Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File:                     dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier:          DNmFNzzLVJuTNcemc9oOlTzUXSZWqS0N2xK4fXLTlJs=
Subject key identifier:   66:A7:A8:58:5F:EA:47:38:6F:41:DE:F4:14:AA:BF:A6:7B:9B:17:73
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer:       /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial:       018F88248DE992BD2944F69A3D625002581E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: zbB/ODkRWy27MgImzgszRxN3nXw/Ql2G4QNRn0+W+gY=)
                          2: gbci5MuBLA9ma6kHo_vEo3lrk2k.roa (hash: iAV6XIsSP3oQUMZVUsmjptl9YcPItxVO645U4t6TKJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8d:e9:92:bd:29:44:f6:9a:3d:62:50:02:58:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=66a7a8585fea47386f41def414aabfa67b9b1773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:3e:2a:6b:2f:da:b2:0a:e7:b3:49:76:7d:
                    10:b7:90:7e:3a:ca:14:27:bd:31:60:91:96:15:b3:
                    e6:b8:04:c1:85:d3:4e:e7:c8:7e:c6:e5:0a:33:09:
                    78:11:ab:11:e6:60:0a:98:0d:06:9a:9b:de:ff:07:
                    fe:02:4c:d1:f1:4a:3b:70:6c:d4:f6:a0:4c:28:a1:
                    30:1b:51:dd:2a:2f:87:44:e0:70:15:56:0b:61:05:
                    a2:62:12:3a:ff:a8:f7:8a:e7:50:4e:26:3a:5e:78:
                    67:f1:90:0f:7e:07:76:34:1b:f5:7f:8c:da:a6:28:
                    9e:34:27:7a:77:45:5d:65:e6:91:b5:49:af:88:89:
                    17:c7:4d:cc:4a:34:ce:09:bc:f8:f1:81:7b:8a:d0:
                    26:5c:84:bf:74:17:34:ae:3e:5d:89:0c:b2:13:aa:
                    86:5c:00:05:11:a9:36:54:75:70:0c:b2:52:70:ea:
                    f4:d2:e1:6c:32:ba:af:9c:29:29:46:08:57:ba:21:
                    b1:fd:a7:57:d1:e4:b9:25:c8:12:c3:2a:a1:ee:f2:
                    15:51:ad:b8:ce:31:0f:d8:86:f9:13:4c:e6:01:da:
                    00:17:4c:0b:e3:37:da:06:7f:74:3a:bb:01:cf:03:
                    a9:93:2e:84:df:29:97:ca:ea:10:aa:ff:ac:0d:ec:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:A8:58:5F:EA:47:38:6F:41:DE:F4:14:AA:BF:A6:7B:9B:17:73
            X509v3 Authority Key Identifier:
                keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:0b:ae:dd:a4:ac:5b:89:80:99:ad:00:69:76:5a:c6:0c:
         ea:2b:ea:f3:cc:8d:b2:ce:e1:7f:95:65:61:42:7b:34:ca:85:
         e6:8c:c1:36:d7:d5:e5:ef:f3:88:70:1a:b5:59:47:5c:91:18:
         41:17:82:43:be:d3:df:7e:d9:76:c4:7f:ec:2f:80:58:bb:a8:
         37:c0:cb:8a:81:08:02:c4:9c:df:2e:b9:a6:17:bb:c0:5a:d2:
         e5:d4:5c:8c:59:f8:37:af:8f:57:18:f5:1d:32:7c:b9:56:26:
         3e:d9:a8:a6:91:3c:54:46:45:90:18:b0:90:f6:74:ae:01:e5:
         f7:41:e3:31:21:73:09:32:92:96:c4:a8:ea:20:88:37:ac:76:
         08:57:ff:4a:1d:19:17:1f:20:f7:be:ff:8f:dc:d4:8f:b5:d3:
         c1:d4:d2:3f:e9:14:a6:b5:65:95:fe:27:4b:1b:9a:e2:84:09:
         60:e2:34:5f:59:1e:79:c5:40:46:8a:a4:ed:f1:65:08:17:65:
         1f:4c:4b:5a:a9:28:4f:7d:aa:38:c3:1d:02:7c:38:16:01:e0:
         bc:18:93:72:c9:14:7e:3b:8e:19:a2:fb:93:e9:f5:77:0f:60:
         b5:ab:fa:c7:bc:c1:20:0a:af:3c:48:41:61:f4:72:04:1d:4d:
         65:6e:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:00 2024 by rpki-client on console-ams.rpki-client.org