Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File:                     F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier:          lDWSfnFAFSJNaxHpEGZ/4o1UJYdBv7STlN9QOZlc3gc=
Subject key identifier:   17:A5:97:DC:46:9E:1D:10:E8:2A:28:7A:51:E6:63:17:33:94:55:78
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer:       /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial:       018F497F3CADC39586689403A4C7B27991FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 16:03:46 +0000
Manifest this update:     Sun 05 May 2024 16:03:46 +0000
Manifest next update:     Mon 06 May 2024 16:03:46 +0000
Files and hashes:         1: 8nAXpHriN2Oa8EaSX65gPaSZ--Q.roa (hash: Gn16ZLM+IDBDgLsQ4bo32+kNBrOguDWRTsTMHIXuwWA=)
                          2: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: BwcyobW7SYcvFvh91MMPivLil49ULRfv5mGKusDuDIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:3c:ad:c3:95:86:68:94:03:a4:c7:b2:79:91:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
        Validity
            Not Before: May  5 16:03:46 2024 GMT
            Not After : May  6 16:03:46 2024 GMT
        Subject: CN=17a597dc469e1d10e82a287a51e6631733945578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:05:88:6b:88:d8:43:91:f2:1e:60:68:84:
                    f0:92:72:62:5c:95:af:30:d6:f9:98:51:65:13:c7:
                    d0:12:41:76:40:26:18:f6:de:5f:32:c8:de:5c:46:
                    25:9b:72:72:b7:94:98:5d:50:61:3c:5e:86:e9:64:
                    a2:9d:3f:02:51:79:93:a2:f4:bc:c1:1f:b0:8e:f2:
                    e4:1c:1d:30:16:7c:84:4a:23:60:2c:99:2a:23:4a:
                    9e:2d:b0:49:2b:67:95:61:1a:55:cb:f6:f1:36:ee:
                    4a:2b:ce:5a:f2:81:b2:ad:0f:08:e4:be:77:cb:90:
                    84:a8:10:fb:ee:a8:02:7d:a0:77:40:77:18:ff:23:
                    60:af:a9:31:8f:24:f3:70:bc:65:6a:ec:91:8a:42:
                    46:10:4d:80:2d:f5:3c:f0:af:c2:0f:bd:fc:69:6b:
                    9a:52:8d:6a:8d:a2:49:16:19:73:34:72:91:87:d4:
                    72:cd:27:69:dc:1d:8c:cb:64:87:66:21:a1:97:ea:
                    55:48:f2:bd:ee:cf:d2:ef:07:48:75:64:1f:48:bc:
                    e3:c2:f9:4d:eb:6e:9a:3f:e5:62:35:5a:ce:5a:2d:
                    d4:46:6c:85:90:d7:48:aa:0d:88:8e:a0:66:64:93:
                    9f:13:0b:e5:18:d7:8e:e9:c7:75:95:a8:cb:a1:20:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:97:DC:46:9E:1D:10:E8:2A:28:7A:51:E6:63:17:33:94:55:78
            X509v3 Authority Key Identifier:
                keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:63:1f:07:07:c2:ff:b2:9f:b6:63:02:3b:ab:7e:15:79:c8:
         bf:05:83:61:a2:d6:5e:3c:f6:7a:13:9f:a7:17:e4:8f:e8:ed:
         d2:e2:27:82:56:5e:00:86:8e:77:c8:12:68:b5:47:d9:c8:8b:
         de:ed:8d:24:07:4f:4d:91:60:ee:e6:dd:d3:fc:5b:bf:6f:8d:
         9d:28:fb:19:93:39:d2:05:f6:29:cc:3f:1b:b8:eb:18:b8:ce:
         28:54:dd:75:e2:e9:54:0d:c5:d4:83:8f:f3:8a:ba:22:e1:3e:
         49:8d:a8:2d:30:b1:94:2d:b2:73:e1:68:ea:5e:f2:13:8d:f0:
         a8:f2:44:09:34:62:9c:e2:ba:0a:92:78:0e:64:1a:5c:a3:0b:
         c5:ad:3f:ee:e1:b3:42:55:8e:3d:84:ff:42:ff:bd:5c:87:9e:
         76:0b:0f:c2:32:17:96:2d:04:3c:39:4d:2a:9a:7f:07:a7:55:
         d0:e6:e0:d1:93:3a:d4:5f:e9:89:be:05:95:a7:8f:18:0a:72:
         8e:48:c8:ab:6c:e0:34:cc:13:bb:30:95:8e:79:be:64:d8:19:
         56:12:2f:74:23:68:83:a0:88:46:9d:e5:74:e5:ea:13:a2:c4:
         58:82:4e:e6:3a:60:52:e9:77:7d:c9:5d:12:ee:f0:16:e4:c1:
         be:ad:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:06:02 2024 by rpki-client on console-ams.rpki-client.org