Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File:                     EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier:          Yl9Fbnz0k+IlwtnVn8pVCn96Cpvim1LAg1m+QFiGw0o=
Subject key identifier:   6B:49:67:A8:73:A5:A4:20:06:35:3A:A2:72:25:69:DC:3D:20:E3:34
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer:       /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial:       018F6676095B3DC066390E527584D91640ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number:          116A
Signing time:             Sat 11 May 2024 07:02:42 +0000
Manifest this update:     Sat 11 May 2024 07:02:42 +0000
Manifest next update:     Sun 12 May 2024 07:02:42 +0000
Files and hashes:         1: 42qVnHimqFNOMXwAvvQx2lPEMJ4.roa (hash: JK2TkNyTPi5+I71rvz/JhlYiDrSMTtxNq2piOHwMRq4=)
                          2: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: z9BDknyCYSW1ZRkDXvecBl9gw43PKOTqLH03UmzzG1Q=)
                          3: M2tFrjY58rsUg4UHvPSGiRaxNBo.roa (hash: 6igT4Z5uhDDDN+n+A7eRUv9NnJvuwXvaBnL5BXUSPHo=)
                          4: RY7YMyxrHOr2CB8wHzShA96G9HY.roa (hash: KlFcdX9qijQE40j4qVfMdHWUleYIWM3rYMw97YQcNtU=)
                          5: _VqpKNWMtFPkASwQ2N8ASGJLpvM.roa (hash: y6sBVrQJ19O94R2lPYyuQC/zqu2AElPxo6+cHp+7edw=)
                          6: _soj7vmBNOPRBIFGr-eNrEKyyYQ.roa (hash: qoBvN8sToEkEuN5s+clsiY0tb2yoVkxGZQFO9ejqpVQ=)
                          7: iXKN4-0Q5TmzoftYJ_JehGe7Jog.roa (hash: TLOzZHT9JaesQDeR6UlNHjxrXdl5xXoy5tsVyYS/i5E=)
                          8: o97tiazmeP4S1oafRvjVVOM5OFo.roa (hash: l0OSa+NGbB1Qyh91CUyN2A/heXy/A0whdvBYXcNQv88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 07:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:66:76:09:5b:3d:c0:66:39:0e:52:75:84:d9:16:40:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
        Validity
            Not Before: May 11 07:02:42 2024 GMT
            Not After : May 12 07:02:42 2024 GMT
        Subject: CN=6b4967a873a5a42006353aa2722569dc3d20e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:9b:68:0a:26:1e:3d:44:76:ca:f2:69:32:
                    37:7a:91:a9:e8:42:d4:c6:2c:60:f2:63:f7:e1:ee:
                    a4:68:68:40:11:06:3c:50:41:5a:31:0c:ff:3a:dc:
                    61:da:86:c5:f8:82:36:8d:cd:9a:ff:b9:17:b6:cd:
                    1d:bf:75:c6:7f:46:c1:b1:e3:2a:8f:19:d1:14:4f:
                    fd:c0:03:fb:27:79:2b:5d:0a:1d:ac:93:8e:3c:2a:
                    47:25:dd:5b:9d:93:6d:ad:7b:ab:20:a1:f3:d9:97:
                    cd:b4:b3:4f:41:ec:c6:23:4d:91:a8:7d:ce:bf:af:
                    12:d9:08:57:54:f0:c1:a5:2a:91:7f:54:df:cd:61:
                    3e:59:ef:09:8f:1e:6b:07:16:8a:2e:cd:81:28:be:
                    60:23:2e:37:c9:f3:0f:44:4f:63:ba:6c:69:4c:10:
                    70:82:50:f0:e5:3e:93:48:9a:32:86:e7:c4:13:50:
                    c4:93:71:3d:63:a6:fd:ae:d1:bb:69:e4:bb:98:90:
                    5d:aa:97:60:99:6d:a5:ed:f2:2a:76:64:f8:e6:c1:
                    b0:7c:1d:3d:d5:f2:d6:db:fd:69:2f:5a:09:37:57:
                    9c:fc:34:0d:27:ea:0b:25:77:b0:d6:0e:6e:89:4f:
                    7e:2b:05:5c:cd:cc:db:d7:80:14:df:f8:ff:b6:7a:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:67:A8:73:A5:A4:20:06:35:3A:A2:72:25:69:DC:3D:20:E3:34
            X509v3 Authority Key Identifier:
                keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:44:24:21:d2:3b:9d:e6:65:13:d2:c2:03:5c:1b:79:89:
         45:c7:d1:65:22:27:c8:c4:15:5d:93:d6:3b:8c:f9:db:fb:3b:
         76:17:f7:69:0d:b0:76:49:f6:e9:4c:bd:98:c7:dc:a9:a4:ae:
         35:15:ce:ae:8b:df:81:91:33:42:6e:c0:9b:bd:7f:95:d5:35:
         b2:7a:9a:34:1b:5e:db:10:1f:b3:0a:af:0a:6a:ce:67:11:93:
         13:03:a6:1a:6f:6c:aa:f7:b0:98:67:52:18:af:6c:00:d2:a3:
         aa:97:97:fb:a7:5c:b1:a2:12:a5:99:2e:cf:7f:dc:b1:b5:d7:
         04:fb:6b:e5:c5:99:9c:e7:56:52:3f:98:87:cf:ab:15:3f:c7:
         21:bf:8d:46:fe:81:e2:b5:4c:0c:ee:57:71:3b:02:a1:64:ba:
         76:35:d7:ea:62:b5:95:7c:6a:5d:1d:dd:1c:92:90:6f:96:6f:
         c2:cd:47:f7:6c:be:a7:b9:64:b1:58:25:8f:8c:06:92:87:b9:
         e5:23:e1:76:6d:bb:54:34:66:d8:bb:bc:ec:a1:ff:43:f9:f9:
         27:44:26:77:11:fc:b6:bd:25:4b:a2:08:04:72:8c:8f:09:cb:
         40:29:02:de:e0:97:1d:99:b5:91:53:36:7d:8f:74:04:4a:c1:
         53:eb:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:42:47 2024 by rpki-client on console-fra.rpki-client.org