Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File:                     sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier:          g9RI79RpS+zU+clhuEehbyZT665rz4c1LSXk921z3l8=
Subject key identifier:   23:A2:AC:E3:13:44:10:50:2B:27:33:18:C2:61:77:7A:C3:EE:D5:16
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer:       /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial:       018F88243A9CA7CC4F9A0558BA7286B08E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: dbeuII1rFGIzmUVTr/URGyR4Z0IM+yzNiE1lkalpaCo=)
                          2: yTizMB-RNGdc1mu9UuKgPjhNLVo.roa (hash: v/Cj3sYAQsQuwLsLaiwTe5tUNhnyd1t3plqa9yGJ72w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3a:9c:a7:cc:4f:9a:05:58:ba:72:86:b0:8e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=23a2ace3134410502b273318c261777ac3eed516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:64:1a:6e:9e:29:1f:68:ba:eb:b7:11:9f:
                    df:82:4f:bf:ad:02:44:bb:ad:5b:16:0b:03:0c:34:
                    f5:d4:6d:d1:d5:0d:26:6f:b7:a5:62:2f:57:71:3b:
                    76:11:ea:58:f2:3c:d8:ac:50:f7:03:6b:16:a5:5f:
                    16:2a:be:20:ee:17:df:b3:5c:3d:b3:75:ee:48:30:
                    42:e6:85:e1:63:52:d3:5e:55:4e:0d:05:24:c6:fd:
                    54:94:86:bb:d3:e9:9d:9c:ed:3c:74:6f:e5:7f:dc:
                    b9:76:c7:4c:86:7d:c8:32:57:fb:81:c1:4b:7a:a8:
                    9b:ff:34:de:53:f5:d6:40:6f:87:d7:af:5b:3a:e7:
                    9a:eb:9b:20:96:c5:80:81:94:ec:d2:d6:91:c8:94:
                    c3:e5:53:50:ea:d1:a7:fc:56:a3:b1:ea:de:76:83:
                    09:46:97:e0:b1:41:ad:60:98:5c:bd:c6:af:85:3b:
                    a7:49:3e:4d:ba:47:5e:1c:05:b7:2c:13:b4:d1:d9:
                    95:34:d3:3e:00:4c:0f:50:df:05:56:14:28:0d:29:
                    c6:2e:6c:c8:a7:c0:0f:00:e4:d8:76:cd:7e:fd:87:
                    32:81:0b:36:80:98:39:39:84:f8:02:a8:28:b7:58:
                    72:d3:4f:ad:54:22:1d:8f:2c:69:3b:74:cd:54:a6:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:AC:E3:13:44:10:50:2B:27:33:18:C2:61:77:7A:C3:EE:D5:16
            X509v3 Authority Key Identifier:
                keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:76:4d:e0:d5:fd:48:b2:db:fc:25:d9:cc:05:14:a2:e5:3c:
         83:33:18:34:d1:46:5d:29:ca:de:27:64:c4:b8:7a:18:7e:7b:
         18:60:01:7c:75:b6:ec:44:d8:7c:5f:3c:fa:b9:63:5a:99:07:
         a9:58:f6:1d:d4:07:af:9a:41:c0:37:0a:b1:7f:a9:ce:88:b8:
         1a:0e:f2:56:79:91:c0:bf:f1:16:ed:e0:de:d9:d3:d0:84:d8:
         40:b4:00:41:4b:65:76:03:bd:04:49:3c:33:44:7f:9c:0f:34:
         69:5d:e9:c4:31:ef:58:c5:35:b2:07:fb:de:e2:ce:40:03:c0:
         23:ae:ea:4c:68:07:70:dc:b4:c6:5d:ee:8f:92:ad:a5:94:e8:
         6b:0f:a0:8b:aa:f0:e6:72:c1:2c:19:1e:9e:54:82:71:58:47:
         3a:53:b3:b9:ce:a5:84:8f:ea:d4:0c:5f:b7:c0:ad:62:f7:cc:
         2c:fe:10:1a:e3:ff:5a:40:71:59:9b:ae:0b:34:75:4b:cc:46:
         2b:cd:08:ba:bc:37:3e:ab:d3:3e:19:05:6c:01:2a:ed:1e:41:
         50:c6:95:e1:ba:5e:24:43:f3:aa:ee:51:0c:fe:6a:85:1d:e5:
         3f:2b:96:b0:31:85:8f:f9:62:d7:4f:1e:30:e8:b9:2c:9a:32:
         9c:2a:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:14 2024 by rpki-client on console-ams.rpki-client.org