Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          sEBy3WbnSrPiP7f42YD/9dRXWfXRVqd4FNqFCIQNrR4=
Subject key identifier:   A5:FE:DE:7B:EB:6E:E6:B3:F7:E6:95:C8:02:68:18:66:F5:B5:45:51
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       018F90F2896CDA5F7EA04303A1271436E97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          0DC5
Signing time:             Sun 19 May 2024 13:02:44 +0000
Manifest this update:     Sun 19 May 2024 13:02:44 +0000
Manifest next update:     Mon 20 May 2024 13:02:44 +0000
Files and hashes:         1: C7zpZN-1q0H_M_S_vpNYnlFGVTA.roa (hash: epMhPon6PxtUyLTu/HBkF3J2cyCB/KYTILmUnDYVUrU=)
                          2: bJSCFqTukybTMGHt2jOsj1RN1Jw.roa (hash: F9VGPFtGfYW8PORc+zIuKedCDRVZ07YSKvNhB3wFeps=)
                          3: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: tzx65ri9PzXI707tWdZ/J7NDQlTLWWGCPUloCntppqw=)
                          4: fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa (hash: uTIlXCxuxfn4l2zqV8sWOHfJaFDTjasJ/obkOnGL1L4=)
                          5: xH15JpMxA1SVuRoIJklxq0Le_mA.roa (hash: 6cVPKb7lD5VXFjrXWMg8gc0Rpz8Icrd/mFgn/NRlRuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:89:6c:da:5f:7e:a0:43:03:a1:27:14:36:e9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: May 19 13:02:44 2024 GMT
            Not After : May 20 13:02:44 2024 GMT
        Subject: CN=a5fede7beb6ee6b3f7e695c802681866f5b54551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:70:74:72:b2:07:be:28:10:94:b6:25:20:57:
                    23:94:96:49:9a:a8:9c:69:fa:63:e9:03:01:ac:a1:
                    52:37:be:e6:b2:b3:ac:3b:2a:07:27:0c:33:b3:93:
                    a2:68:61:c8:d9:8e:ee:ae:3d:3f:5e:48:d2:ef:13:
                    90:cb:47:26:47:0f:90:11:c5:35:0a:d9:66:5d:d1:
                    4e:67:4e:6b:b6:f7:27:5d:96:bf:df:a0:3b:b7:58:
                    68:16:26:f4:3c:80:5c:a7:08:69:8f:92:79:9b:47:
                    ab:e4:22:ce:f0:4b:fc:ec:11:cc:a5:ae:8d:de:ba:
                    cf:76:e4:4b:19:e1:62:30:31:4e:46:49:ef:8c:5c:
                    5e:d5:b0:07:55:07:3d:8e:06:8d:15:56:7e:c6:b6:
                    d0:35:91:c1:1c:fa:44:de:f6:ee:67:64:48:aa:2e:
                    64:ed:fd:42:c5:72:16:a6:b9:a9:54:eb:85:4f:6f:
                    72:01:b5:38:95:4c:b3:4d:bc:4c:11:ea:49:dd:ee:
                    69:14:50:82:36:36:1e:5c:b6:2f:e1:86:f4:be:f2:
                    e0:e1:be:0e:b5:b9:ce:08:c4:90:cd:ba:38:8e:d1:
                    f5:8e:a9:4e:6a:aa:ba:35:03:bf:9e:0a:2a:9c:d3:
                    bc:3d:80:38:4f:1f:c8:ed:52:bf:95:f9:2f:9e:ce:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:DE:7B:EB:6E:E6:B3:F7:E6:95:C8:02:68:18:66:F5:B5:45:51
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:37:92:2e:57:93:23:86:a1:70:f7:a1:18:e0:2c:fd:f8:
         73:29:5b:6e:2d:ca:9d:e2:e9:a9:a5:24:66:cc:0f:4f:03:19:
         dd:6f:3f:e6:f0:05:19:ec:da:51:83:4b:f6:c4:77:c1:85:45:
         71:32:7b:3f:79:e2:67:d3:e4:b1:1a:6e:a0:ed:5f:e7:cf:d3:
         93:5b:eb:cf:57:68:74:6e:d6:2b:73:b7:aa:7e:b4:2b:d7:c8:
         01:12:1b:b7:2d:af:b7:49:19:40:03:df:cd:3a:a2:e4:31:c0:
         91:35:7d:3f:55:30:f2:72:75:92:4a:29:69:08:23:4b:29:65:
         34:51:29:c3:0a:63:34:f8:87:4e:2c:ca:75:12:66:84:69:67:
         33:26:c8:d0:cc:62:e3:8d:29:ff:4d:77:d2:42:a2:78:1f:d5:
         bb:8a:6d:79:17:57:a6:59:09:d3:32:f4:52:d3:64:4f:be:9c:
         78:83:97:ad:cc:db:05:69:37:f6:a9:3f:f8:d8:a9:08:8f:e0:
         ea:0f:3a:f1:3f:d1:1d:14:f2:25:af:09:b6:29:a7:23:59:5e:
         aa:9f:2b:fe:4e:be:26:cc:f8:69:eb:9d:ad:54:36:9e:d4:e1:
         d3:e2:3b:f1:6e:77:1a:14:12:12:4b:b3:ec:82:be:f6:aa:d7:
         da:46:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:22:17 2024 by rpki-client on console-fra.rpki-client.org