Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File:                     smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier:          UxdHyRK4g9wBYnZWfm5pegNU4IcmEg5kjyZJidMXzdc=
Subject key identifier:   82:1C:A6:1B:0C:5A:3B:D7:FD:1E:54:46:AA:33:62:B9:DC:AF:0E:33
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer:       /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial:       018F8939A0D8A56CAAF07A4C9E60B44C55F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number:          0C30
Signing time:             Sat 18 May 2024 01:03:26 +0000
Manifest this update:     Sat 18 May 2024 01:03:26 +0000
Manifest next update:     Sun 19 May 2024 01:03:26 +0000
Files and hashes:         1: gWh6Wk1LztjLY4cJieIrlrOv81k.roa (hash: X+mt5gykzuaxS7MckaWIkBuTxnA4YhoMqCK0nkS2JBw=)
                          2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: UOTajto0rEEiUV0wqpaOwnUlBNmsZtAW4Pb42m77Bdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:a0:d8:a5:6c:aa:f0:7a:4c:9e:60:b4:4c:55:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
        Validity
            Not Before: May 18 01:03:26 2024 GMT
            Not After : May 19 01:03:26 2024 GMT
        Subject: CN=821ca61b0c5a3bd7fd1e5446aa3362b9dcaf0e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:d1:76:c3:55:fe:d1:68:aa:e0:32:aa:50:
                    87:29:02:36:a6:2e:a7:ad:cd:fd:d8:fd:ef:69:7f:
                    cb:96:53:65:d3:72:f1:9f:a3:ed:c7:c9:1a:26:fa:
                    92:92:f8:26:c4:6a:6c:dd:56:1a:45:0e:aa:0c:88:
                    bf:56:37:fd:76:7a:75:9a:1b:31:29:18:13:fb:a0:
                    48:e6:2b:07:bd:eb:09:63:b4:92:3f:b8:ed:4a:29:
                    12:06:e9:34:49:86:9f:96:f1:02:23:ea:b8:6a:30:
                    15:b6:78:b2:a2:70:f4:b1:0f:0b:f5:93:c6:f6:bc:
                    35:15:17:6b:81:ea:d2:ee:d5:26:57:e1:9f:c9:5c:
                    1b:5e:91:07:8a:7b:5b:84:88:ec:7e:42:11:fa:34:
                    a2:4b:78:e7:25:5d:b8:5c:66:3a:8b:86:0c:37:bd:
                    e4:8e:25:7c:5c:81:74:09:41:01:93:24:93:5c:10:
                    92:aa:18:eb:9a:46:3d:1a:c6:15:56:48:04:ff:d7:
                    1d:15:90:9e:57:cc:b7:96:34:4b:54:1d:2c:96:51:
                    91:4d:9b:d4:ae:e9:22:81:5a:6e:9c:e2:dc:8a:00:
                    ab:56:15:da:ec:30:df:fb:20:d2:41:6f:62:ea:5c:
                    e7:01:01:09:61:b8:06:48:97:6c:3f:8e:52:b9:c4:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1C:A6:1B:0C:5A:3B:D7:FD:1E:54:46:AA:33:62:B9:DC:AF:0E:33
            X509v3 Authority Key Identifier:
                keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:88:bc:7f:ab:e7:24:f8:1f:76:84:fe:b7:f8:79:ab:83:
         4a:47:28:2f:f7:99:52:5e:3f:6b:9f:f1:73:f7:59:53:bc:fb:
         3b:91:db:16:30:4d:08:9b:93:70:37:0f:9b:83:a5:9e:df:a9:
         ee:9c:11:de:b9:c2:a1:9f:dd:4a:e3:3d:3f:0f:ad:54:54:f0:
         e4:ac:46:bb:53:2c:4d:50:15:97:e4:3a:3a:6c:56:55:e1:dd:
         a1:e0:5c:f2:b6:d6:89:f9:98:7b:88:cf:5a:46:48:fb:75:89:
         c9:13:9f:8c:f0:a2:1c:42:e4:82:c0:5d:d5:68:f8:b9:09:c7:
         53:cb:f2:d9:71:b4:ca:fb:4a:87:ad:f2:83:e9:72:9b:43:f3:
         ea:80:19:66:67:9f:53:8b:58:3a:7c:17:00:7b:37:f5:03:17:
         f0:94:5e:7f:2d:ad:93:75:fc:56:a9:e9:57:04:f0:b0:09:30:
         32:63:62:71:41:28:a4:78:e9:f8:c5:ff:0d:16:f9:67:54:6a:
         a2:00:8e:2c:b2:e4:86:2d:c6:4e:78:37:da:25:ad:6d:be:66:
         b4:c1:85:1e:7f:64:dd:26:a0:a2:fc:c5:30:e5:a8:bf:94:81:
         00:58:ca:cf:60:03:e7:f9:c3:7d:b8:fc:ae:b3:9a:36:92:d5:
         a7:7f:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:02:11 2024 by rpki-client on console-ams.rpki-client.org