Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          ngklb13B56BwNlUr0US1jezUP/EPhFDqs7kSZi6laL0=
Subject key identifier:   33:8D:1A:E9:3A:03:9F:D3:AE:64:05:D9:DF:FA:C6:2F:A1:5D:62:82
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       018F86A3EE77E0F0B451A7A0D0E1C7AFD763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 13:00:41 +0000
Manifest this update:     Fri 17 May 2024 13:00:41 +0000
Manifest next update:     Sat 18 May 2024 13:00:41 +0000
Files and hashes:         1: W-iAp-IJhdwQgma8qN_Qrn-uJVE.roa (hash: tkKkyyA7WK2llcNPqLJGcxA4eedVypFUxquPjVl3R3o=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: yyeNqjtMW9qucjjz5LgXElfgxC8ru8/jR23ITMpNRwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ee:77:e0:f0:b4:51:a7:a0:d0:e1:c7:af:d7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: May 17 13:00:41 2024 GMT
            Not After : May 18 13:00:41 2024 GMT
        Subject: CN=338d1ae93a039fd3ae6405d9dffac62fa15d6282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:69:d2:4b:3c:5c:9f:2a:fd:6b:35:d0:f6:
                    01:e0:09:f1:98:98:3e:09:e1:1e:8a:d6:5e:a6:41:
                    e0:ee:d5:25:3a:0a:c4:04:a8:c1:0d:50:ca:59:1d:
                    6f:49:fd:db:74:c2:84:4a:01:c7:33:0f:c7:6b:bc:
                    5d:0f:d3:15:7f:69:6c:a0:96:85:65:4b:73:95:ba:
                    fa:a5:31:66:61:09:a3:d3:3d:65:4b:d9:3b:38:f1:
                    0c:05:65:e4:86:f6:11:f0:00:50:a4:64:6c:72:27:
                    9d:45:fc:dd:2e:61:48:08:68:26:bf:87:4e:89:fe:
                    b8:45:79:9d:0d:07:78:2c:5e:6a:a7:3c:34:76:17:
                    8e:ff:a2:e5:b7:ff:fe:70:f3:3e:c8:bf:f9:2d:9e:
                    6b:35:85:fd:82:bc:67:80:c2:ef:b4:1e:95:6a:53:
                    e6:cc:97:52:5b:ef:e7:fd:77:4e:2e:c3:08:24:6a:
                    e5:fd:9b:af:9e:3e:8d:07:02:08:ff:3d:ac:c3:b9:
                    5f:c2:f5:8e:f9:a7:cf:e5:00:1f:b0:b4:d3:13:b9:
                    50:d8:c7:53:22:ea:f8:22:25:70:12:1e:c2:82:0e:
                    4b:79:dd:21:45:e4:56:83:b5:a5:75:7a:01:57:ca:
                    bd:5a:9f:b2:4c:3e:5c:49:d2:f4:6d:5b:01:b9:74:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8D:1A:E9:3A:03:9F:D3:AE:64:05:D9:DF:FA:C6:2F:A1:5D:62:82
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:ce:6b:2c:64:b1:0d:50:11:05:31:ed:5d:80:ab:ff:62:
         3e:ac:9e:33:53:17:eb:66:21:8c:88:0c:6e:2a:36:37:b7:80:
         05:58:0a:af:58:6a:17:dc:e5:85:ef:9e:26:80:9e:3d:d6:21:
         53:8e:f3:e4:09:27:bf:3a:cf:4c:1f:f9:bd:71:96:3a:e4:c9:
         fe:4a:c3:85:19:32:50:6f:92:f7:84:e8:df:55:e9:71:45:f2:
         6e:28:79:d5:67:52:34:ae:e5:e1:a9:43:4f:c6:20:7c:dd:d9:
         ab:fd:9a:98:08:ce:0d:54:e2:a4:cd:f0:e8:99:a1:24:06:82:
         6a:c7:8f:4d:26:1f:9b:af:11:bf:91:a6:23:ad:6d:b0:df:15:
         7f:7b:c4:28:2e:0d:59:2b:28:45:f1:2b:ba:a6:e3:12:fd:bc:
         0a:4c:35:51:cb:e8:ac:0e:31:28:cb:d5:7d:eb:be:f3:e9:14:
         b9:ea:5e:40:c8:ae:27:27:ef:49:79:60:73:92:11:6a:40:47:
         6e:93:11:41:8b:f7:25:5a:56:99:6d:57:04:9b:42:0b:da:5e:
         fe:f7:4b:fb:a3:69:b7:29:fe:98:96:15:88:d3:db:10:58:ab:
         a4:19:de:4a:91:b1:ea:72:62:44:e1:e8:2e:9d:b6:8f:43:db:
         8a:c6:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:42 2024 by rpki-client on console-ams.rpki-client.org