Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          XdCyZrYBDXLW8OFphwFPcRWE1y3B5c50llOckomOVNM=
Subject key identifier:   7C:AC:02:26:77:B9:F4:BF:08:22:63:C8:4F:30:A2:95:E2:44:92:8C
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       018F86DA61D07C118BE397510A91CA35361C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          08F9
Signing time:             Fri 17 May 2024 14:00:09 +0000
Manifest this update:     Fri 17 May 2024 14:00:09 +0000
Manifest next update:     Sat 18 May 2024 14:00:09 +0000
Files and hashes:         1: 7xAcmo220oCYc6gaudf4mxgJx1M.roa (hash: zweiLRIChZgxvn1lL8CGIVywv+/wxSDhmEu7DizOmRI=)
                          2: DjpiK-idFi9Jj0jLfFes12qpNkw.roa (hash: p0j5AZyoRZ2m5AglnY2IwDKOgCTmoKmDLzax7CQJo9I=)
                          3: TteCBq_FU6OzYxaEQHjFaGVPWHw.roa (hash: hQMDD3EWk9pWkeFYORgR3VdYIvHSGnLWH1OKy8EHgxY=)
                          4: bnxGWJgkPqd_WZXb6kcQAxnWsQ4.roa (hash: lHB//2jMJK0Rlw3CATfwKOIgzWwYcpOhYEmhkN+X3aY=)
                          5: cD818lkQO-1Wu10LA_LvgD76Y_Y.roa (hash: rUyxcMcVJQWkq84OVNwzqkYtyTOS2SWxoXeO0KHF9UE=)
                          6: cmgfH2wI0UJnhqDcgAz3zUbYZHI.roa (hash: Amk49id7tOLGoYbN6paNUz7WsMHgKPP1/t7duzWEP2c=)
                          7: eGOoeHdRM4MXkUTJfeE2wlJSuaU.roa (hash: Dz5uG8huimTPFasoTIt8FIEB5NsbsUTHehM8UtbhkOY=)
                          8: lMwdxLB2aYNUiUDzPIrGiTLw6o0.roa (hash: +e941d5JqkU73awJvrX/JDw/R6fViyjAoFYp/d21f4U=)
                          9: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: 2D9KpeQ4XfNV/1nlHG6MV2payZmcsKGBO+ShrhW/BQg=)
                          10: sDbQELwdqGsekMU_dQv2V7Vfov4.roa (hash: FcIF6v2XXYR/R2dybxEJSyASv2XX1egYZJY8wGbVCyU=)
                          11: ytH8aQtAcOdvBqtDKYBg0LxE0f0.roa (hash: 5zz9Iy5Rw0SOMGzRpjJgWquWO9+jEkUF8anl1sq0FcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:61:d0:7c:11:8b:e3:97:51:0a:91:ca:35:36:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: May 17 14:00:09 2024 GMT
            Not After : May 18 14:00:09 2024 GMT
        Subject: CN=7cac022677b9f4bf082263c84f30a295e244928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:a8:b7:5a:fe:67:3d:61:b4:8e:bd:3b:39:
                    10:a7:9c:3c:1e:17:3e:e8:38:fa:62:9d:c4:68:74:
                    96:10:35:f2:7b:82:0b:16:a8:f0:7b:fe:1f:4b:5f:
                    84:13:40:41:70:e2:65:5d:f2:0d:64:82:05:56:ff:
                    49:6d:cb:89:8c:8e:68:48:bb:d2:ae:01:c1:c1:12:
                    8d:34:c9:36:c7:a9:37:ef:37:a3:db:40:a0:6f:56:
                    2e:cc:50:31:87:23:b1:27:fd:18:93:72:b1:fd:dd:
                    e1:e9:2c:35:a9:ae:53:cf:52:0f:01:35:ed:26:eb:
                    de:a1:28:67:5f:05:ff:ed:4a:2e:f3:04:f8:4a:0d:
                    45:c0:68:de:b5:c6:59:4f:1d:08:c9:7a:59:23:2a:
                    bf:30:b8:0c:eb:1d:36:4c:f9:bb:67:43:6c:6d:55:
                    1d:30:a3:d1:d3:4f:7f:40:c7:0d:7b:40:f0:ad:87:
                    39:69:9a:9f:02:f1:73:fc:19:79:a1:0f:c0:5e:f1:
                    ca:c6:8f:be:ad:e3:51:eb:43:e9:0d:a4:4b:66:0f:
                    96:4c:02:55:9b:a5:5f:fa:26:61:14:22:56:1d:30:
                    c7:97:51:fa:54:81:2f:e6:7e:88:fe:07:1d:20:4b:
                    d0:aa:a8:22:7f:40:59:72:2c:6b:2f:39:5f:89:b1:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:02:26:77:B9:F4:BF:08:22:63:C8:4F:30:A2:95:E2:44:92:8C
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:46:b9:b4:a3:b5:1b:7c:87:f1:1d:8d:67:14:e6:4c:65:
         0d:3f:7f:c8:ea:18:3b:d9:18:6e:bf:c0:4f:26:e5:00:ff:07:
         b9:e9:4b:00:9e:a1:93:92:ae:6c:01:53:ef:7d:7a:49:e8:30:
         6b:50:05:fd:8d:5b:ca:27:fe:0d:3f:a2:96:cf:5f:11:4c:f2:
         ba:9d:91:1c:5a:0e:48:f3:71:fd:b7:75:7c:b0:8c:e8:75:ea:
         34:d1:d8:41:25:31:a7:77:71:3a:d9:a8:22:5f:b1:aa:93:69:
         61:73:44:19:95:1e:2d:b9:7e:3f:35:bd:1f:7e:95:1b:f8:39:
         8b:3e:ad:48:6c:ba:84:aa:10:7d:e3:11:fa:c1:43:0d:28:d4:
         b2:ba:2f:af:63:19:ef:f4:72:6a:3e:05:87:1a:32:f6:0d:9f:
         d1:69:19:a7:fb:62:6c:ee:6c:f4:35:36:87:9d:de:22:63:2a:
         db:47:a3:cc:50:d5:87:71:a5:ed:c1:a2:c8:8f:74:32:29:81:
         f5:25:4b:11:5d:f9:43:26:81:cc:f0:5b:24:e0:7a:de:a0:62:
         7c:7c:ec:e3:d7:d6:f7:d1:49:ff:21:34:0d:7e:a5:57:a2:61:
         8a:95:99:be:9f:4a:3d:88:90:fd:11:e3:be:73:a6:38:92:8a:
         e5:59:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:04:09 2024 by rpki-client on console-ams.rpki-client.org