Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File:                     guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier:          ulB3OMJvH9L0Paq4G1+4P4l+2Dy+1vyAhJ6iMPTbpG8=
Subject key identifier:   C6:80:16:64:C1:52:7D:6F:D8:7E:49:B7:4B:CD:88:9B:81:8F:BC:98
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer:       /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial:       018F87B6655855915B8819C79FAB924E6F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: TZ9nI7PNWsFJVTyYcbBJE2Y3L7s.roa (hash: blf20sYxiiLbd3PcfFjue1C3dlRJyzHB9TFJNVnEglI=)
                          2: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: Qm2XTwFfbaPYns04f0vGYjbc67F/ryMLZkrLTnRK5IY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:65:58:55:91:5b:88:19:c7:9f:ab:92:4e:6f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=c6801664c1527d6fd87e49b74bcd889b818fbc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:42:c0:74:9e:cf:23:61:75:93:30:fe:fd:
                    12:99:82:41:80:20:da:b3:12:bd:50:d2:f9:27:a7:
                    ca:ff:3f:fd:58:68:99:0a:01:54:e2:48:ad:d2:cf:
                    ff:ff:b4:12:af:0a:98:c6:51:b7:6d:d2:32:08:53:
                    3b:13:5d:54:b9:b0:d1:56:d5:32:24:bd:e9:1a:e3:
                    dd:83:7b:42:8c:4b:b3:b5:65:0e:4e:b8:bb:78:cd:
                    6a:e4:4c:bb:cf:b9:0e:cf:ab:fb:7a:f9:dc:b4:af:
                    43:86:cc:3c:3e:2a:b4:c9:a5:b5:00:e9:76:e8:c9:
                    3f:07:dc:d4:e2:b2:fb:c2:cd:28:0d:3f:b6:a5:c8:
                    90:e7:3c:0d:bc:d8:ab:62:20:48:ee:c0:20:d2:e9:
                    3d:a2:8d:fb:0c:fa:18:b4:ca:32:f7:d8:bb:21:8e:
                    40:e0:46:11:23:90:c2:0c:3b:c8:9c:5b:ae:f5:a3:
                    3e:55:7e:90:be:a8:22:6a:6e:18:6d:b3:45:30:3e:
                    28:78:f9:09:b9:4f:90:52:d0:b6:01:4b:e2:af:c1:
                    cc:5f:17:b6:35:2e:35:bc:85:2d:e2:70:10:d9:81:
                    90:d4:ab:ab:ec:ca:e4:1b:a6:b1:c0:cb:50:f3:b3:
                    9b:3e:7e:dd:8a:a9:21:f5:42:e3:8d:e5:60:59:3f:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:16:64:C1:52:7D:6F:D8:7E:49:B7:4B:CD:88:9B:81:8F:BC:98
            X509v3 Authority Key Identifier:
                keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:af:71:84:f4:d8:c0:01:b8:b7:fb:ac:b3:7f:ec:e3:82:fe:
         57:16:c6:2c:cd:4b:61:df:f1:c6:f3:b3:f3:1b:f9:c8:d1:43:
         8c:0a:56:a6:c7:6e:75:82:ef:de:cf:fb:95:5b:c0:91:51:1c:
         55:59:aa:d8:85:3f:87:ef:25:ce:1c:94:47:3a:93:f8:0c:06:
         74:5f:9c:4a:14:35:6d:d9:32:cb:83:9a:05:a4:e4:4c:ee:2f:
         db:19:de:3f:19:23:df:d2:3a:80:13:07:29:7a:e7:01:c2:df:
         e6:24:bc:7b:23:07:27:8a:6c:26:31:4e:1c:2c:db:29:f0:1e:
         5a:7e:ed:91:4b:19:cf:de:23:f1:92:6b:c3:97:20:3f:fa:b6:
         5d:ad:19:70:77:1f:2c:b3:16:b4:83:39:7d:79:06:8f:5d:e3:
         aa:8a:66:73:6b:3c:55:61:c4:79:11:e1:0b:23:24:d9:64:a1:
         7d:6b:a2:4d:2e:d3:e1:57:0b:64:e4:80:15:65:8e:69:a4:6e:
         e8:3a:07:ff:7c:81:eb:53:2a:39:3e:39:b4:6e:f4:e3:b0:f8:
         f9:97:52:69:61:e7:aa:ec:24:47:da:1b:ef:05:28:a8:19:43:
         b6:52:cc:66:44:de:dc:f1:d2:fd:81:1d:ee:17:20:37:ca:ba:
         cd:49:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:12 2024 by rpki-client on console-fra.rpki-client.org