Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File:                     R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier:          Hg8A3N5wPC/QcFDnttTu4wyM86w2i7IXHzUkAIZE858=
Subject key identifier:   B2:3E:C0:2B:67:2B:FE:5D:B4:AC:C1:8B:41:E1:6E:5F:AF:46:8B:00
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer:       /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial:       018F8748AFF05372C4B105AD31A7BBB00501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: 1-VVNIufacVzhFbOo-ie3K9Le7Pw.roa (hash: WUZ+ShdSWz299XhjSsKaYIUFCV5+dRTfv17rwKFkO70=)
                          2: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: hhQs90S53wsjmwYq9FOSUuX42QnF6li6MnRFSWO2PoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:af:f0:53:72:c4:b1:05:ad:31:a7:bb:b0:05:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=b23ec02b672bfe5db4acc18b41e16e5faf468b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:13:c8:7d:ff:f9:3d:d7:90:40:95:62:e9:
                    bb:c5:25:fe:c8:32:c0:e7:4c:0c:86:4e:5f:c2:35:
                    ec:e6:3a:85:6e:9f:be:82:4f:7d:71:40:fb:43:fc:
                    32:2f:86:4d:38:c7:23:66:90:8e:2a:09:b1:76:66:
                    93:dc:58:53:af:e6:d5:9f:77:fc:a3:a7:75:6f:50:
                    08:f1:8f:76:47:7b:d0:33:38:f1:88:e1:ab:28:e0:
                    30:89:60:ac:2f:1f:f6:38:ea:bb:1e:4a:81:f7:ad:
                    ff:85:2c:20:57:f1:23:06:02:40:2e:e8:97:a3:15:
                    4c:f8:d7:ba:08:98:e4:1d:73:f2:42:d7:df:3b:8d:
                    13:b1:b2:33:63:06:5e:b9:72:c0:c2:8c:3d:4d:2b:
                    5e:4e:17:6d:49:b1:33:2c:2b:cb:d4:7b:d1:bd:8b:
                    6c:fd:a7:ee:06:0a:bc:c3:f1:35:0a:a4:84:ea:3f:
                    79:3c:a3:68:3e:01:d7:92:70:06:00:40:05:8f:3b:
                    d3:4f:18:57:fe:ee:ed:cb:ae:fe:59:91:7d:b0:4c:
                    76:f8:b5:ab:76:7f:12:83:55:f4:37:72:5e:48:bd:
                    4e:0c:7d:44:3f:6e:cb:77:be:d9:d1:62:00:1f:de:
                    73:ed:f6:0b:24:87:e7:66:d4:c0:68:3f:5b:e3:d2:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:C0:2B:67:2B:FE:5D:B4:AC:C1:8B:41:E1:6E:5F:AF:46:8B:00
            X509v3 Authority Key Identifier:
                keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:05:c3:84:78:b5:d7:b9:fb:ce:13:8c:51:78:ca:45:d9:
         12:29:e3:04:29:bd:e9:dc:7e:84:9c:52:f6:6e:60:b1:f1:15:
         0b:32:8a:f3:9f:0c:db:e7:76:7b:1e:da:16:63:6c:3b:aa:61:
         3d:f5:ea:4a:44:b5:1f:c9:38:40:45:7e:2a:8c:16:92:bd:bd:
         6b:cb:31:93:26:c1:87:db:3f:0f:fb:ce:0b:20:8e:66:6a:5c:
         20:c3:a4:31:b0:80:ea:b5:ed:a8:5e:94:92:28:12:86:f7:7a:
         78:aa:d3:ef:39:0c:46:91:b2:81:01:9c:41:4d:a4:42:04:5c:
         9e:a2:35:a2:d3:6b:d3:2f:d8:a9:2f:8d:00:55:a7:d1:c0:c2:
         74:1d:12:87:54:90:e4:14:54:6a:14:8f:83:7d:20:74:8c:df:
         d8:e2:66:0d:a8:5c:0f:74:5f:ee:53:7d:8f:a0:0b:34:16:4b:
         02:e9:9d:15:46:16:96:d8:4e:a6:27:cf:7b:e5:a5:8c:2a:eb:
         69:ea:c6:0e:43:b2:1a:e5:17:14:ab:26:83:71:fe:0e:e3:6e:
         fb:09:45:77:48:91:ca:77:1d:f0:e8:6a:e4:1f:69:f3:bf:56:
         28:1f:60:ff:73:06:af:16:af:86:cb:7b:1d:fe:68:3a:c7:9c:
         a8:d4:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:56 2024 by rpki-client on console-ams.rpki-client.org