Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
File:                     m7wD9sWihPoA27WqYJxRW3xYmWk.mft (raw, json)
Hash identifier:          elAnWQ2B20a2rws2GvKPcD7JUBN5uJNO4Dy8fMTZmDw=
Subject key identifier:   0D:85:81:C0:43:41:6B:28:DD:EF:00:3B:ED:5B:9F:F7:61:8B:9D:27
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Certificate issuer:       /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial:       018FB2333CFF79D1E1E18747429E63A92FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
Manifest number:          09A0
Signing time:             Sun 26 May 2024 00:00:53 +0000
Manifest this update:     Sun 26 May 2024 00:00:53 +0000
Manifest next update:     Mon 27 May 2024 00:00:53 +0000
Files and hashes:         1: _wFt88N56GoWhXTWD1Ypw_4GbP8.roa (hash: wC4Nn2l0fBkkclaNwjPCLsEMymRrfm9DZlUy4uSIB7Y=)
                          2: m7wD9sWihPoA27WqYJxRW3xYmWk.crl (hash: qxokmY82F0ellFbWvT22I9g7MEc6k58YIj0RbGdddeo=)
                          3: s9e96XW476aQ01aQ_MwjnlTOBPw.roa (hash: uvNpkvOgg0IVh7Vho8MMBRnTAr/HN6MF5xA5Xst29Q4=)
                          4: tul4lZ_0WII-jp7NO9tH1vvTHWk.roa (hash: ymXkP+njURslLKcgoh2Hg89YT5pVR4eR1Y78TPCoUiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:3c:ff:79:d1:e1:e1:87:47:42:9e:63:a9:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
        Validity
            Not Before: May 26 00:00:53 2024 GMT
            Not After : May 27 00:00:53 2024 GMT
        Subject: CN=0d8581c043416b28ddef003bed5b9ff7618b9d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:74:7a:c4:0c:fc:9a:32:39:1a:08:48:ea:
                    85:bc:74:06:0a:ba:f5:0d:31:e6:91:8d:dc:d6:a1:
                    db:02:98:05:71:71:39:d5:af:45:dc:ed:e9:3d:4b:
                    97:b3:86:55:8d:5b:32:ec:ec:cb:ed:8f:fd:a1:95:
                    19:45:aa:c8:69:b1:64:8a:25:70:2d:ba:9e:f5:83:
                    a7:78:ae:43:82:ee:d5:2e:d4:d4:74:71:56:c9:43:
                    e4:59:2d:d6:d0:78:73:de:52:ac:b0:21:4d:09:87:
                    7a:5d:6c:54:1e:10:05:ba:7e:d5:c3:92:34:13:58:
                    df:8d:cd:aa:09:6f:7f:85:d8:5f:95:ae:53:83:db:
                    52:b0:6b:fb:ea:26:23:ac:ee:6a:2a:d2:09:ad:63:
                    d2:65:73:84:b7:26:31:88:93:31:16:29:26:60:1d:
                    e1:f4:5f:65:df:e0:41:33:26:06:fe:e9:22:fb:d7:
                    e0:55:8c:c8:14:59:8b:d1:bf:c1:e9:9e:76:2d:06:
                    19:54:92:0d:a5:6d:db:38:66:e5:e2:ca:70:e3:2d:
                    20:f8:48:8e:ee:c7:c5:95:3f:92:c9:05:73:2e:82:
                    87:d5:f0:39:97:97:c7:b7:fe:7a:12:d7:f5:7c:71:
                    1e:e0:9f:6e:d2:47:a4:51:f7:fd:9b:6b:52:be:fd:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:85:81:C0:43:41:6B:28:DD:EF:00:3B:ED:5B:9F:F7:61:8B:9D:27
            X509v3 Authority Key Identifier:
                keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:02:08:e8:ea:68:6a:10:b5:1b:e5:ec:c8:88:e4:8b:1d:
         d6:21:37:94:e6:7a:e8:e4:e0:1d:dc:ba:1c:9d:a1:2b:03:b5:
         07:17:75:55:de:a6:f8:b2:62:59:45:e3:f9:2d:fa:64:0f:86:
         ce:07:23:a5:10:4c:78:77:33:f5:77:f6:72:95:38:3c:d2:bc:
         d2:46:1b:3b:9e:5a:d9:0f:77:13:40:a9:1c:7a:35:48:70:1a:
         67:3e:68:19:6a:a2:44:82:5a:eb:9d:0c:fc:d3:aa:19:a4:a6:
         62:e7:0b:20:a8:65:0b:c5:4a:34:b2:73:c2:12:f2:d0:2b:37:
         ef:09:1b:f5:ac:95:04:8c:f5:0e:5d:9b:45:b6:95:f1:0f:e7:
         20:e8:39:21:4d:fc:9b:82:5f:9b:30:ff:f7:90:b0:b2:0c:c6:
         bc:ba:f5:38:07:3f:55:56:93:c4:bd:15:c6:ea:af:57:14:e0:
         20:2c:30:5c:d6:1c:74:a1:f1:db:8b:25:7e:d6:c0:f1:16:2d:
         37:ce:1a:94:0f:5c:a2:96:9e:36:77:b4:e6:da:9b:d8:6a:2f:
         93:9e:9f:4d:b5:00:f9:78:01:7c:45:31:24:cc:dc:71:2d:23:
         89:35:ea:17:f6:63:cb:e6:e1:b5:55:2c:12:42:be:63:f5:a9:
         4e:1f:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:13:34 2024 by rpki-client on console-fra.rpki-client.org