Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File:                     XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier:          5XMSOaS9gQh+d3NP1Hw8NybXYMA7dQjfFesrFvjA6fI=
Subject key identifier:   61:AF:53:7A:CA:1F:91:88:03:2A:98:5C:26:BF:72:59:3E:7A:CB:61
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer:       /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial:       018F874B0DCC9A49E729126FDF9A5C43BD20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: 9Mh_lHpaAS3LRZCn4YDWDWgVGqI.roa (hash: U1j5j+nmEHi5d6bk/nwvd/XPfejeX11l7HhCUbmF4HI=)
                          2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 7T0tsGg82m8QSDpcZhZrMFS1HVxSqLBqrKCH6AUUdD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0d:cc:9a:49:e7:29:12:6f:df:9a:5c:43:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=61af537aca1f9188032a985c26bf72593e7acb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:40:a6:49:b9:2e:83:03:7b:1e:3e:47:43:
                    da:bd:c1:f0:71:56:a2:b9:e2:8d:af:73:c6:81:43:
                    2f:db:01:14:91:94:c9:e1:7d:af:08:9e:64:c0:29:
                    86:d6:0a:d1:77:bf:9b:1d:96:b5:89:5e:ef:3b:01:
                    d0:6f:59:e1:6d:4f:1b:c4:5a:f7:49:0b:d0:fc:a9:
                    89:8e:55:06:ca:9a:23:c2:d2:9c:ee:38:27:a7:f3:
                    cb:09:aa:84:09:b0:3d:10:4d:6b:00:0e:34:0a:7d:
                    c2:ba:6c:9a:05:1d:5a:42:c5:1a:6f:0f:1b:1a:a0:
                    ec:1a:69:66:0d:4b:75:85:6c:5e:49:5b:9e:01:f2:
                    f2:02:1f:90:3f:5a:c2:ac:14:d4:dc:6a:f6:fb:05:
                    f7:e0:2a:9f:de:45:b8:39:8e:cf:3f:fb:c4:5c:90:
                    64:97:3c:2c:e9:28:14:26:35:8b:f3:c9:d4:22:75:
                    0b:79:0d:05:68:50:30:28:ce:5f:0b:46:4e:c3:c8:
                    80:db:bf:d4:32:0e:3a:01:33:ee:1b:19:ec:14:15:
                    a1:ee:03:81:27:da:ac:00:b0:b9:95:65:af:14:f1:
                    9b:97:a4:eb:56:11:dc:3d:40:13:70:aa:bf:38:f2:
                    d6:d2:b9:4c:c2:db:13:1f:8a:4e:1e:8f:af:85:44:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:53:7A:CA:1F:91:88:03:2A:98:5C:26:BF:72:59:3E:7A:CB:61
            X509v3 Authority Key Identifier:
                keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c8:44:4c:a3:cc:12:6d:df:fc:d6:e4:5a:d4:12:64:51:8f:
         50:09:b1:8f:3a:4f:9d:aa:72:5e:28:4b:39:53:4f:59:8b:df:
         9b:6d:fe:79:47:51:d4:a2:b6:d1:6a:d4:30:ca:84:77:d5:18:
         fb:9a:ee:32:a7:4f:c0:a2:c8:7a:d0:3b:38:02:c0:30:f3:3f:
         d9:bd:d4:71:de:0d:cf:ba:c7:9d:25:db:34:8a:fd:de:ab:2e:
         c1:ae:f1:3e:17:e2:b5:e6:13:3d:db:a5:85:71:76:2b:be:d6:
         67:f6:bb:ed:ed:58:42:d1:49:4f:be:ed:05:ad:2c:21:aa:35:
         b4:a7:c6:5b:6f:be:07:9b:9f:82:55:81:19:e5:8b:14:9b:b2:
         30:91:e4:05:99:63:3e:73:c5:ba:43:cd:ae:ef:04:e5:7e:c2:
         9d:f9:d7:32:bd:0e:be:4f:0d:9d:1e:62:49:63:38:09:b2:5c:
         26:fe:85:d7:27:77:3c:7b:af:df:69:c7:0a:2c:25:ef:44:fa:
         3d:e0:ea:61:8a:bd:6f:b8:49:5c:84:8b:fe:0a:d3:24:c4:68:
         43:8f:b8:52:4a:e9:05:ac:89:0a:ec:2c:64:8b:46:af:e1:91:
         c0:3c:d1:a1:e9:d4:30:4f:11:e2:ad:04:bf:9e:13:4c:25:9c:
         43:89:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:21 2024 by rpki-client on console-ams.rpki-client.org