Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File:                     xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier:          8WJmZfWejrMSilhxMOvVS0Znrp8iBaH9JW++I3+qnEc=
Subject key identifier:   00:C3:25:EC:9A:ED:69:C8:38:F4:9F:84:83:04:9C:54:4F:1D:EA:D5
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer:       /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial:       018F87490F4CA420DA21170AD53A65929D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: I0mvzDzkZ3DMyOhjnO_bSV8Nia4.roa (hash: 9Eol1xaAEqqieDhlNN4kjVNbIHfzwOvmkbsB3bXELz4=)
                          2: nUW44Mo6UzEDPchd2mPKKiGKXcQ.roa (hash: TkeGcnuV57nxBkTgAUWEp7frU6XWuPs+XD+Zod8oFrg=)
                          3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: uIGSSSMbG8i7fiQYj9D1FxckW7GndrnznGn/jLnl/Ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0f:4c:a4:20:da:21:17:0a:d5:3a:65:92:9d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=00c325ec9aed69c838f49f8483049c544f1dead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:cd:1d:c0:df:14:07:b0:50:b0:b8:0f:80:
                    7a:d1:ba:29:0f:2a:4b:cb:3f:bf:d0:fb:d9:5b:6c:
                    8c:91:ca:6b:88:69:cc:be:a8:ad:74:00:89:ed:cd:
                    bc:4e:df:2b:10:70:75:b2:8c:29:55:f5:e1:df:3d:
                    55:b1:38:b9:76:b5:f3:9f:b5:a6:96:41:f8:71:6b:
                    d6:3a:f4:f8:0f:98:6f:bf:13:6a:72:20:27:d0:24:
                    e1:d1:eb:04:0a:83:ff:86:c8:e3:cb:9a:4b:8e:15:
                    4b:5e:4f:1c:0e:0c:2f:09:5d:92:c4:40:df:4c:b9:
                    62:e2:20:6d:84:96:1c:1f:de:2b:50:e5:bb:30:ec:
                    c8:52:6c:e9:e3:d7:7a:46:9f:84:44:b0:3f:51:20:
                    71:4e:a2:8b:d1:e1:ba:52:08:1f:d7:93:84:36:0a:
                    8f:80:0e:d2:75:ff:b1:a4:9e:10:22:47:ed:b0:3f:
                    ad:d9:1c:3e:91:4d:ee:a6:76:5b:1d:44:55:8d:3d:
                    82:b4:fe:a1:3e:cc:fe:bc:01:44:90:20:26:fd:80:
                    1a:db:9b:61:33:f0:16:4c:b4:5d:0c:85:4c:64:31:
                    c6:b8:0c:dc:d0:67:09:34:e3:1d:c1:b7:c9:4a:09:
                    c8:6f:f4:f3:98:ce:1a:11:d1:8f:cb:f3:e3:63:78:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:25:EC:9A:ED:69:C8:38:F4:9F:84:83:04:9C:54:4F:1D:EA:D5
            X509v3 Authority Key Identifier:
                keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:a0:c8:ec:f6:d0:ab:4c:0c:c0:7b:4a:47:21:02:14:95:
         49:f1:9c:d5:3d:49:fa:78:d3:be:9d:ac:74:93:89:bf:f6:ab:
         dd:dc:46:39:a1:80:dc:89:a0:fc:b6:11:72:db:bd:f8:6d:1c:
         81:95:83:f2:92:40:2c:95:89:fc:a0:38:ad:c9:24:42:82:ae:
         cd:f5:78:be:c8:2f:0e:17:b4:e2:82:89:37:e5:49:51:a7:e6:
         a2:e4:fd:63:45:85:ee:ce:a4:d5:c5:c5:12:db:76:f9:3d:e1:
         be:8f:bb:29:0b:26:b5:67:31:e9:10:3e:8a:c7:a4:75:21:48:
         41:10:9f:96:8b:fa:ec:55:81:58:3a:bf:47:89:89:95:9a:f2:
         e4:ef:14:98:fa:32:9e:7c:52:26:94:98:5b:ce:32:5f:75:04:
         4c:35:f9:1b:ab:62:1a:69:94:ce:fb:24:41:f4:85:aa:12:97:
         6e:82:69:c0:45:5c:88:7b:37:8c:2a:30:94:6e:90:1a:89:6c:
         1e:57:36:80:14:27:7d:6f:a8:46:5b:41:65:a6:d7:fe:35:2a:
         a5:59:15:ba:8f:ef:2e:2a:82:cb:85:d7:f3:2a:cc:a3:f6:7d:
         f9:df:2e:e1:b9:93:75:c5:e3:ca:47:ee:0e:cd:b3:81:57:b9:
         b9:ef:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:29:52 2024 by rpki-client on console-fra.rpki-client.org