Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File:                     t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier:          nwOx4AUxkDQCo5ryo0+NPu29OvE+NQdFWjcE5cpva6I=
Subject key identifier:   5E:D6:7A:A5:7A:99:41:2F:4C:B3:E4:29:8B:F6:9D:5C:00:F7:93:D6
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer:       /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial:       018F88926F3F05F24D23A70408BADA99E638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 22:00:49 +0000
Manifest this update:     Fri 17 May 2024 22:00:49 +0000
Manifest next update:     Sat 18 May 2024 22:00:49 +0000
Files and hashes:         1: j2M35p28kfSnkuoJTe1JphP45zs.roa (hash: iRJUCuRuI5L01L+QW6Nj6E1OMo66571pfxBbF9sVPZ4=)
                          2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: 2jDv1bGPQPgvxrC3r7oiPnZ+GSRmlosixDlIi6B67xQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:6f:3f:05:f2:4d:23:a7:04:08:ba:da:99:e6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
        Validity
            Not Before: May 17 22:00:49 2024 GMT
            Not After : May 18 22:00:49 2024 GMT
        Subject: CN=5ed67aa57a99412f4cb3e4298bf69d5c00f793d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:3d:54:c4:c6:e5:bc:2f:7f:45:b6:03:4d:
                    e9:bc:eb:f9:c7:2e:b9:38:90:8b:fd:b5:68:02:d2:
                    f1:4e:1d:65:b3:b0:58:b2:41:ff:4a:85:12:ab:ad:
                    3b:62:2e:fb:86:d1:35:3c:31:b7:b8:01:01:d1:22:
                    a0:d5:7c:4a:5f:a1:81:51:ca:96:37:6a:78:08:e9:
                    ef:47:06:d1:d1:43:91:8d:7d:76:8a:19:c1:3d:be:
                    a4:62:fd:95:27:2d:70:f8:7d:22:23:5f:2d:1e:20:
                    c6:7f:95:8e:f2:a2:75:75:53:b3:de:0c:47:23:31:
                    65:bb:ac:30:04:6d:64:1a:86:ee:d4:e0:8c:a4:53:
                    68:a7:56:6e:f1:ea:c7:cd:10:58:39:7b:ef:7c:ed:
                    13:d6:8e:e5:17:bd:66:cf:3b:db:24:fb:5a:91:a7:
                    00:5c:4e:ed:1d:76:02:7d:90:4d:06:6e:37:e6:1d:
                    1a:93:db:4d:23:3e:ad:38:59:ad:26:ac:b6:35:72:
                    f5:d4:74:59:e7:d1:7f:d9:df:bf:d8:cd:a1:50:c4:
                    02:6c:1c:e5:ba:ba:e0:5a:ab:0e:13:08:fd:9a:2d:
                    5c:f1:9a:8a:70:a5:b9:b9:fe:7d:f2:db:f7:08:46:
                    c5:39:78:98:84:a9:b5:d3:82:c6:6f:fa:b2:f3:91:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:7A:A5:7A:99:41:2F:4C:B3:E4:29:8B:F6:9D:5C:00:F7:93:D6
            X509v3 Authority Key Identifier:
                keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:e8:e7:68:87:b5:08:2c:37:02:ca:30:dd:ee:d5:5e:14:
         3a:af:b1:4c:44:6a:13:88:1d:db:ee:fe:34:85:dc:a8:64:24:
         64:59:3a:ea:0a:da:16:91:6e:90:b4:5f:20:d8:ab:97:86:10:
         11:ba:6c:79:9b:b7:9a:4b:50:8f:cc:e9:45:b4:08:b2:bb:8d:
         cc:50:00:91:32:ce:6c:ce:ac:87:8c:bb:e8:3f:db:2d:8e:ca:
         29:a3:63:d0:06:d9:c4:21:b4:d3:8d:89:ce:11:74:05:46:66:
         2c:82:03:32:c3:b7:7b:34:38:7b:58:30:11:32:5c:4f:c7:48:
         98:c4:87:2e:c8:51:bf:bf:3e:19:f8:54:d5:90:99:fb:51:90:
         58:3e:bc:e4:60:b7:62:cd:fd:f6:06:d7:90:bb:67:1c:d9:c9:
         4e:64:8b:7e:71:3f:47:3c:51:dd:e3:d6:c1:17:2d:f1:8d:fe:
         c4:c4:19:ef:1a:8a:b8:e1:56:31:6c:f0:3e:ce:53:c4:17:1e:
         f6:1d:5b:88:07:26:dc:ac:26:9b:85:3c:0d:b5:4a:22:bd:61:
         20:b2:7c:be:64:67:12:e0:98:1c:a9:fb:28:22:8e:9d:17:2d:
         7a:49:69:2a:ae:6a:72:81:0c:41:7a:bd:3f:9b:7d:c8:f3:68:
         09:43:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:51 2024 by rpki-client on console-ams.rpki-client.org