:FD:1D:57:56:FD:67:53:D3:D1:19:19
            X509v3 Authority Key Identifier:
                keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:0d:24:47:05:60:ed:c1:3d:93:36:3c:66:5f:f7:ad:e2:
         a1:f3:1d:a1:e6:ff:b5:6a:c1:47:7b:8a:bc:15:f4:41:99:8e:
         c9:3a:88:59:4a:be:21:d4:95:1f:02:99:e6:3a:68:28:8a:b6:
         36:13:8e:d5:12:16:dd:3a:fc:18:20:ab:72:b4:84:ce:c3:8e:
         e0:d4:8e:63:a7:4a:4f:87:ac:c0:bf:cf:1f:c4:d6:ad:7f:5a:
         a5:12:3a:7f:4b:52:67:1c:f2:63:d7:9d:bc:f6:59:e1:42:f5:
         ab:b6:5a:72:8c:ae:ce:a9:99:0b:48:20:a4:cd:4c:f8:fb:0b:
         58:c2:10:95:e7:e9:2a:42:2c:8f:19:5f:74:fb:16:a6:b7:56:
         95:6c:4b:de:13:86:95:98:00:55:a3:de:3c:eb:88:7a:64:6c:
         16:0c:f9:d0:b3:24:3e:d3:73:38:60:cb:2c:f6:e0:a2:de:a7:
         f5:7d:31:c3:bf:f0:35:4d:89:db:0b:f0:2e:b9:8d:87:2a:a9:
         2b:eb:c4:e1:78:12:13:d5:02:a7:19:b7:b6:28:c5:75:16:4a:
         ea:95:e6:a6:a0:b8:e3:c5:e0:fe:df:99:48:75:0d:fa:23:db:
         01:8d:6f:3f:dc:32:07:08:de:89:ac:8c:28:66:19:e1:a6:68:
         09:ba:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:50 2024 by rpki-client on console-fra.rpki-client.org