Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File:                     odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier:          7qzEnyWpTuuyC9Fj7EbzYHKw3t7FFtSMyMeC+5Dw5b0=
Subject key identifier:   64:9F:BE:3E:0D:E8:29:0C:D9:F7:98:DB:66:1A:F8:36:0A:9E:5A:D6
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer:       /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial:       018F874B14EE1837320B573FBA57654AE10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:03:15 +0000
Manifest this update:     Fri 17 May 2024 16:03:15 +0000
Manifest next update:     Sat 18 May 2024 16:03:15 +0000
Files and hashes:         1: 4mt3By-3eHKHR3dA_hDk7ez7HE0.roa (hash: 3ZrxYSjPBqaMfMTlbppW2gq1SiQ9KIz8pJDt6rZXs4g=)
                          2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: KxveV43GEwzsB3u9VAHl0YjHba9GzTWgRJuSwyZJMco=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:14:ee:18:37:32:0b:57:3f:ba:57:65:4a:e1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
        Validity
            Not Before: May 17 16:03:15 2024 GMT
            Not After : May 18 16:03:15 2024 GMT
        Subject: CN=649fbe3e0de8290cd9f798db661af8360a9e5ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:5a:c4:4a:a7:e3:d8:50:cd:37:2c:14:77:
                    19:42:64:f9:a9:33:fe:9c:f0:17:a0:de:05:5b:d8:
                    53:a7:1f:8c:5f:f9:ef:82:fc:6d:71:e7:b7:f1:a1:
                    4b:76:d8:ee:bd:a8:31:e9:77:38:c6:37:e5:f3:0d:
                    3a:1e:a5:82:1f:65:c8:85:32:1e:d6:78:83:ef:87:
                    bd:14:59:68:ed:14:cf:ec:e3:28:52:03:73:66:73:
                    ce:9e:1a:0b:52:9c:a4:dc:27:aa:2c:47:44:7e:41:
                    e1:2e:3a:95:46:ff:73:f8:37:36:d8:8b:d7:aa:0d:
                    dd:17:8c:5d:0a:1a:33:8e:40:a9:e5:18:7a:b8:b8:
                    ec:00:47:0c:02:6b:64:86:ce:09:95:bf:a6:e1:99:
                    63:41:47:4a:14:7d:db:5a:4e:f9:35:35:fa:1c:9b:
                    ef:86:e0:fa:50:47:b7:70:25:5a:ee:8b:36:7a:64:
                    66:0f:28:83:0d:f5:db:65:ca:f9:02:ea:d5:62:52:
                    7e:f7:e8:e7:4e:9d:ef:17:a9:d2:99:6f:53:dc:ea:
                    ff:24:7a:60:5b:65:d9:6d:bb:3c:f7:c0:6e:04:1b:
                    68:54:a8:10:ea:02:d9:16:3a:49:26:91:e3:66:7e:
                    b9:cd:f2:59:0d:93:db:c4:4d:59:04:ca:ee:95:3c:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:BE:3E:0D:E8:29:0C:D9:F7:98:DB:66:1A:F8:36:0A:9E:5A:D6
            X509v3 Authority Key Identifier:
                keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:40:75:74:95:b8:7d:09:07:56:53:44:fe:92:8d:1f:de:
         03:a4:85:cf:fb:ea:11:39:b3:92:2d:a0:0e:dc:b9:98:11:61:
         c6:d5:14:16:c6:ec:14:14:ee:e6:66:41:6f:14:26:8b:3c:40:
         f4:fc:3e:d4:59:28:7f:4d:f3:f7:b2:42:22:20:26:76:6d:fa:
         62:d7:5d:e4:5e:a3:57:32:88:7e:92:08:14:e5:64:ff:2a:7a:
         93:8c:dc:91:43:e6:b7:8f:81:74:d0:b5:ca:7e:c9:a7:34:1a:
         63:77:23:15:af:c6:59:f9:7a:f8:e3:3f:a0:62:02:74:46:37:
         b5:64:93:c3:8c:1d:ac:2a:7d:63:de:bc:19:c1:0b:c6:dd:82:
         91:c0:d8:5d:6a:c5:04:8f:bc:dd:2a:1b:8c:58:ae:7c:7d:54:
         59:65:29:ab:9e:e5:e2:60:9e:62:c5:a2:f7:10:22:51:57:e2:
         90:ab:9d:69:8e:c2:d1:b4:ef:67:46:ea:2d:4a:80:93:3f:11:
         d0:84:fa:df:cb:a9:6e:9f:00:65:d8:1d:5e:cf:2a:91:3e:12:
         4e:ba:57:bc:95:ea:e6:fc:12:d0:49:e3:4b:00:9a:ec:6d:8a:
         c5:a2:a1:f0:71:dc:24:14:83:44:8a:c4:c5:d9:f0:aa:38:b4:
         85:8f:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:08 2024 by rpki-client on console-fra.rpki-client.org