Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File:                     ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier:          g2Vuyv8Siko+zfwgnQLy13k5wDpj/jd70nsWnF8V3C0=
Subject key identifier:   E5:46:2D:F5:CF:FD:C3:B1:33:7A:38:72:4B:6D:07:D2:66:D5:97:57
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer:       /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial:       018F8749552C2F10CB79B75A6015A6703FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:20 +0000
Manifest this update:     Fri 17 May 2024 16:01:20 +0000
Manifest next update:     Sat 18 May 2024 16:01:20 +0000
Files and hashes:         1: SdoqiolbhDvLLsADy22Q8yZ3ZLc.roa (hash: jKVZTux4gHYUkmi5vzghZMJ2i5aOoj2PXYAQSedTh4A=)
                          2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: WNQmVpRJUeId5EbSsWnbNqHceWvsJWeArbQi0iYxjTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:55:2c:2f:10:cb:79:b7:5a:60:15:a6:70:3f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
        Validity
            Not Before: May 17 16:01:20 2024 GMT
            Not After : May 18 16:01:20 2024 GMT
        Subject: CN=e5462df5cffdc3b1337a38724b6d07d266d59757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:4b:0f:e8:b0:b8:b7:3f:62:34:9e:64:b9:
                    46:75:3f:12:75:fc:5b:d3:43:1c:34:75:a7:a9:f8:
                    29:61:74:a7:c5:e2:67:ad:c4:1b:99:a9:50:78:49:
                    4c:73:82:94:c5:c0:a3:cd:78:ce:48:58:7c:c1:0a:
                    ec:81:d2:0e:53:fa:54:1d:6e:2a:f0:6f:da:90:aa:
                    7c:5a:f1:8f:89:18:62:04:8f:f9:b0:d1:de:2f:7c:
                    c6:e9:ac:d3:1e:37:d2:05:91:26:52:6f:7e:21:13:
                    6b:a9:02:2a:b8:19:ac:5b:bc:40:e0:b4:94:25:c6:
                    1f:fb:37:e2:eb:97:02:86:f2:35:0e:d2:64:33:a8:
                    10:82:77:44:4f:4c:12:cd:0e:80:0a:3f:07:83:6f:
                    8e:9b:42:8f:7e:4b:61:7f:df:77:0e:af:91:28:d0:
                    fa:27:cc:4d:41:f5:aa:b1:3a:0b:57:a1:a8:ba:66:
                    ae:2c:4c:f0:42:93:97:6c:a2:57:e2:38:55:f1:c2:
                    b1:b2:67:fe:db:73:1f:19:86:40:0a:75:8a:69:08:
                    82:ab:cd:f7:4c:d6:47:b8:e0:04:36:ca:ea:59:08:
                    2f:b6:57:8c:ed:15:00:e3:91:db:ca:71:95:9a:32:
                    51:98:b4:96:c6:2d:b8:57:f9:51:51:f0:7b:6b:55:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:2D:F5:CF:FD:C3:B1:33:7A:38:72:4B:6D:07:D2:66:D5:97:57
            X509v3 Authority Key Identifier:
                keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:4b:8d:79:e1:bc:59:1a:7f:0e:89:5b:4d:c2:57:16:d5:
         fe:15:ce:5b:b3:22:b0:ec:91:8d:a7:e3:d7:b0:74:d6:8e:67:
         17:62:e0:db:cc:c1:69:7f:f6:8f:f4:5e:af:92:5c:f9:dc:7a:
         d6:b8:6c:d0:06:f6:da:cd:e9:44:4a:6c:f8:6d:af:8f:dc:8c:
         a3:bb:85:67:be:67:a1:aa:e9:82:60:2e:75:da:f9:d4:51:72:
         b8:b0:98:2c:67:57:5e:02:de:ab:e5:e6:46:4c:b6:f9:b5:db:
         bc:3a:34:3a:16:b5:ee:24:10:5f:de:bc:7d:d8:64:1d:67:db:
         2d:fa:42:e6:6b:76:70:64:79:a8:11:ca:41:26:82:bc:ca:96:
         29:4c:f6:07:6a:9f:7c:b5:e9:3c:4a:fc:4d:d6:7e:17:f1:d2:
         da:d4:59:4e:b0:e1:a8:0f:a1:b0:3d:0e:15:0d:88:17:b2:f6:
         15:88:08:d5:e6:b5:43:17:41:75:28:1b:93:33:44:0c:46:e1:
         9a:ea:e3:82:9c:c9:7e:1e:61:d7:bc:9c:15:0d:19:30:fd:08:
         ea:a1:5c:03:34:c1:97:50:86:49:ef:5b:74:8e:57:01:b6:94:
         7a:54:4e:94:dd:ec:13:9f:38:2d:f5:9c:91:1a:28:67:50:99:
         0d:d0:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:58 2024 by rpki-client on console-fra.rpki-client.org