Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File:                     rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier:          QqSV7pEcpHNdoebcFrKae26/CRe3jSJk0YUyCXCFpm0=
Subject key identifier:   AC:1E:84:65:A5:37:68:EC:82:90:54:0D:56:63:F0:D4:36:68:CA:5E
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       018F8939992F704F50CE487941BE2938E1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number:          085E
Signing time:             Sat 18 May 2024 01:03:24 +0000
Manifest this update:     Sat 18 May 2024 01:03:24 +0000
Manifest next update:     Sun 19 May 2024 01:03:24 +0000
Files and hashes:         1: EOxNSg_Jj_9bqY4jubMUeyeLBrI.roa (hash: NAJfVw+4ODRNX1i46o8KoIn8l75pS02EDKh3FoA9lK8=)
                          2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: WkdAg3b69mi2O8ib1do/+osEmuMZKjY13wrPIuGRTHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:99:2f:70:4f:50:ce:48:79:41:be:29:38:e1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: May 18 01:03:24 2024 GMT
            Not After : May 19 01:03:24 2024 GMT
        Subject: CN=ac1e8465a53768ec8290540d5663f0d43668ca5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:e9:a0:9b:0e:8a:df:5a:68:c4:f6:36:58:
                    87:bc:16:0f:af:aa:0c:14:22:cb:8a:bd:24:e9:37:
                    1f:1d:ae:f3:3d:f6:dc:8c:4f:78:06:3a:9d:1a:d8:
                    dd:7b:f6:ad:89:e9:01:af:a1:f6:ec:50:00:0d:fc:
                    14:ec:91:d5:16:d6:00:14:b9:b9:f7:8c:01:93:a7:
                    54:9a:dd:e1:bc:54:58:64:d7:1f:fa:bc:89:b6:c9:
                    f0:a1:eb:df:ef:e4:b7:41:72:1c:31:30:f9:d2:1e:
                    4b:ef:23:ae:53:b5:76:5d:19:7f:3f:25:da:b8:06:
                    be:7f:84:8b:c8:c7:b4:77:70:41:3c:18:ea:6c:98:
                    8f:81:04:fe:5e:02:95:39:b3:c1:c5:42:26:88:23:
                    d4:4d:3d:ca:02:58:c3:07:e0:a4:9f:df:c5:7b:82:
                    20:52:81:7e:f8:e5:99:9e:b0:7f:f7:dc:a4:ba:f5:
                    d1:ad:25:ca:34:69:88:2f:ce:57:96:fd:95:be:a0:
                    7b:2e:f7:75:ba:4d:1f:17:8b:ba:29:8f:d7:2e:b0:
                    d6:9f:28:a9:86:26:91:b4:b9:9a:0e:8d:0e:fc:29:
                    77:d7:c2:82:8a:e1:53:33:ea:9e:12:e2:aa:e9:75:
                    79:a2:d5:e5:f3:49:d0:3c:1d:37:2b:10:e0:17:4d:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:84:65:A5:37:68:EC:82:90:54:0D:56:63:F0:D4:36:68:CA:5E
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:72:3d:ca:64:6f:b7:04:21:a5:63:d0:9d:49:68:86:95:3a:
         f9:0a:7f:5f:56:3d:10:b2:b1:73:56:87:4d:04:2b:66:7f:55:
         bc:02:74:db:7a:9b:d3:e0:dc:d1:07:fc:59:cc:1e:2e:91:ca:
         58:a7:84:b0:5a:45:cd:55:f5:66:c3:b3:6d:95:a9:24:14:d7:
         0f:c3:fe:d0:32:42:a8:5a:9f:01:3c:db:94:2b:cc:c8:a7:54:
         84:85:08:ef:ce:48:15:cb:ba:33:0d:e7:d6:fc:0e:c2:3d:78:
         3b:3d:42:6d:f1:0c:9d:6b:bc:2c:0c:50:c9:c3:1a:d6:a6:02:
         ec:35:d9:e5:5b:d7:c7:7a:29:73:17:38:0f:a9:df:93:77:a5:
         bf:56:2c:ec:20:2e:d8:db:7e:80:ab:9b:66:04:b0:3a:4e:43:
         55:2a:13:c0:5c:b9:0a:eb:de:0f:bd:e2:ce:1f:b3:6b:37:9c:
         db:82:14:66:f5:bd:75:6b:41:15:4c:b8:b4:de:8d:35:ef:c0:
         d9:b2:fa:0f:59:9b:1a:e3:45:c4:cd:0a:65:bb:99:99:86:8b:
         10:bb:8e:1c:2d:4d:94:d3:20:89:8d:e0:4d:6a:2e:15:e0:ca:
         ee:32:4e:8a:c4:96:e8:e6:14:8a:20:0a:69:cc:0e:ad:3b:25:
         76:85:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:58:16 2024 by rpki-client on console-ams.rpki-client.org