Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File:                     R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier:          G3Lda2x9TWN82C8BhebcuXCIWYuAVLhymwcOXdzFzuY=
Subject key identifier:   24:8B:D2:BF:66:60:F8:52:2E:91:6A:3E:00:91:FB:EF:F7:3F:8C:15
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer:       /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial:       018F8748D1EBC34985EE52045A7589B37C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: FytgZNHgIe5Sn4mouiTljRaRkL4.roa (hash: RJs5OnL/jNPgR2Go8TN3VXrA37lm+aCeMKoCHKSKED0=)
                          2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: uCG7xmU3fEWubAO04gKhnoaen4QWoSCY49khvP3e+D0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d1:eb:c3:49:85:ee:52:04:5a:75:89:b3:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=248bd2bf6660f8522e916a3e0091fbeff73f8c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:6d:ce:ce:83:11:b6:b1:ba:be:f1:d5:c1:
                    bd:3c:20:41:99:ad:c6:8b:7c:29:b8:9d:96:31:c0:
                    0e:5f:65:bc:6a:c5:6b:74:7d:62:01:e6:82:36:be:
                    37:ff:fc:69:8d:2a:51:02:f8:ca:7a:38:6f:17:c5:
                    da:87:3a:d9:92:6b:80:54:e1:c0:b0:12:b0:22:4c:
                    39:ef:f8:d4:a7:b7:1a:6e:06:38:05:e2:59:88:64:
                    41:5d:ea:a7:e7:d1:f2:b3:4b:cb:e6:af:1d:ae:43:
                    4d:e2:ae:a1:de:e6:b2:24:ff:76:f2:5f:0c:e1:56:
                    8a:75:fb:8e:a4:2c:eb:22:f0:e0:88:8d:c4:15:4d:
                    96:aa:2d:9d:73:b5:6c:28:d2:18:3a:b7:0f:a8:0d:
                    89:06:51:ff:22:a5:e1:2e:72:d9:bf:60:3b:2a:30:
                    3e:6f:38:80:16:cc:fc:e0:0f:23:b5:9f:fe:a6:f1:
                    ba:28:a9:c0:85:34:4d:da:17:3f:15:92:d0:e1:83:
                    0d:a1:97:e6:6e:53:8e:ad:ec:6f:c9:ab:9e:0b:fc:
                    28:cc:ee:76:db:ed:17:12:a7:9d:d8:01:5a:1e:e0:
                    82:1b:bb:4c:e7:35:17:58:c3:dd:70:09:de:59:86:
                    47:83:4f:72:77:88:74:db:a9:b2:1a:e7:e4:d7:60:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:D2:BF:66:60:F8:52:2E:91:6A:3E:00:91:FB:EF:F7:3F:8C:15
            X509v3 Authority Key Identifier:
                keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:21:f5:42:9c:38:45:8d:bd:74:a5:7a:41:e0:85:a5:56:
         2e:6c:15:a7:c5:f7:36:19:c6:34:b4:5d:f1:47:3c:ed:6d:4f:
         ee:76:ef:ec:49:83:99:05:fd:d5:71:45:58:7d:76:30:b7:83:
         74:55:68:ba:8e:b5:10:4e:6c:63:0f:8b:3b:13:96:9d:06:84:
         b1:5f:1b:6a:4a:61:6b:e6:6f:a4:00:ff:97:23:da:08:2f:2a:
         d6:9b:7a:af:bb:8c:99:b1:cc:40:73:fa:53:75:54:c7:70:f9:
         8b:27:64:8e:11:b1:75:3c:8e:8a:97:ee:e4:85:98:e3:a3:a3:
         72:f6:4f:15:c9:7f:83:ab:36:5d:dd:f7:8d:39:52:04:00:47:
         c5:7a:02:5f:5c:a2:61:d4:0f:fe:5b:b4:5e:08:d3:4d:31:99:
         1b:63:89:6f:18:a3:7d:2f:e1:2d:4f:4d:2e:aa:6b:76:1e:38:
         ef:93:c2:ac:74:e3:05:09:a4:ab:23:4b:64:53:70:03:68:91:
         62:e9:c0:88:ad:70:c8:c9:2d:1e:d7:7e:35:66:e9:38:76:63:
         39:19:3c:e5:16:13:8b:79:be:80:87:a5:1d:b6:58:b1:f5:7c:
         29:ae:35:08:fe:57:73:98:18:f7:8c:b2:ed:eb:6c:04:53:a3:
         13:cb:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:16 2024 by rpki-client on console-fra.rpki-client.org