Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          YI98JuBLbYfTRCfdmzqHbHh7ALA7q+SfsHzaibnnnMM=
Subject key identifier:   9E:28:E6:87:3D:EC:82:F3:4C:BA:62:C9:0A:1E:5D:EF:65:1D:6E:3F
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       018F874A020656DE91D3406F7149BA424939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:05 +0000
Manifest this update:     Fri 17 May 2024 16:02:05 +0000
Manifest next update:     Sat 18 May 2024 16:02:05 +0000
Files and hashes:         1: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: n7Ft78gQ2aST/WBZyWm2x/UW59twRDRp90TZnF5BwsE=)
                          2: sZmZMcCIuaFfPfZ5LyDD-D0LpUM.roa (hash: UxGwB74pP30MAmFuoHZvFDEzFafjRZgO61jqPzZ5mXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:02:06:56:de:91:d3:40:6f:71:49:ba:42:49:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: May 17 16:02:05 2024 GMT
            Not After : May 18 16:02:05 2024 GMT
        Subject: CN=9e28e6873dec82f34cba62c90a1e5def651d6e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:5e:ea:ae:e6:b2:7f:f7:fd:ad:e5:4e:88:
                    c1:54:83:f2:39:52:72:b6:f0:be:4a:4b:af:fb:c1:
                    f9:05:19:6c:06:84:1c:d9:d2:74:d6:c7:2e:e3:13:
                    a4:2d:ec:02:22:5b:78:2a:19:db:0e:44:8e:f9:94:
                    cb:89:e4:47:04:16:39:fc:ac:8d:05:a9:71:6e:2b:
                    ef:36:e7:4a:09:fd:00:b6:b1:d4:43:1a:b0:2c:e4:
                    42:77:8c:4c:36:71:b6:51:b7:57:76:cf:79:35:cc:
                    2d:7f:95:f3:27:1b:97:14:24:8d:af:b1:5b:b0:c3:
                    f9:ae:3f:c2:d2:0f:22:65:36:f9:04:d1:2c:e8:24:
                    11:72:05:d8:dc:a3:96:34:0f:97:6a:8c:ec:8e:3f:
                    0c:fd:be:ce:54:77:92:0f:29:a2:ad:51:8f:27:96:
                    9c:ab:12:36:33:03:3c:be:8c:fa:d9:25:8a:51:f7:
                    00:5c:59:22:8e:29:e2:f2:3b:e8:93:80:47:f2:82:
                    ce:48:82:b9:02:2f:40:71:ee:1d:72:a5:c8:cc:4c:
                    8c:aa:55:79:7c:49:e4:12:9e:ac:34:ff:87:bd:b2:
                    05:12:b6:7e:72:05:1d:aa:12:32:10:67:53:0a:f2:
                    ba:7d:79:8c:a3:3f:e6:95:95:4a:f2:ea:f1:db:63:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:28:E6:87:3D:EC:82:F3:4C:BA:62:C9:0A:1E:5D:EF:65:1D:6E:3F
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:ec:cf:f5:8c:3f:60:9f:d9:48:08:75:ad:fa:7d:72:5b:
         40:ce:d4:ec:2b:67:ad:b3:d2:87:54:3d:15:81:d4:02:82:3c:
         66:da:b7:18:71:cd:c7:19:1b:e9:e8:89:a5:01:c9:6f:04:1f:
         9b:58:c3:6f:23:8f:c3:2c:71:93:b1:2e:8b:5b:55:3f:3e:2a:
         c6:f9:81:ca:4e:91:96:ae:4b:88:d8:d4:5c:93:14:2e:b3:d1:
         11:1e:7a:6b:f5:1e:00:58:de:80:8e:29:46:b4:68:cb:4d:65:
         04:7e:17:7e:5f:b4:8d:25:3f:d2:6b:e3:3f:cb:d8:a5:4e:c7:
         00:d1:c4:11:6a:43:7c:29:ce:3f:e0:0c:ca:26:e5:16:96:ef:
         95:a5:24:95:21:26:e8:f1:6a:a6:f9:e8:0f:b3:1e:db:7d:ef:
         a1:d2:86:78:97:9e:20:7e:3d:98:38:2a:df:97:1f:d7:ef:8d:
         a8:45:a9:36:7d:12:5f:52:4a:d2:cd:1b:1b:94:87:01:10:ad:
         6e:1c:ef:8b:4f:5e:3c:4e:82:1d:7c:71:d3:44:86:18:bb:21:
         d4:e4:e3:45:a7:ac:98:2b:05:0c:57:b5:a4:08:65:31:3e:f0:
         bf:a4:95:1e:62:9c:78:67:30:4d:13:39:a1:2f:0e:be:aa:20:
         c9:3f:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:14 2024 by rpki-client on console-fra.rpki-client.org