Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File:                     pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier:          uY7AnDNWYRRZ2hSR7/nWP4DNnGWsrXTqT28ibErq0UE=
Subject key identifier:   85:E8:2F:5B:03:40:71:A0:79:46:FE:2A:34:3D:0B:E8:6E:17:F6:81
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer:       /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial:       018F89A505055C88930620C442E85E11E983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number:          1125
Signing time:             Sat 18 May 2024 03:00:44 +0000
Manifest this update:     Sat 18 May 2024 03:00:44 +0000
Manifest next update:     Sun 19 May 2024 03:00:44 +0000
Files and hashes:         1: 1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa (hash: wPh78olFSg+DC9182Id/4W5kSmywsh7SfbCleolVrPc=)
                          2: hYoEXk29qymZH3IflPywBEOwFHY.roa (hash: hLf2fX1NPyzj2MQLtn8oenJAnsjdJUYXsN8nm2n0B80=)
                          3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: FoF4QobEdSPEiQ0/lN68dRvi7OdDCRF2uO5BRm9GskI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:a5:05:05:5c:88:93:06:20:c4:42:e8:5e:11:e9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
        Validity
            Not Before: May 18 03:00:44 2024 GMT
            Not After : May 19 03:00:44 2024 GMT
        Subject: CN=85e82f5b034071a07946fe2a343d0be86e17f681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:8b:c8:a3:9b:8a:ec:f2:c0:71:f1:b1:79:
                    3d:b1:bc:28:d1:b7:ac:3b:bc:22:9c:44:a4:91:f9:
                    ca:ac:57:8a:ee:83:bb:ab:82:c9:ee:78:d2:e9:4a:
                    95:05:07:0e:25:3f:45:93:40:67:b5:ae:49:a3:75:
                    a5:f1:b3:0a:37:51:82:42:56:bc:99:3d:0f:d0:7f:
                    d6:18:f2:d0:ad:b3:9d:9a:c9:79:95:37:77:0a:8a:
                    22:de:7e:66:ec:7b:19:9a:8c:db:f5:b6:40:85:f8:
                    e0:c6:ed:05:8d:a3:52:fb:6f:34:a2:ae:c8:ad:25:
                    42:8c:81:77:46:2a:9d:c3:33:a7:d5:9a:eb:6c:53:
                    5c:13:1b:70:87:f1:a8:28:70:2f:04:2b:0d:dd:8b:
                    ef:cc:4e:12:9c:dd:0c:af:61:0b:57:4a:b2:45:36:
                    ec:58:ad:f3:19:81:6a:76:64:5e:d7:39:fb:27:1c:
                    6d:20:7a:e3:76:5f:e8:4c:26:44:83:37:e8:12:18:
                    17:01:69:c0:d9:69:fb:36:3d:75:bc:f7:a8:79:95:
                    d4:87:2e:9c:d1:6d:6e:25:ca:2c:db:00:c6:61:f6:
                    e1:0a:4f:1d:1a:96:47:e7:15:20:fd:26:a1:44:3b:
                    8e:5b:1b:13:f6:18:ee:a9:77:85:8a:cc:b7:2a:b9:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:2F:5B:03:40:71:A0:79:46:FE:2A:34:3D:0B:E8:6E:17:F6:81
            X509v3 Authority Key Identifier:
                keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:4e:61:be:c7:23:9e:63:b2:be:72:e5:e7:31:2b:dc:35:
         f8:ff:a0:c3:56:11:80:84:be:74:4b:b7:5e:a0:e7:98:3a:90:
         d3:be:35:e7:87:11:9f:9e:42:a9:d4:8d:17:49:63:d8:83:da:
         e2:85:46:32:a4:cd:34:3a:eb:e2:55:c1:20:02:db:2e:81:55:
         c8:f5:a7:24:6f:cf:1d:cf:29:42:16:2f:84:16:74:d1:33:78:
         74:60:3f:9e:6d:da:f2:7e:89:f0:a2:ec:d4:38:4f:2e:d0:30:
         e2:2a:f8:0f:f6:f7:f1:36:3a:22:c8:08:f6:7a:c4:b3:ec:96:
         66:0c:05:08:66:0b:06:c1:43:3c:64:af:bc:96:68:64:33:a0:
         0d:be:2c:aa:1f:81:6d:72:88:00:bf:55:6c:c1:74:ec:4a:c9:
         10:cc:27:55:79:75:5d:52:00:5a:51:0a:84:96:93:a1:92:62:
         f8:0c:a6:34:15:2c:14:6c:2b:b0:fe:d5:ae:9d:49:1a:a1:7e:
         6a:f6:f2:48:0d:26:95:51:f9:da:8a:07:63:b4:19:58:54:3c:
         fb:04:dc:50:cb:a2:22:eb:4e:64:3b:e2:a7:27:8c:43:ca:bb:
         75:16:6f:96:8d:5e:17:32:77:eb:ef:9f:67:55:26:7c:41:98:
         41:a8:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----