Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          VOjYx3EI7Xqup7XBHJk/LCGkGT7P9XqfDn68RlwjHBI=
Subject key identifier:   08:B9:C4:8F:86:47:14:14:96:AF:83:DC:6A:69:E2:F8:07:22:F2:6F
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       018F8749F49FFB651153ABF2959E880857C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:01 +0000
Manifest this update:     Fri 17 May 2024 16:02:01 +0000
Manifest next update:     Sat 18 May 2024 16:02:01 +0000
Files and hashes:         1: 4LfQIyNS3wgm6LAXqN9CIwg1no4.roa (hash: wlodZ+XO9DSSfHWD8e+4FGfD1EaEbct4hhmmo+/1Dhg=)
                          2: FZLlY1xNtsRczC17H8P2a-lFzag.roa (hash: BlDc8axFMwRKM8Fzrz5Gqnrzw1Inps23TDkau8UeIKQ=)
                          3: W5sm7cvxU1BnnQ88R_KAVoph7FA.roa (hash: uNnrMxIVi4AwJKkjA34LwVfPS8a2KMSKWs5uSaCaf5o=)
                          4: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: eqQTOuoNkD01asZdjR8+iwqNzeZEuQIPsh4lEIhSx8o=)
                          5: x1UwtH740BQslyINuqtIZRrGmrA.roa (hash: mTEAForReWf/++kNhtzK2fbMg3Fh6KY1O9DYPxifARo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f4:9f:fb:65:11:53:ab:f2:95:9e:88:08:57:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: May 17 16:02:01 2024 GMT
            Not After : May 18 16:02:01 2024 GMT
        Subject: CN=08b9c48f8647141496af83dc6a69e2f80722f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:56:53:bc:77:57:cf:17:b2:07:c2:bf:3c:
                    ff:14:07:76:0b:0d:6e:0d:de:87:df:08:86:58:27:
                    db:af:d9:d9:7e:ac:37:8a:f4:44:eb:fc:d6:52:71:
                    c5:40:96:92:54:bd:95:5d:d7:8e:84:53:1e:c4:05:
                    6f:82:7e:76:49:bf:f9:8a:60:cd:d1:55:84:ab:a5:
                    fb:6a:08:eb:e9:70:c4:3f:4d:65:3c:cf:d9:28:38:
                    16:5e:b2:a6:9d:f2:fc:3b:a7:58:5c:c1:92:f8:30:
                    35:49:73:52:17:6b:22:5e:3f:6d:6d:88:e9:56:a5:
                    f0:a0:b9:02:2d:b5:fd:06:1b:b2:3b:3c:f1:fd:df:
                    55:e6:75:a8:a8:ac:4b:52:4d:20:d3:78:1c:a0:2f:
                    20:bf:fe:86:fb:22:22:30:a1:c9:db:6f:fc:10:06:
                    6f:7e:7f:77:a8:72:a6:64:85:b2:f7:27:0a:60:fa:
                    24:c5:8d:ff:e6:1a:39:da:59:45:c2:c5:9b:44:10:
                    e7:df:8c:be:8a:b6:fe:2f:d4:67:29:dd:ec:99:a9:
                    ee:6b:37:d1:71:69:df:eb:cd:76:e9:cc:0c:3c:c8:
                    0b:61:87:e6:c7:48:b9:62:e6:1f:49:25:41:fb:cd:
                    e7:4f:8e:91:6b:0c:9f:85:ce:10:02:35:a7:a5:35:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B9:C4:8F:86:47:14:14:96:AF:83:DC:6A:69:E2:F8:07:22:F2:6F
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:32:b4:b2:a5:86:41:2d:00:2f:ab:47:4a:f8:57:68:1e:6c:
         5c:6c:9d:4c:52:10:94:98:6c:15:f7:b7:72:ce:a9:7a:0b:ea:
         b1:6c:92:5a:1a:95:fd:46:31:41:64:07:cc:b6:58:3a:fe:2e:
         38:43:eb:8a:c4:25:bb:a2:7f:95:be:51:da:99:ef:60:8f:b7:
         15:c3:e1:c6:99:9d:be:56:0b:c6:b6:b8:73:e0:0d:1b:6e:ca:
         0e:7b:f0:4e:98:cb:2a:75:5b:cf:c1:8d:f6:10:b0:7d:5f:6d:
         f5:a6:77:86:64:5a:88:03:27:71:6a:89:f9:97:ca:b9:59:7b:
         d8:63:ae:5a:76:ca:65:28:63:1a:e4:09:16:4e:8b:a3:a9:63:
         1e:cb:2b:87:12:47:6c:60:f7:20:1d:47:a2:93:0a:ae:89:08:
         dd:63:b4:d2:71:fc:8a:68:9a:f5:b7:2b:0f:09:b1:ad:8e:bd:
         a6:d5:94:4d:76:3e:64:a3:d9:af:b2:a7:76:69:4d:d6:f5:07:
         01:f5:2d:ff:8a:2d:fa:42:8b:28:80:24:17:0b:01:32:0a:6d:
         f8:1f:ef:7f:7a:4f:c9:e3:9c:1d:22:66:d4:19:87:21:20:a3:
         64:fe:84:68:46:e1:03:11:93:6c:c1:9d:f8:55:68:2d:59:5f:
         fe:00:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:14 2024 by rpki-client on console-fra.rpki-client.org