Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          KNNn8Y3knDHysfbPWttTrwh8L+RbyVtM+H7ROYPP+G8=
Subject key identifier:   AD:13:88:2C:6F:D2:7E:9D:AE:66:58:23:4C:4A:FC:63:AA:35:FF:40
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       018F83D974FFBF578FD5301AE882674426E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 00:00:17 +0000
Manifest this update:     Fri 17 May 2024 00:00:17 +0000
Manifest next update:     Sat 18 May 2024 00:00:17 +0000
Files and hashes:         1: AtGQauV6CTkT87C33OkUgR29-80.roa (hash: mQ7oZ8ZiEhjB96qN0IVYJ0rpwHs7PyG1QGiWWyYsjPY=)
                          2: g_UEOf1JT3ofUW4dmkMpzhqrb10.roa (hash: 7eYsAjEZ487J1vsibSNLYBzVHobW9VUWXRFTvPPEWAs=)
                          3: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: ivx03Mpz1TrOWNbDqGmjyOU9VmGoNUO2zTQetntMDJo=)
                          4: xoUCqTRZNhZqRein_zyWrsRqWHE.roa (hash: RLpFV8Zr/LMkBTaTFkn9DJ4T8W/7rBHfgGYXEZc7IFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:74:ff:bf:57:8f:d5:30:1a:e8:82:67:44:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: May 17 00:00:17 2024 GMT
            Not After : May 18 00:00:17 2024 GMT
        Subject: CN=ad13882c6fd27e9dae6658234c4afc63aa35ff40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:2e:47:43:5e:ef:93:7f:66:b1:5d:d8:9c:
                    a3:92:bd:ba:45:0f:5f:6c:ef:18:a9:d9:0a:b9:03:
                    82:c1:8a:6c:3f:4d:ee:03:eb:52:19:91:18:b3:e7:
                    3b:f6:02:0b:fd:06:28:c5:65:08:83:0b:81:c1:24:
                    0c:70:e1:14:12:54:93:f1:2b:e2:50:20:62:f0:df:
                    e2:9e:e5:dd:c7:55:f8:b0:65:52:09:25:10:37:58:
                    9b:ab:50:b8:f1:eb:0d:a3:d2:12:60:58:eb:d2:a6:
                    5c:15:db:6e:ca:53:0e:6f:50:98:43:4b:f3:2e:30:
                    33:25:0c:e6:79:b5:ac:84:8f:5d:22:b2:11:06:69:
                    5c:27:69:75:23:db:4b:e5:45:05:2d:bb:51:fe:11:
                    e1:7e:87:15:ee:dd:55:95:94:a7:ea:1e:0e:92:e2:
                    f5:2c:c8:04:9e:6d:5a:95:d2:7b:0b:21:7c:d3:35:
                    7a:16:23:61:37:7d:31:1d:55:a4:55:df:77:ef:fb:
                    94:5a:b3:bd:2c:59:da:80:1c:8d:a6:02:0e:f4:d5:
                    52:ac:9b:99:67:0a:44:7f:ca:e4:02:f6:a2:89:65:
                    46:bf:31:52:47:0e:2d:29:fd:ab:36:e7:67:83:55:
                    29:74:15:2a:41:9d:1b:d2:e9:9b:70:eb:be:93:27:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:88:2C:6F:D2:7E:9D:AE:66:58:23:4C:4A:FC:63:AA:35:FF:40
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:83:c6:a8:54:07:87:94:bc:13:40:63:23:8f:40:3d:3a:
         61:cd:d4:e4:ec:71:7d:00:36:2a:9b:69:93:f8:74:32:a3:6a:
         fb:39:84:d7:85:78:87:5d:c6:43:2f:bf:df:5d:12:b5:dd:a8:
         f6:9a:dc:1e:73:14:92:51:36:03:e4:2d:19:fd:7d:09:47:35:
         37:95:9c:4e:bc:4f:06:6f:b7:77:0f:9a:81:f7:c5:09:64:3c:
         fc:b7:65:22:62:84:d5:7e:10:94:76:7b:0e:f5:96:cd:8c:1b:
         88:46:0b:ba:e7:f9:61:51:f1:8e:fe:c9:af:bd:80:fa:61:63:
         b4:66:f5:4e:fc:e8:f3:0b:0d:b7:36:43:2a:99:78:27:be:19:
         3b:46:38:6b:58:bf:66:34:a9:ca:3f:bb:ec:bf:80:f5:e8:13:
         23:dc:36:56:04:5b:4f:29:61:7e:6f:36:66:e2:46:23:cd:aa:
         7d:c5:2c:c5:95:01:43:84:ca:d0:1b:19:e9:d8:79:f4:ae:ff:
         ed:98:89:24:5a:ed:1a:23:58:1c:fd:f7:be:a9:d6:94:46:4d:
         9a:32:3f:d3:9a:8e:02:e8:7f:44:c5:29:27:82:f9:01:47:66:
         2d:2e:b4:74:b7:30:31:a9:d4:f7:a2:5b:87:39:60:69:09:af:
         b9:75:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:16:10 2024 by rpki-client on console-ams.rpki-client.org