Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File:                     Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier:          O9EOnvB3isAApUQuoKGsGeSF8p1gjjqvyZeOlhqPD1g=
Subject key identifier:   34:59:3B:B1:95:1B:FD:D7:E2:BF:8D:24:F1:A0:01:BB:9D:F1:D0:4D
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer:       /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial:       018F94CD095492E97B734607E452F6225666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 07:00:16 +0000
Manifest this update:     Mon 20 May 2024 07:00:16 +0000
Manifest next update:     Tue 21 May 2024 07:00:16 +0000
Files and hashes:         1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: AIivZEBlfZCyv1CfKlJyPr1AaLu3wtV9Z3l+suRicKA=)
                          2: hshHaq_K0u3-FIdPWbpRXcy5KHc.roa (hash: FROKks9WSZ3EK/G6hZd1yCT3o3iN0DaWkBkt1nAke/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:09:54:92:e9:7b:73:46:07:e4:52:f6:22:56:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
        Validity
            Not Before: May 20 07:00:16 2024 GMT
            Not After : May 21 07:00:16 2024 GMT
        Subject: CN=34593bb1951bfdd7e2bf8d24f1a001bb9df1d04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:fd:18:c0:1d:7d:ad:eb:33:bc:05:9c:7a:
                    af:9e:03:46:03:43:e7:6d:37:98:86:f9:c7:01:17:
                    0d:e6:89:96:5d:b6:d2:41:e6:59:83:7e:25:9b:6b:
                    8f:12:44:a3:45:ee:3f:bc:6b:b0:6e:d6:4d:c2:72:
                    fd:72:96:c5:f3:bb:0b:45:0a:be:85:f8:e6:ef:98:
                    ba:7a:5a:df:df:96:90:d8:a6:cb:13:92:ef:af:3b:
                    07:99:59:85:38:4c:25:7c:d6:b6:db:e7:6f:01:d2:
                    6c:74:50:64:81:81:cd:3d:72:cb:86:84:f9:58:65:
                    03:dd:bb:37:f8:03:a1:35:f8:3d:ab:29:c7:a2:6d:
                    80:9e:91:0a:d1:98:e6:68:cf:80:d5:de:cb:03:3d:
                    04:8d:71:0c:47:f3:8a:db:7e:fe:08:5b:f8:b7:89:
                    3e:0e:f3:69:5e:f4:ef:34:92:a4:48:e8:f2:8e:0d:
                    d6:12:98:0f:8c:b9:e2:12:02:be:87:10:89:57:df:
                    36:fd:e8:a6:96:83:56:34:92:51:23:9f:90:a3:95:
                    c7:6b:b4:5e:d2:1e:5a:f0:63:9e:21:0f:f1:7e:73:
                    30:5a:93:5d:e3:39:1b:a1:a6:64:6e:09:c6:31:ad:
                    9a:e8:58:54:ca:a6:b2:d2:fd:e2:b8:da:38:98:b8:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:3B:B1:95:1B:FD:D7:E2:BF:8D:24:F1:A0:01:BB:9D:F1:D0:4D
            X509v3 Authority Key Identifier:
                keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:dd:89:3c:dd:5f:43:bc:82:3f:55:9c:bc:54:93:97:a4:
         02:cc:2b:5c:dd:34:eb:ed:a1:3a:f9:49:73:cd:13:2a:38:1d:
         06:22:d3:4c:be:f7:f2:b4:f0:46:74:9e:49:56:89:13:fe:d0:
         f0:35:ce:b4:0c:c2:3f:eb:33:51:82:9f:3f:3e:96:9d:d3:4a:
         01:40:76:8c:f0:33:04:cf:7f:44:62:0c:d3:d2:33:59:bd:52:
         b4:77:34:a2:c9:e8:8f:f0:06:37:d1:c3:be:ec:2c:3d:10:86:
         ea:48:8b:ca:52:ca:21:96:6d:bf:3f:23:e1:76:42:a1:9a:9d:
         68:30:b6:ed:c2:ec:3f:90:3d:8e:a2:7d:dc:84:c6:a4:63:a5:
         cf:57:e6:bb:1f:c3:f6:1f:58:7f:8f:89:01:bd:bb:2f:b9:6e:
         45:00:d9:15:ab:1d:27:26:2d:d0:28:82:ca:a3:95:b6:0d:20:
         b4:35:3d:44:1a:70:c5:fd:6f:c9:11:5e:55:34:4b:a4:fc:12:
         d5:e3:aa:ec:97:9a:00:37:38:59:f5:b0:52:f8:3d:c7:f4:02:
         b7:60:51:ed:40:fe:8f:c0:42:a2:75:48:16:83:c3:55:8c:33:
         28:31:3f:6c:64:54:4c:e7:90:12:93:43:0d:96:d8:d6:b4:c0:
         b8:91:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 07:54:29 2024 by rpki-client on console-fra.rpki-client.org