Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File:                     GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier:          KQDq9f6b1JOdQCl3StWA75dnnUXcj6YgOdu1o/cqFFU=
Subject key identifier:   34:8D:42:FF:B6:5F:26:62:3D:4F:28:4F:24:A4:2B:25:D2:95:1A:26
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer:       /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial:       018F88C8BA7B84CC2359AB0635E9D65A7F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number:          0252
Signing time:             Fri 17 May 2024 23:00:07 +0000
Manifest this update:     Fri 17 May 2024 23:00:07 +0000
Manifest next update:     Sat 18 May 2024 23:00:07 +0000
Files and hashes:         1: 2_89ES0JWbMrk5tW9FsD8OACCs8.roa (hash: Srx4S4wo8j8tBfIufhbuptNTfAeNFvK2DS2sAiNDtxo=)
                          2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: +/LOX5g3iX3yjaltPHiuhjquBKTvtGrC6o7HISzPm28=)
                          3: bJzXB4Egfy965SkYaz2mANcyGVk.roa (hash: xYRbxLQNkMqj0AkdAHdMwnudOMSEza8BRXp0F9gfq+I=)
                          4: j106dbcJ5FUnCLmLyXKDo7RYGoY.roa (hash: 6Njpt4jOG58M8tlQE3JuHHRtM1eh8KdNEVIe+bES66c=)
                          5: pJppu3x2dUbfRtPwC52P13uxsOg.roa (hash: 4IIOGDB5OB1G++WM9k9/fJkV+2lpUBjCefUIWNE4Y40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:ba:7b:84:cc:23:59:ab:06:35:e9:d6:5a:7f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
        Validity
            Not Before: May 17 23:00:07 2024 GMT
            Not After : May 18 23:00:07 2024 GMT
        Subject: CN=348d42ffb65f26623d4f284f24a42b25d2951a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:f2:94:f2:a7:17:9c:94:85:a3:41:cd:77:
                    d9:31:3f:1b:9a:26:fc:10:92:92:4a:57:9d:f6:08:
                    7c:a4:22:88:7b:24:3c:1a:f0:9f:f1:52:d4:96:ec:
                    42:8f:f5:b8:5f:01:19:48:20:0b:5f:3f:d6:a6:79:
                    7b:2e:e7:a1:07:cf:a0:77:0d:ea:83:8e:93:cb:ff:
                    b2:50:b6:da:39:2e:e4:e4:03:60:57:dc:83:e4:cf:
                    c4:45:7e:50:04:12:77:b6:57:c3:fa:6c:d3:b0:bc:
                    0b:3e:51:5e:5a:6d:05:13:79:35:9a:0f:fa:d5:77:
                    21:3b:3d:81:44:3e:2e:58:ec:cf:8d:37:09:8a:20:
                    2f:b3:8e:e7:eb:8a:d8:7a:47:f2:53:b1:b1:62:d7:
                    cd:16:05:eb:0c:48:60:84:39:76:b9:e1:5b:bf:28:
                    3c:46:6d:84:f8:37:4f:d8:71:3a:45:e7:a4:0b:b2:
                    9f:49:13:1e:d9:61:6f:53:f2:0f:19:91:81:e1:09:
                    36:5a:cf:b0:16:96:b3:0a:d2:0e:3f:3b:d4:29:35:
                    90:e3:3a:bf:9b:ce:e4:dc:a2:d1:a9:9e:a0:91:9c:
                    be:5b:a5:20:b0:a7:c2:b4:8b:4b:b1:d2:cf:95:f3:
                    6f:41:72:ca:7d:ff:f1:89:42:89:0c:a4:e9:21:f0:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:42:FF:B6:5F:26:62:3D:4F:28:4F:24:A4:2B:25:D2:95:1A:26
            X509v3 Authority Key Identifier:
                keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:37:6a:37:ac:88:c2:fc:98:c2:7a:6d:c5:c6:b5:0a:a1:97:
         66:72:83:c8:3f:eb:57:1c:5f:19:2d:31:61:76:4b:58:67:1a:
         ff:9f:5e:e7:d5:53:d9:f1:f2:9f:22:00:1c:45:d8:2b:78:d3:
         4c:83:5f:04:2c:df:1d:ce:2d:dd:65:b9:34:fb:c2:94:8b:17:
         14:8b:81:1b:ac:dc:43:c8:39:0b:e9:c9:d1:2e:72:2e:6f:6f:
         50:15:ca:c0:d6:15:5a:e4:27:e7:11:f0:81:bb:96:26:6f:3a:
         40:16:71:ea:e6:59:4f:1e:e3:28:81:26:bf:e4:48:60:a1:55:
         f2:99:85:c6:80:c1:52:d9:5e:b0:a2:6b:19:ea:f2:1e:2f:4d:
         5b:ef:38:ba:57:75:63:52:59:c9:ee:19:18:09:ab:26:3d:9c:
         8b:97:13:4e:4b:3e:5a:da:0a:fc:17:fb:e2:a6:54:0d:76:8e:
         98:67:b2:a5:0e:5b:9a:b4:45:d8:30:b8:08:ce:6b:42:cc:83:
         17:4f:3f:77:2d:8a:44:df:3c:16:9d:37:40:ca:e2:47:71:49:
         2c:5c:82:ac:c3:13:16:58:2f:91:54:a8:c7:58:0e:cb:94:5b:
         02:4e:76:8d:5b:51:25:ed:6f:04:2e:f3:f4:8e:19:50:f1:a7:
         64:66:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:15 2024 by rpki-client on console-ams.rpki-client.org