Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File:                     pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier:          2EQWeoNf/2Z3QInlu7oluxJL1QIkZw902qbKkyItTaI=
Subject key identifier:   12:E0:6D:B3:AE:BE:F2:4C:5D:4A:DD:42:BB:C9:D0:DB:D3:B0:5F:26
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer:       /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial:       018F8937932937B9BC10F6F96AEDED67EF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:01:11 +0000
Manifest this update:     Sat 18 May 2024 01:01:11 +0000
Manifest next update:     Sun 19 May 2024 01:01:11 +0000
Files and hashes:         1: 3PhEpra73rPdyQ5Ye9g59msFyRQ.roa (hash: CZ/Z/E34zji5y3cxLZh0KN0nRSV3LzX6+OxR+Mdf23w=)
                          2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: d5E3299DdzzYEyERCiy7VTmFklAfoTDXw/fcKDUY7SQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:93:29:37:b9:bc:10:f6:f9:6a:ed:ed:67:ef:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
        Validity
            Not Before: May 18 01:01:11 2024 GMT
            Not After : May 19 01:01:11 2024 GMT
        Subject: CN=12e06db3aebef24c5d4add42bbc9d0dbd3b05f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:f3:24:56:1c:65:ed:16:b7:51:3f:b1:01:
                    0f:81:f0:41:19:98:e7:2d:a1:d9:2a:92:7b:7b:8a:
                    ee:1b:c2:a2:6b:f5:4d:7c:66:32:fa:43:77:6b:54:
                    c6:96:86:33:47:c4:35:88:1b:bf:f3:5e:74:f1:07:
                    67:93:97:06:bb:4e:10:96:10:34:61:0e:a1:2f:fa:
                    f9:32:fe:2c:4f:1b:67:81:49:f7:67:28:cd:10:3f:
                    c1:dc:11:65:80:21:8f:f6:3d:48:43:62:d1:0e:6e:
                    5d:da:33:d2:a5:f2:bc:91:23:2a:9c:d8:02:fc:2b:
                    c3:b4:5f:92:6a:c7:62:90:2a:9d:7a:72:bb:71:67:
                    c3:b8:da:1e:46:74:2b:5b:73:42:a0:5a:e6:23:6a:
                    66:93:f9:b1:37:07:f2:b8:20:f8:ba:42:c1:97:81:
                    71:98:ee:29:af:f4:b3:a1:22:39:5e:99:d1:d8:7b:
                    89:b8:fb:90:35:e9:68:3a:67:24:3f:6f:6a:51:ca:
                    c8:78:43:93:ae:c4:4c:70:0d:55:2f:18:50:7d:e8:
                    57:cf:f4:74:b7:5e:6a:a0:a3:04:5d:a6:d4:75:2a:
                    9b:b2:07:74:49:0a:93:53:12:ee:e1:04:9b:58:f9:
                    ee:db:6b:68:75:6f:e6:d3:c4:bd:67:49:d6:2e:51:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:6D:B3:AE:BE:F2:4C:5D:4A:DD:42:BB:C9:D0:DB:D3:B0:5F:26
            X509v3 Authority Key Identifier:
                keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:8c:e0:34:61:20:c5:e3:2b:0c:d6:9d:e2:53:85:93:d2:
         5d:5b:19:8b:57:e5:29:9b:46:10:fc:42:32:d5:5a:36:d6:83:
         bf:a0:91:c7:42:6e:13:de:01:66:14:18:fe:ab:fd:1f:c6:52:
         73:18:00:4d:32:7a:7b:d7:95:dc:c9:1c:88:06:e4:72:94:94:
         85:26:52:0b:bd:f3:08:d9:67:60:5f:9f:17:0b:99:49:c8:01:
         c4:9f:1a:b4:88:94:27:1e:c7:f7:88:2c:5a:61:e5:42:39:5c:
         d1:2c:43:24:f5:e2:a5:2f:00:9b:9b:75:27:49:a0:89:92:8b:
         f6:ae:cf:b5:4c:44:7f:41:dd:49:28:c1:87:03:59:65:66:ec:
         fa:6b:eb:c6:2c:c5:7b:5c:bc:a3:f5:93:99:9a:42:9c:23:c9:
         74:87:60:16:df:b7:df:25:28:54:18:4c:34:6b:2b:be:c1:ad:
         9b:46:f8:6d:7b:e1:e8:c7:09:cc:c9:d8:bf:d9:e1:bd:37:39:
         f9:7a:ae:05:80:ff:d7:74:5f:ba:17:e4:c6:26:4d:1e:e4:dd:
         ca:cf:54:78:d9:eb:c3:65:96:fa:cb:92:60:b0:be:4a:f6:2c:
         62:3d:47:6a:e9:6c:29:af:d4:05:d4:3d:73:e8:2b:4b:3c:16:
         89:b8:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:44:41 2024 by rpki-client on console-fra.rpki-client.org