Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          YkSYE5Yf7Gq/dY2FtrMZ2eLI2A1+nPee2UuJC5C5REI=
Subject key identifier:   44:93:06:F6:48:E3:2F:D0:C9:A6:1D:2F:F2:4C:E2:A1:FA:33:C8:C9
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       018F855A0679939FF983A6F9859B7B5656AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 07:00:20 +0000
Manifest this update:     Fri 17 May 2024 07:00:20 +0000
Manifest next update:     Sat 18 May 2024 07:00:20 +0000
Files and hashes:         1: 67eoqG91uPb0qKs6o9u8iWmBu5E.roa (hash: X7PdsI+8Vqe/sn1k4eouy9G8VQENViluqcMCKu1b5rk=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: 7b1Yn/iAZFwCSrd0OC8wEUyRlFe5DqYyV8m0gmdBtf4=)
                          3: iopDWpo_rr_E4Jdu-DFJ_YACb-s.roa (hash: Fdit1nHKijH5P0XK6gAs4Qqb+a25jZ9LTB23GgD9Srg=)
                          4: wSd219Z4hgM0eN75LZzsv85ElDU.roa (hash: qPdI34JZbHGy1g4XjSdQX8OTwz/pkfGYSVqMXihhMO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:06:79:93:9f:f9:83:a6:f9:85:9b:7b:56:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: May 17 07:00:20 2024 GMT
            Not After : May 18 07:00:20 2024 GMT
        Subject: CN=449306f648e32fd0c9a61d2ff24ce2a1fa33c8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:5c:8e:fd:c0:d3:e1:65:b4:5a:87:5c:b3:
                    64:68:8c:41:d2:00:9f:6d:e2:24:96:59:57:0c:bd:
                    a8:42:49:87:5f:22:16:f6:45:de:01:3e:fe:d2:18:
                    3a:8e:88:e3:83:af:6a:a2:fe:a1:0c:ef:bb:0f:ad:
                    46:23:fb:15:b6:4d:a9:1c:c3:05:67:3d:ae:34:f0:
                    99:41:71:c4:e7:0d:4d:0a:77:dc:c7:48:ce:12:c2:
                    8c:20:19:74:fe:30:95:1d:4a:3f:f9:61:fa:75:29:
                    ef:9e:27:3f:27:a1:ca:a0:81:6b:99:b9:35:09:9f:
                    63:e9:ad:6c:4c:e1:38:11:34:63:31:34:6a:96:b9:
                    d7:df:09:0f:44:16:ca:2c:cd:86:2f:45:3a:44:3b:
                    83:32:c1:9e:bb:a5:bb:e5:b8:1d:ed:46:d9:98:d0:
                    49:9f:7a:b4:20:29:e4:40:d6:2e:8d:3d:d2:77:44:
                    fe:a7:85:d8:64:39:a8:a4:40:83:6a:fe:1b:1e:b0:
                    77:1c:2c:54:3b:88:48:70:f4:ab:61:6c:e6:bd:52:
                    5d:1e:1f:d4:88:4a:11:34:4e:a9:b5:99:7e:80:0a:
                    47:fd:1e:75:2f:e3:6c:02:d6:e3:95:9a:9c:dc:1d:
                    3c:dd:ea:7f:cd:35:8c:1b:19:70:bf:99:3e:74:81:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:06:F6:48:E3:2F:D0:C9:A6:1D:2F:F2:4C:E2:A1:FA:33:C8:C9
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:38:8a:2a:5f:18:57:a2:29:9c:99:30:bc:cb:41:21:32:e7:
         5d:0e:97:4f:92:ca:42:21:54:d9:cc:53:e2:1d:ee:ff:fa:76:
         db:07:23:1b:37:66:76:a7:05:7c:4b:11:30:b8:63:2b:09:a3:
         c7:45:b2:21:88:14:80:21:45:a0:07:d3:ad:5d:ed:06:ea:d7:
         da:07:f8:34:9c:fa:6f:da:e9:14:67:a4:aa:09:98:06:da:08:
         01:e1:c8:8d:f0:23:d5:0b:fa:8e:9a:85:3f:14:2e:6d:e2:7e:
         e2:bb:96:ae:fe:35:82:3a:85:02:05:03:4a:44:de:3f:68:bc:
         b7:c4:2e:48:6b:cc:88:7b:18:fa:7a:02:9d:bc:92:60:16:d1:
         6f:ae:84:f3:dd:a4:91:6a:92:72:d0:2a:fd:b9:9d:ad:61:ea:
         b6:35:92:3a:d2:76:a9:b7:25:f3:57:39:13:8e:d5:33:2a:0a:
         7f:04:fd:27:c9:8c:3d:63:be:8e:cf:79:8e:39:7d:83:b4:4b:
         86:46:af:ce:61:59:2c:36:96:d4:8d:57:ca:e1:67:25:bd:cf:
         83:5e:ed:59:17:bc:26:a9:b0:14:76:a9:f1:ad:0b:40:27:38:
         74:46:8b:b4:43:7f:09:6f:f3:e2:eb:85:66:01:55:ae:36:5d:
         c1:ea:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:17:37 2024 by rpki-client on console-fra.rpki-client.org