Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          hUUosNtQhsNIOT534jDypzPcCbL4FPbzpGs5ji61fW0=
Subject key identifier:   54:64:85:8E:DB:23:B9:62:8C:3D:82:61:50:44:88:BB:AD:6A:97:F7
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       018F6B2D19684089B126576E3B6F87BC8272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          0B1D
Signing time:             Sun 12 May 2024 05:01:08 +0000
Manifest this update:     Sun 12 May 2024 05:01:08 +0000
Manifest next update:     Mon 13 May 2024 05:01:08 +0000
Files and hashes:         1: 4LpcpGYrt6fVEGkSYSPiVQAEh2o.roa (hash: EQYBAvaLlThqGNht1ETCVYn/q8g5DYrLGGCVB17RAlc=)
                          2: NWE2cPAGC6ekQTNRvvQBDzNbBCI.roa (hash: JYQddBlHcfkT0Fzf5sAV677CRcrL/4SBQbdwWPIfTIA=)
                          3: RzyQokfWZxJfppvqfNbidjApPGg.roa (hash: 113Rxhoul7DXH/5cTBRoEuJgb/sipBR22oH2/P9m7Lw=)
                          4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: U7FaSWZfDVgiDudrxQ/KKBq6aDWYBJSh4xTklwBXcSs=)
                          5: xcHNitLb9aO9KKFeoLbAhjawNbk.roa (hash: x5fFdrDyNY+rQ0+Uhn+sSfPeEHDm8RE7R9gBjffHymo=)
                          6: y0tVikKKa4RT2SEY-CksoBOxpiQ.roa (hash: 2Y7v6e7D4GiWw+0l7F7wtOHschzQOEyJAJcFL408en4=)
                          7: yJdumWwVYiSKS8VI5gvTdgFpbeU.roa (hash: hBIzIO3zEnYPx7vs9kl6JN5yTUWVMJQ4gdpi7rOxflw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:2d:19:68:40:89:b1:26:57:6e:3b:6f:87:bc:82:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: May 12 05:01:08 2024 GMT
            Not After : May 13 05:01:08 2024 GMT
        Subject: CN=5464858edb23b9628c3d8261504488bbad6a97f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:92:db:bc:d7:0e:0a:02:db:36:84:5a:48:
                    ef:26:87:e9:92:88:06:d5:72:2a:3b:69:6f:f5:a7:
                    aa:e6:f9:97:ae:e0:a7:3e:d3:ca:05:58:3f:f0:91:
                    dd:04:4d:d4:ba:5b:26:92:77:6b:a1:7a:75:c1:ea:
                    92:7f:ea:93:92:04:50:b7:a2:b7:73:00:9e:0a:b2:
                    8e:04:0c:97:03:56:34:ae:14:8b:a6:c7:c7:50:f3:
                    74:26:7c:73:d2:09:6a:fe:a6:f4:82:fe:5b:f4:2f:
                    88:e5:34:b5:74:d4:06:13:ec:fe:1c:24:c2:c2:00:
                    68:7e:36:36:21:23:73:b3:70:fb:2c:8c:ec:00:89:
                    a3:fe:8b:10:f5:94:ba:07:13:43:2d:31:3c:fc:5b:
                    65:44:b9:c5:15:14:53:89:72:6b:6c:54:65:62:a3:
                    ec:29:6c:72:d1:55:5e:1c:09:d2:a9:dc:5b:cb:f3:
                    01:5f:82:59:7c:5f:be:74:6d:42:0c:8e:03:7b:77:
                    0b:98:ff:c2:d6:a5:99:14:d7:73:c1:f6:9e:4c:cc:
                    46:46:a1:53:5a:89:9e:5e:70:65:1b:0b:4c:23:f7:
                    51:2b:8f:dd:e5:16:35:e6:e8:c5:e5:81:6c:4d:37:
                    52:f3:01:ff:1c:5a:c0:27:06:0e:73:77:ee:66:00:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:85:8E:DB:23:B9:62:8C:3D:82:61:50:44:88:BB:AD:6A:97:F7
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:ae:aa:d2:df:20:1a:3d:1e:c5:ed:7a:56:bc:2e:00:8c:
         7f:af:f4:c1:0c:a4:d8:39:de:81:98:a1:58:75:c4:7e:4a:63:
         93:3b:d8:1d:61:17:f9:6b:d1:66:8a:db:67:64:8f:b4:0d:2b:
         cf:17:ca:3f:cf:01:3b:ee:bc:38:6f:d8:49:43:c0:d9:5b:d5:
         18:db:d1:f9:30:04:4e:30:6f:71:9d:84:88:09:84:71:56:fa:
         15:89:87:79:fa:8d:4e:a3:8d:71:92:44:7c:64:55:5c:f4:08:
         7e:c1:c1:58:1f:eb:7c:e7:2f:bf:c4:37:2b:be:b1:2f:d8:7a:
         5f:89:85:b4:90:be:2a:7c:77:90:74:10:a6:39:0b:6b:83:5b:
         80:8e:ef:9f:38:71:c8:e7:de:51:de:ff:a2:b7:27:a2:c1:36:
         d3:f8:7e:c4:85:cb:35:a2:12:89:31:e1:78:12:20:8d:8f:5c:
         36:69:ed:95:18:c6:37:68:9f:20:8c:70:2a:5c:54:8c:b3:9d:
         cf:da:0a:d7:8b:1f:e9:58:d0:78:48:fd:61:32:b2:72:c9:69:
         f1:0d:12:db:45:c3:ea:5e:7e:d6:cf:ed:a4:4d:4e:45:bb:97:
         b3:55:21:ef:7d:bb:50:d9:04:78:13:e3:a0:f2:b0:57:46:0d:
         cc:23:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:47:36 2024 by rpki-client on console-ams.rpki-client.org