Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File:                     c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier:          PN4fHKNRFeCmbf52NYXpQ+YJcCr5Gu/Y9R2E10WBqBw=
Subject key identifier:   CB:DB:B0:E6:91:07:39:95:0B:C4:3D:54:EC:BC:07:FF:15:4E:61:54
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer:       /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial:       018F874A94F146B6EEB11AA7E8596A2AAD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:42 +0000
Manifest this update:     Fri 17 May 2024 16:02:42 +0000
Manifest next update:     Sat 18 May 2024 16:02:42 +0000
Files and hashes:         1: YT0RO_u6ajsT46ISGf9J3gRr_bw.roa (hash: LE4+g3MSvPvkLZDH5dPT20EJQRm3QdLtn3BooNgZKmU=)
                          2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: tANOpDuBCvedcQlUZAaXSrs/ANCrxmqV1A3pfevRSFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:94:f1:46:b6:ee:b1:1a:a7:e8:59:6a:2a:ad:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
        Validity
            Not Before: May 17 16:02:42 2024 GMT
            Not After : May 18 16:02:42 2024 GMT
        Subject: CN=cbdbb0e6910739950bc43d54ecbc07ff154e6154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:4f:cd:46:dd:e8:2d:1e:10:bc:d0:a0:8d:
                    45:9a:0a:81:80:c4:d3:ab:76:67:f4:85:0c:20:c2:
                    b1:9a:7f:f3:39:16:68:47:7c:34:ba:33:0c:59:34:
                    18:f5:dc:a4:a9:67:10:29:df:67:dc:8a:6a:e7:6b:
                    f9:f3:f5:86:e5:15:a7:2a:60:ad:5c:10:28:62:89:
                    84:af:da:48:9e:85:84:2d:ef:5d:41:56:bf:76:c5:
                    12:19:05:87:70:c2:18:6d:cd:5b:da:b4:dc:20:94:
                    58:7a:bc:e7:80:cb:00:a0:cd:96:e1:65:23:c4:c6:
                    5d:db:19:95:cd:2b:4c:23:4b:82:b1:e5:80:4c:bf:
                    43:f5:d7:c8:3e:12:36:80:5c:f2:fc:c4:80:30:46:
                    43:17:eb:46:72:d9:f3:c9:6a:81:c4:38:32:9f:97:
                    99:e4:af:d8:fc:c2:5e:ce:8f:2f:63:e3:22:e6:aa:
                    47:b5:59:39:eb:59:e1:8c:b1:10:0a:b0:d3:79:28:
                    ba:2c:a8:3e:c3:bf:23:be:d9:58:3e:34:e6:cd:1b:
                    8d:a6:2d:a9:97:19:a3:ab:f4:15:7c:9e:b7:c1:f4:
                    2f:44:9c:9c:c3:7f:02:cf:12:02:7a:6d:da:0a:bc:
                    2c:67:38:67:4a:5f:0e:c6:8f:73:e3:b2:03:bd:17:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:B0:E6:91:07:39:95:0B:C4:3D:54:EC:BC:07:FF:15:4E:61:54
            X509v3 Authority Key Identifier:
                keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5e:84:b3:68:4c:8b:ff:6d:37:61:d2:e8:20:9d:bf:08:d7:
         fc:2a:62:05:0b:9d:9c:e4:2f:33:24:f9:58:a8:e4:1a:8a:d7:
         2a:70:43:71:f3:71:d8:a9:ce:04:f2:4e:05:4b:2d:36:b0:40:
         85:0f:34:da:b0:93:cb:f7:5f:84:bc:6c:64:bb:21:26:29:60:
         a0:63:ab:bd:3e:39:3b:64:a3:c2:04:fc:60:11:13:2f:3b:71:
         69:45:a3:c2:67:e4:ad:0b:c7:5d:f2:9c:35:71:94:41:bb:69:
         3b:e3:c1:65:92:f2:7c:39:f1:46:1b:8a:52:16:7b:c7:ed:14:
         7f:fb:7a:02:fb:18:89:62:02:69:c6:34:81:c2:99:72:96:e5:
         4d:eb:98:4d:c7:f8:b5:1f:9a:0b:e0:10:bb:1f:6e:86:d1:6d:
         fc:8d:97:70:d9:eb:36:fb:2f:28:52:21:8c:f6:96:19:a6:8a:
         2a:0b:55:25:e1:98:24:47:37:51:b8:bf:d6:eb:2d:5a:92:45:
         3b:a7:64:d4:26:bb:58:6e:c0:23:4e:8e:85:09:ea:13:7d:7b:
         02:d2:d3:c8:3f:1d:45:c4:b4:0f:6d:e0:9a:a8:c1:3d:d2:f0:
         58:41:b3:f9:f7:cc:d9:4d:27:d1:b9:3d:10:ab:c1:9d:1b:a4:
         1b:4b:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:10 2024 by rpki-client on console-fra.rpki-client.org