Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File:                     DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier:          y0L7UwaB8QZgsEoybghhmSVwnLLB5DCuOXgrtYFwxfg=
Subject key identifier:   87:ED:FB:2D:14:FF:B1:FC:62:42:33:E5:B3:AF:7B:45:FE:B5:10:70
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer:       /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial:       018FBC128A7B9BE7F941B482B0CEE23275F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number:          01CE
Signing time:             Mon 27 May 2024 22:01:22 +0000
Manifest this update:     Mon 27 May 2024 22:01:22 +0000
Manifest next update:     Tue 28 May 2024 22:01:22 +0000
Files and hashes:         1: 0b1Octt82kvN3_6VYldJ1TYabDw.roa (hash: Uig0RqQqSxl07Ve6Php0kJj4hZeVUZWqQBytkviUS/s=)
                          2: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 8FssyTR9xQrfhTTtkkWtLoSg0TcK8koUV22w6eh/Ip0=)
                          3: H7GYWmW13EbBIUuSxCNToHedUX8.roa (hash: Ask4B72t9CuxOH4AIJuRLiRpycuVRooD2wWHfyK03v4=)
                          4: NuoH07lrjioUbYobQv22IBUxWR4.roa (hash: /1r1or4Kj1Bc0bjkaGE1lqWuSvsvNANGARbI4Rgtuso=)
                          5: TiGKxumKNOdpmFEy0nFQeB-Sl5Q.roa (hash: 5WZMAvso2vSfxM/Vfx+0ariJIeccIct/su+/Fvw9xds=)
                          6: UbKsxrteJtroI_6cIyZbYo9WHek.roa (hash: FQOK4kVQpf1kRsqBnmLN4RxWfh8M7SksMf+esxnCofg=)
                          7: YJuZj8n25SVA_oefrF23FQLw_H4.roa (hash: qEFZwVu6PJWciyih9keAKNMNwy8zhrioZ+uAKudkg+c=)
                          8: oD0KXOKNz7mOKIT0kgeXdDaT2aw.roa (hash: 6uNeWtnoDE3euitBmaSJ9nV7C0if8x/KMc9Ox+GI4wI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 19:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bc:12:8a:7b:9b:e7:f9:41:b4:82:b0:ce:e2:32:75:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
        Validity
            Not Before: May 27 22:01:22 2024 GMT
            Not After : May 28 22:01:22 2024 GMT
        Subject: CN=87edfb2d14ffb1fc624233e5b3af7b45feb51070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:e2:61:b0:13:a3:ef:b7:2d:c5:dd:7c:97:
                    8e:0b:09:a8:f2:a8:e8:54:15:8e:6f:26:13:9c:93:
                    ed:f0:1e:d7:80:c2:de:cd:5e:2a:18:b2:d2:39:ea:
                    51:83:8c:ed:25:ad:b6:c0:55:2d:55:af:4f:8d:06:
                    1a:14:cd:30:79:50:a1:4a:bb:91:d5:05:97:ec:b9:
                    5e:d3:24:a1:30:b6:e4:98:71:ae:82:f4:2f:b7:a1:
                    f5:ad:38:fe:04:de:23:f1:5a:9c:2a:98:89:47:68:
                    2b:bb:c7:0f:8a:86:89:6b:ca:7c:41:bf:11:13:20:
                    05:ed:88:d0:2f:c7:0c:49:05:b7:1a:cc:79:78:4e:
                    db:49:d0:c5:fd:2b:27:cb:fa:6b:ad:d6:af:67:53:
                    4c:4c:d5:e3:67:9c:3b:f7:39:62:1f:ff:48:1d:9f:
                    cb:d8:af:33:92:3e:87:bb:39:38:4f:7f:5b:13:49:
                    a1:f6:15:e9:d4:7a:50:e2:87:b6:d1:ce:02:85:19:
                    f0:15:0a:23:cb:4f:e9:f0:96:0a:9c:20:38:da:c6:
                    5c:c1:a8:d1:93:73:f8:ca:f9:3a:a6:e7:2a:5c:0a:
                    a9:47:de:dd:4c:3f:62:74:f4:b3:96:bb:14:da:0f:
                    e4:77:83:4f:04:3d:b2:d2:b1:6b:cd:fc:89:95:1e:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:FB:2D:14:FF:B1:FC:62:42:33:E5:B3:AF:7B:45:FE:B5:10:70
            X509v3 Authority Key Identifier:
                keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:91:25:c2:3b:1e:c0:17:35:01:1b:e9:3a:eb:d0:8c:e5:8d:
         d5:1a:37:b6:0a:d7:1e:de:80:99:a0:73:bf:9e:f0:96:03:f6:
         a8:89:f9:36:52:20:75:8b:79:a0:eb:3a:74:48:6f:73:8c:a8:
         ce:d4:cc:fc:5d:a3:99:da:bb:d4:90:f7:8e:07:cf:dc:ec:9b:
         b6:f8:b7:cb:fb:64:dd:3c:d5:b5:ba:e7:ab:6c:4d:82:9e:87:
         03:ac:bb:e7:58:7e:1b:9b:b7:14:fa:a1:86:be:b6:9a:66:dc:
         00:51:9a:fa:9b:9e:55:cc:36:0f:4b:b4:08:a5:c8:8e:1b:fe:
         b0:7c:f4:53:68:b6:8c:45:a8:ef:d8:a6:84:49:a3:9a:b5:b5:
         c9:d8:8d:9e:08:89:e1:b2:33:84:49:ea:c9:23:0d:07:5a:4f:
         00:94:8c:df:99:ce:b5:ae:35:b6:b3:ed:36:63:0a:9b:5c:90:
         a4:40:a9:12:9a:28:c8:fb:ab:2b:7e:56:b9:c1:b2:54:63:8d:
         a9:a7:e1:f0:83:1a:ef:f3:f7:fb:78:8a:7b:3c:9c:6a:8c:75:
         d2:6c:fa:49:fb:07:ad:f3:04:22:32:ea:83:d6:e4:6e:e6:ff:
         b6:b3:8a:78:f4:44:54:d4:55:54:77:4b:cb:f5:3e:25:9c:bc:
         d4:70:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 23:39:06 2024 by rpki-client on console-fra.rpki-client.org