Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File:                     siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier:          QfMQP8vxtgg9RIn3wBOywaVqMWCNYDmtr1zmc3YfvPs=
Subject key identifier:   90:71:6F:07:72:EC:1C:7D:91:6D:04:84:C4:93:98:C4:C1:8C:97:54
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer:       /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial:       018F874A5D66C599CECAF706EE006A2AC4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: 3vpldlcedC8BYzQRrsJNj0QLlpg.roa (hash: jL5RHZrhA3uOsnV29cBScJnTl9J79jaM2lOUYIaPAdg=)
                          2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: aVmWwO0QmrcEquypLudQo64ZVNTQzy8hU/qU1vjpQEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5d:66:c5:99:ce:ca:f7:06:ee:00:6a:2a:c4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=90716f0772ec1c7d916d0484c49398c4c18c9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:cd:40:82:72:13:0d:50:3a:f5:64:78:c7:
                    05:f7:b2:76:f3:80:1c:2e:60:68:e6:e5:36:98:02:
                    85:41:df:e9:42:c4:a8:1e:e8:fd:25:43:32:21:14:
                    f6:49:d8:da:c0:49:6e:93:d0:47:ba:4e:b0:b8:a6:
                    4c:f7:2d:ba:29:36:27:19:ee:c6:ce:f8:51:6a:02:
                    1e:68:14:9d:a9:fb:85:c6:a5:4d:ea:ce:94:c5:8a:
                    98:7b:d3:0c:73:c1:cb:c3:91:67:a8:dd:08:a9:bc:
                    84:39:d8:41:5c:26:8d:fc:3c:98:c0:56:4a:82:6e:
                    17:07:1b:59:98:c6:4c:b6:19:18:38:a0:4a:4b:d5:
                    ed:65:bb:7d:09:d6:7b:4f:6d:67:a7:1c:88:c0:94:
                    3d:a9:64:ac:f7:46:5a:91:d6:d3:21:05:78:a8:c3:
                    37:92:dd:a9:dd:ec:59:32:2b:08:17:8a:5a:ca:de:
                    83:b4:6d:3f:c9:62:12:9d:a5:0f:ec:ce:13:fd:e5:
                    b8:04:b6:ec:d7:f6:4b:98:6b:ff:9e:a8:19:4f:e6:
                    28:12:74:54:f8:6f:29:46:b7:f3:d2:18:b4:4d:ef:
                    ef:55:3f:2b:48:b9:8a:d1:61:18:7f:68:d0:37:86:
                    7b:92:5c:6c:7f:a5:86:18:2b:a7:fe:9c:7c:c6:fb:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:71:6F:07:72:EC:1C:7D:91:6D:04:84:C4:93:98:C4:C1:8C:97:54
            X509v3 Authority Key Identifier:
                keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:d9:2e:ab:3c:e1:e8:52:cd:15:93:61:ad:40:35:62:ab:
         a7:86:f7:4d:d8:14:80:3c:25:c3:a4:ed:65:c0:9c:0e:2b:e3:
         63:01:96:0c:5f:0c:6f:ad:8e:7c:ac:1a:b3:87:ea:61:10:df:
         88:27:68:83:62:8b:47:6a:c3:17:20:c6:9a:85:1a:b7:99:6b:
         43:35:92:a8:13:6f:c6:59:42:51:a8:28:78:06:7e:55:4f:f9:
         90:1c:d5:e2:60:3c:aa:c1:c9:4f:06:b8:df:66:55:86:e7:ec:
         19:a0:aa:0d:40:f2:c5:a2:0c:b3:79:bf:10:c7:40:b8:b2:97:
         53:a3:89:e3:0b:da:c6:e3:82:ea:e2:70:29:a0:9c:63:09:fc:
         38:f9:03:d1:08:eb:c1:a7:d4:d4:08:b3:d9:4f:e0:43:88:83:
         11:5f:83:c0:88:52:5a:41:ef:af:42:cd:ee:7d:46:4c:37:7c:
         8c:45:3e:68:f9:6a:77:b0:8a:c3:da:34:e7:48:e1:2b:b4:82:
         d3:34:c8:44:70:c5:3d:2c:d6:8f:eb:0c:0d:3a:24:15:57:5a:
         e4:ba:22:36:aa:da:5c:32:b3:5c:b0:7a:d1:6c:41:07:79:f4:
         db:67:50:db:54:9a:80:62:66:da:ef:f9:37:16:7f:da:64:73:
         fb:50:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:58 2024 by rpki-client on console-fra.rpki-client.org