Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File:                     R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier:          mxHQtgyJ8PoDy8yC2xyuY4A+X8dPdQAtUbldEApEXhc=
Subject key identifier:   9D:63:67:D3:C3:E1:7E:1A:7D:F0:AA:FD:37:72:26:36:F7:BE:A6:BA
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       018F87ED0E1B5AF1D8F657EF5296819B3A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number:          0137
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: KqMxRckrH6WOT1C93pHEVg-lLYk.roa (hash: 3qHSSUSEIC5E1zxT8rJpxovBhRPgIYS/dngYzHibgho=)
                          2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: /QUU+1Te3LkJCklSzvvmoyJ3BNocnBQyKJrl2xhetgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0e:1b:5a:f1:d8:f6:57:ef:52:96:81:9b:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=9d6367d3c3e17e1a7df0aafd37722636f7bea6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:3e:a2:74:b6:ca:22:0c:42:a1:4b:9e:83:
                    f0:cb:b8:c4:c4:ae:fe:00:32:5c:da:bd:6d:60:65:
                    09:aa:a0:49:0a:3c:2a:d1:83:21:af:70:cb:cc:d2:
                    2e:8d:f9:bc:10:36:b4:55:a0:c4:2d:a6:e4:bd:bd:
                    d3:8f:bb:13:a6:25:3f:bf:1e:a1:10:47:8c:f1:5c:
                    6f:46:3f:ff:0c:43:d4:2e:a5:a3:e0:18:1e:8d:12:
                    1b:d0:72:26:6f:5d:1f:4b:2f:25:96:b6:4b:0b:bd:
                    7f:08:b3:3c:2a:ef:cb:79:e6:4f:44:79:5e:a3:b6:
                    d1:90:72:84:c4:0b:ab:f8:97:74:91:69:c6:8d:1d:
                    49:2f:96:d9:41:52:ad:0b:ca:4f:1f:97:54:dd:96:
                    1a:43:d8:c8:b5:49:45:1c:b4:fb:23:3d:1b:94:36:
                    bd:16:e6:15:de:20:80:7c:4a:10:74:45:6f:73:cd:
                    94:15:88:ec:3c:49:73:62:8a:22:de:4e:ad:91:74:
                    13:52:b7:f8:93:2a:8d:00:b3:2e:83:31:f5:b5:3a:
                    ea:c5:d9:2a:26:8b:13:ba:f3:c3:b7:81:36:be:48:
                    af:c6:7d:a6:4d:c4:eb:a8:b3:c0:4b:29:22:b0:43:
                    a9:14:18:f8:0c:6f:48:49:6d:90:4b:b3:c3:22:8d:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:67:D3:C3:E1:7E:1A:7D:F0:AA:FD:37:72:26:36:F7:BE:A6:BA
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:a8:65:c5:16:a8:65:1e:c7:da:4d:72:27:eb:ad:ee:e2:
         bc:4b:3a:bd:01:39:ed:f8:5f:19:3f:cc:e1:e2:92:b5:84:c6:
         2a:8f:c9:bc:1e:00:b9:a8:3f:23:e5:50:67:10:87:d9:c9:e8:
         77:01:f8:2a:1f:76:cb:dc:6c:fd:2f:91:88:d8:57:84:09:49:
         d9:03:53:fe:42:ac:ee:10:0f:c9:b1:f9:5b:fe:d4:75:60:5c:
         05:99:15:da:44:2a:bb:de:2a:c7:b1:9a:0d:48:0d:cc:be:b1:
         07:df:b9:ba:73:5f:6f:93:f9:fb:17:4e:b4:8c:03:b3:85:98:
         2f:65:7b:43:d6:ef:a5:bb:34:84:f1:62:c9:4b:d2:56:71:ca:
         6c:85:3d:ac:09:f9:02:0f:c6:d0:f4:74:e6:51:6d:1e:4e:8c:
         1e:c0:3a:55:a1:c2:e0:e6:c3:9f:f0:b6:9c:78:d6:5b:e0:ed:
         6d:d7:36:c2:45:ec:cc:49:c7:f0:0d:56:44:37:e4:14:1e:81:
         2d:51:13:7e:35:86:93:5d:5e:2a:c0:1e:92:0e:66:2a:35:e4:
         19:24:89:dc:88:f2:fc:8e:c9:34:90:0e:11:6c:32:86:05:f5:
         a9:fe:75:a4:ca:ce:cc:73:43:2d:6f:f2:3c:fb:e9:93:69:1c:
         02:24:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:42:28 2024 by rpki-client on console-ams.rpki-client.org