Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File:                     S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier:          rcDRfjojcYC9z/ugk/V/qn+gK91/P97W1dsHR9BH/as=
Subject key identifier:   52:33:66:67:EC:7E:2E:61:9C:38:4E:BD:22:F3:95:1B:8C:81:C6:AB
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer:       /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial:       018F87ED7F4B8D0727C2C2F70DB3E89CD3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: BhkjiYhkHu2dotzHGFXbdk-T6aE.roa (hash: YsknqJsC7kevSUBfFCaurNIdA8QDVAhG4M0jUn4GZYM=)
                          2: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: 15pRMbNbSR9yEugeMu4dmPkrykuy0bY3VYfcmmiSrS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7f:4b:8d:07:27:c2:c2:f7:0d:b3:e8:9c:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=52336667ec7e2e619c384ebd22f3951b8c81c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:92:a2:1f:fb:64:23:08:ec:18:40:31:ad:
                    8d:3b:13:02:56:70:38:7b:4f:d1:a1:08:6d:98:c9:
                    06:c4:bb:43:10:93:50:d3:ed:65:9c:24:8e:b4:90:
                    9f:f2:53:c4:94:d0:d2:ff:05:86:40:21:46:29:b0:
                    ef:e1:72:af:67:13:bd:34:56:bd:21:a6:d4:a6:59:
                    9a:bd:b8:e9:90:fe:da:a5:81:25:4d:d2:50:74:41:
                    95:8e:a2:ea:96:1f:bc:68:69:15:d6:ad:0b:6c:fa:
                    26:15:69:a9:33:67:85:ed:67:6a:c3:88:c1:8c:24:
                    57:17:59:64:2a:ec:15:f9:a3:95:b2:1f:e4:72:36:
                    72:ac:16:24:9c:01:c8:00:84:37:c0:3e:97:d0:0a:
                    fc:a7:2c:f9:4a:2d:26:2c:40:0a:59:6b:70:59:db:
                    4e:74:84:92:0b:f3:8d:9a:34:14:41:77:ae:d8:3e:
                    2a:1b:a2:03:c3:bb:43:36:01:2b:da:c2:a2:49:c5:
                    65:71:fc:4e:48:43:52:16:9f:90:3f:3b:36:78:a5:
                    44:44:5c:ce:13:2d:9d:3c:71:e7:3d:67:72:2b:d2:
                    24:0b:fe:0d:46:3f:a0:56:8d:b0:af:e4:dd:86:02:
                    7f:34:e1:68:30:e5:2e:90:fc:a0:4d:b7:ca:6e:0b:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:33:66:67:EC:7E:2E:61:9C:38:4E:BD:22:F3:95:1B:8C:81:C6:AB
            X509v3 Authority Key Identifier:
                keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:03:2a:53:68:e0:73:62:10:5a:ee:8b:f1:69:fb:e4:65:
         7b:10:ac:5b:4b:ac:bc:b5:f3:96:1c:6d:78:99:ee:09:57:aa:
         47:1b:d2:09:b4:22:23:b7:70:53:fc:43:a1:93:4c:68:02:52:
         99:cb:f8:3e:77:c0:9b:37:18:4f:e9:8d:93:9c:35:26:97:35:
         eb:3f:34:e9:b5:f8:37:3b:b5:2b:c1:cc:03:52:bb:cf:99:09:
         ab:e4:64:f8:31:b1:a4:37:b5:81:39:4d:84:7b:84:e1:de:2b:
         b9:ef:65:e0:dc:eb:f8:31:c1:b6:29:64:e4:3e:6e:ad:9b:fc:
         95:a9:59:47:d8:08:19:df:16:8d:bd:c3:fe:9b:6f:e0:95:4d:
         50:c3:97:14:12:9d:69:b9:7e:fc:f1:0b:16:85:21:20:97:e5:
         a2:84:a4:6e:03:83:bc:d6:0c:5d:04:2d:ce:1f:dc:af:dc:26:
         df:b3:61:ac:f6:0b:69:5d:06:5d:21:f0:7c:6a:76:75:a0:1d:
         40:8d:10:ed:62:dd:8c:15:7b:2f:fa:ea:0b:7f:3e:89:0e:fb:
         a0:5d:d6:11:e9:b8:0f:d2:27:bd:5f:a3:da:2e:df:a2:f6:53:
         1d:f0:68:86:e3:af:6f:55:fe:ba:28:1d:09:34:ee:cf:dd:2f:
         2a:34:4f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:31 2024 by rpki-client on console-ams.rpki-client.org