Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File:                     nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier:          gf4s+xF/GrnBTSMPE/UFLWadAv+MXWHRtqioybmIVNo=
Subject key identifier:   65:32:67:C9:73:0C:1D:5C:9B:85:40:31:A5:04:7C:9E:8D:CA:A0:80
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer:       /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial:       018F87491AE53EBA5319FA6696E31B1C451A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: Q6S67dUtQlrlYptIoghLLcauLms.roa (hash: LdBMFn1GdF4yFbRHb1cfXRR//0d9C25uFjgCDDJn5BE=)
                          2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: er1soDrjqnxqQrHrF6kb+1dx9akf68D392t2F0UCiE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1a:e5:3e:ba:53:19:fa:66:96:e3:1b:1c:45:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=653267c9730c1d5c9b854031a5047c9e8dcaa080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:0a:02:38:67:e3:00:1a:1a:97:c8:54:ed:
                    90:29:3c:73:17:b5:fc:3e:8d:90:7f:3f:20:28:dd:
                    0a:a8:fb:f5:25:1e:97:95:de:be:57:27:cb:fd:e0:
                    20:6a:77:9f:aa:cf:1a:65:62:3c:69:e5:7e:37:6d:
                    ab:d9:45:b0:8c:91:ab:1a:31:ab:64:00:c9:07:53:
                    c2:b1:7a:6f:4e:02:49:10:6e:e9:4d:09:53:d3:53:
                    29:cd:e0:14:5a:ca:71:85:e3:7d:eb:95:a0:12:0a:
                    d1:90:2f:1f:31:cc:df:2d:08:45:09:90:1e:35:ae:
                    dc:58:1f:ed:21:e7:58:97:c5:5e:8c:a8:c9:b4:32:
                    00:97:7d:78:08:78:7c:91:b6:e0:6a:c6:3c:2c:a4:
                    92:ae:d5:c5:e8:a9:2d:80:38:3e:a8:14:88:10:ae:
                    82:43:c5:8d:e8:e4:2d:df:97:41:c0:6a:9b:31:7d:
                    58:f1:83:4c:5a:4e:9a:0d:b8:3c:80:3d:03:4d:7c:
                    b0:23:33:55:5b:a7:f7:fe:4a:d2:2b:a0:31:d4:8c:
                    6f:94:af:aa:0e:17:3d:23:75:e0:ca:03:79:47:64:
                    8e:69:72:8a:b0:bd:1f:cf:b4:72:5e:09:fe:43:1c:
                    46:8b:31:0a:2b:02:fe:50:37:e5:23:46:1d:c8:17:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:32:67:C9:73:0C:1D:5C:9B:85:40:31:A5:04:7C:9E:8D:CA:A0:80
            X509v3 Authority Key Identifier:
                keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:99:0e:56:cc:80:2b:56:ba:20:63:b9:ce:a3:e3:5f:69:1e:
         06:1c:b0:59:ad:12:c2:54:72:00:6d:bf:b8:2e:7b:90:2d:28:
         fe:cd:e5:82:17:16:ea:06:b4:d3:63:d4:e3:ab:58:6b:c4:95:
         e0:c6:74:e5:4e:3d:e4:8d:77:12:bb:50:8a:9d:1e:0f:b4:c1:
         54:3d:67:e9:b7:39:de:e9:f7:42:c1:00:02:fe:72:be:88:7f:
         a9:7d:4f:3a:b2:29:9e:f1:d7:eb:72:b3:b8:6c:67:6d:07:ed:
         df:c7:70:47:00:5a:d2:65:ad:c8:4b:0c:12:aa:a3:41:2c:96:
         85:90:d6:b3:f4:d0:1d:d8:9a:9d:7e:6f:43:9d:15:d1:e2:ba:
         c8:ed:a7:91:a8:2b:dc:5c:ec:f5:2f:2a:a6:94:5b:a8:ea:66:
         7b:b4:52:6f:73:5a:21:15:7e:ea:9a:68:d7:1a:a8:40:75:43:
         7c:6b:f6:c5:e1:9f:ae:9f:89:10:2f:69:1a:d6:fc:58:91:af:
         11:e2:f7:54:fd:9e:eb:bc:64:20:37:d9:8d:55:8f:07:bc:db:
         e1:5b:e2:3f:09:9b:e3:f5:52:63:46:12:5c:6a:06:73:d1:6f:
         de:ad:5f:e9:18:af:17:b3:81:a1:73:9e:a2:2c:f4:0a:0f:5c:
         39:08:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:03 2024 by rpki-client on console-fra.rpki-client.org