Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
File:                     l0j8087s244EpSSvlnTLWIA_9mg.mft (raw, json)
Hash identifier:          mY8T+Y1+/VzvIosLkrM4McgxOS42/P3ZtvaTekmkXp8=
Subject key identifier:   B2:D6:6F:4F:A7:DF:B6:E6:38:93:B0:86:65:A5:2E:CF:D1:42:C3:A1
Authority key identifier: 97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68
Certificate issuer:       /CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
Certificate serial:       018F87B67A88B37B9F35F7D6BDCCF560E1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: QuOe09itvYFdHIFF4-8IFbtRhxs.roa (hash: hx1lHbX9GncY6T8Dq1Qnn2UttN9cffXfQm7iJJ3LqwE=)
                          2: l0j8087s244EpSSvlnTLWIA_9mg.crl (hash: sdn5mt+QQIspnSoXGvVK2wH9LpOi5uOVt6TSmjZWJ0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7a:88:b3:7b:9f:35:f7:d6:bd:cc:f5:60:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=b2d66f4fa7dfb6e63893b08665a52ecfd142c3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:30:d7:70:27:ae:9f:d2:8c:a3:35:d2:5d:
                    12:f9:6b:38:f2:17:9f:a2:70:ba:f1:aa:69:b5:52:
                    13:a0:e2:e0:55:e5:83:10:18:35:2e:18:bb:23:7a:
                    63:4b:7d:7d:5a:63:d2:b2:43:04:2a:3c:62:6d:f7:
                    1c:b3:f2:ce:b7:f0:56:17:89:e4:d5:ae:12:12:80:
                    5a:8b:cd:f2:3b:06:c6:ef:d6:17:3f:8b:07:45:ce:
                    d4:b3:09:9f:0e:99:79:e9:6b:f9:d2:5c:b7:54:cb:
                    96:cb:b1:20:e8:6b:97:d9:63:45:6e:43:dd:d1:7f:
                    bc:b8:af:da:f4:b8:a4:c0:17:e8:48:b7:37:90:d1:
                    0f:bd:06:70:be:c5:08:8a:6f:a1:97:6c:36:6d:3f:
                    ec:db:aa:f0:2e:6c:67:96:4a:9c:37:7f:5a:1b:8a:
                    fb:18:36:31:77:18:dc:89:4b:fb:a7:da:6e:7f:08:
                    c1:1d:41:52:f6:79:1b:60:91:3e:a9:ed:62:8e:52:
                    15:e4:c9:a8:70:57:43:be:e0:1c:cd:6c:11:74:23:
                    86:27:f0:c4:e4:75:14:21:81:5d:a1:66:37:53:a6:
                    18:53:41:e3:74:81:27:3a:9f:8c:23:d8:67:b0:de:
                    f9:09:40:27:0a:85:1a:a6:e0:bf:f9:e4:12:f6:fb:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:6F:4F:A7:DF:B6:E6:38:93:B0:86:65:A5:2E:CF:D1:42:C3:A1
            X509v3 Authority Key Identifier:
                keyid:97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:63:fa:24:04:4b:e2:e4:88:1a:9a:a9:aa:24:70:01:b8:
         c6:18:48:2b:69:51:3e:8e:3c:a5:f6:76:d4:c7:1a:b9:fa:62:
         df:80:b8:ac:fb:4c:31:ce:02:e9:d1:0b:81:49:05:f0:3b:6e:
         37:fd:23:fe:07:d4:df:d0:95:ba:b5:bb:49:27:24:46:d4:05:
         19:45:da:bf:f9:43:8e:9d:07:25:24:93:f3:84:e2:32:01:5b:
         95:31:e1:ce:8b:24:f9:14:8b:80:ca:62:71:33:13:a8:3d:7c:
         72:e9:5a:f9:74:46:26:fe:c7:da:f3:bd:41:07:b8:15:13:19:
         15:4f:2a:eb:a3:ce:d0:64:62:bd:5a:f5:91:66:bc:d8:ce:10:
         6b:3e:ab:d8:fe:60:0b:43:95:d4:47:c9:92:d6:2a:40:ff:2f:
         1b:56:5b:d4:bc:0a:9d:01:29:0a:8f:c2:8d:3e:da:dd:95:04:
         10:5c:a1:64:48:3e:e1:bb:7b:e9:39:f5:0e:a5:90:c1:13:f5:
         a3:9e:8e:7b:39:bf:0c:bf:0f:79:f2:90:44:05:45:75:0d:e9:
         99:16:25:00:91:b1:27:dd:23:ee:4c:63:6f:a4:3a:bd:28:24:
         c4:48:55:f1:12:2f:5a:b6:50:44:19:33:58:f1:ef:a3:ed:98:
         dd:1f:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:15 2024 by rpki-client on console-fra.rpki-client.org