Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          zyNhhZ80a/a7rG2JXCnzfLjtus6iq4ItrwJNiBJeh9Y=
Subject key identifier:   93:B0:A5:7C:B7:68:2D:44:64:6E:8E:65:19:01:B9:75:41:04:B1:BA
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       018F8DB888DA93A793B906AD0D3B106EFBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          0C1F
Signing time:             Sat 18 May 2024 22:00:32 +0000
Manifest this update:     Sat 18 May 2024 22:00:32 +0000
Manifest next update:     Sun 19 May 2024 22:00:32 +0000
Files and hashes:         1: 3WoNDtF74VJJtXNW8utPjAW31OY.roa (hash: /eVJxZQlkXO+Epn8EsWE6u7WTgDm/8wCtJ9tYTDOydU=)
                          2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: xi3KEFtabt4TBWSVokUz4W+niNd8sSmHVluGvSuqEPM=)
                          3: mbY4Z0nWGqC8Ha8OAMCahhOEZ8E.roa (hash: 9uvLoMAWdK9RUFMOGqTW5L2cS3HeBvgth6tO4rVuQhU=)
                          4: nXdgSXUgZDCPCgyJHlSIyqenf5c.roa (hash: EQL858DDukSLJWgDEDN6D3sXERmKOKgoKtQGEejXVc4=)
                          5: sURfUMkw8FDTmRE8J898y06UUp0.roa (hash: EY37OvDyezKBeH0HWH0nWkPMHlQGu8l5ODW/Wu24fd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:88:da:93:a7:93:b9:06:ad:0d:3b:10:6e:fb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: May 18 22:00:32 2024 GMT
            Not After : May 19 22:00:32 2024 GMT
        Subject: CN=93b0a57cb7682d44646e8e651901b9754104b1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:b3:61:ba:80:d3:3b:21:80:fe:21:cc:6d:
                    d4:75:84:56:b0:c3:ca:d2:8b:53:d3:ce:f9:ae:68:
                    e0:85:23:8b:3f:e0:e4:ab:52:c9:de:f0:17:0c:60:
                    68:8a:c4:a0:3a:4d:72:71:ae:e8:6e:cb:53:ed:71:
                    0e:3b:fb:e1:92:1b:2e:b7:d4:b1:1a:9e:a1:22:6b:
                    10:33:4b:40:09:0f:86:8b:d9:fa:42:a5:3b:69:4f:
                    76:3e:bd:17:de:72:c9:e5:2d:13:b2:1b:36:2c:69:
                    30:84:ef:9d:11:28:ca:bf:51:ab:c9:b8:3f:5d:2e:
                    ac:9e:d4:1e:d8:1a:8b:74:5d:ea:9d:fa:3e:ac:26:
                    0f:d4:80:76:4c:96:c2:ca:65:d5:15:01:a3:84:ad:
                    9a:89:e6:e8:4c:92:50:e2:54:66:5e:49:88:bb:43:
                    35:1d:31:58:0d:37:5f:72:cf:d9:9e:d7:66:e3:fc:
                    ba:fa:85:0e:3f:cf:61:3e:21:7a:d0:76:c0:25:7d:
                    76:46:7f:4d:4a:be:68:08:47:82:63:a9:63:52:e7:
                    91:70:6e:cd:4f:9a:56:1c:e0:e7:b8:c1:71:f1:2d:
                    7d:fc:ef:0c:f1:ce:d8:ab:55:79:58:77:2e:8a:b9:
                    e2:59:bf:c6:f1:35:0e:e6:37:1b:fb:ab:20:fc:e9:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:A5:7C:B7:68:2D:44:64:6E:8E:65:19:01:B9:75:41:04:B1:BA
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:b0:3a:ea:ab:2b:62:64:7b:07:bf:52:37:20:62:92:8f:
         e2:d3:c9:6c:0a:ba:07:fb:99:dd:46:42:23:cb:51:f4:cd:16:
         b2:5a:28:d2:9c:d4:ee:35:a5:95:5b:84:79:c7:dc:02:6f:7b:
         e6:0d:69:a2:38:79:d5:01:1a:7f:f5:fb:f6:93:c2:25:0c:4d:
         aa:14:a8:51:1d:22:6f:0a:79:a5:dc:eb:25:cc:13:4f:8e:ad:
         95:4c:18:c7:85:06:fe:c1:98:88:97:6d:39:7d:a3:8f:c2:96:
         84:93:04:53:0a:f1:d7:e5:98:3b:34:7d:64:d4:ce:25:f5:2b:
         5e:37:2f:bb:cd:58:96:65:7e:37:39:e3:2c:62:8a:79:1d:66:
         82:6a:78:d2:ef:47:44:23:99:4a:ef:92:87:e7:ab:4c:69:29:
         9b:57:1f:f4:b1:ab:7c:6e:0b:01:0b:a0:5d:35:f8:06:23:dd:
         6f:e7:92:c9:a5:09:32:f5:74:b3:e1:f1:25:ca:36:7b:bc:62:
         dd:88:a6:3c:09:4f:24:4b:47:9f:6e:ac:cc:86:db:64:31:67:
         fd:b6:7d:56:6e:5d:b0:7e:6a:7f:a4:10:b0:e7:2e:ea:04:7c:
         63:47:f8:0a:ee:5c:d6:2b:ee:60:44:e5:58:9e:1c:e6:d1:5d:
         ad:4e:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:45:49 2024 by rpki-client on console-ams.rpki-client.org