Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          MxbDrAUyHilQDBFQ4RKAmy46wc0BkNdXVhzJlzyvJuo=
Subject key identifier:   CB:B0:A3:71:DD:31:0D:32:08:AA:6E:C6:66:77:7B:10:70:F7:08:0C
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       018F5580EE34A781E1B8BC4D430CC8B7587F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 00:01:03 +0000
Manifest this update:     Wed 08 May 2024 00:01:03 +0000
Manifest next update:     Thu 09 May 2024 00:01:03 +0000
Files and hashes:         1: 2k48w00SwHKyjOdGRU_yBrUYwaU.roa (hash: uHAZpCUrITSsG+QhGFPTqRBsEhR4tgDYQmdzGTWm13w=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: 1SKWTVJdwAJNsAiTZ/OgyGG0wVpm75bk0VAY5moHPPQ=)
                          3: K5tmgLwSKSIHb_6T-Y8s0VvFN64.roa (hash: GP9XfF5SQIqFSAU7ehXm1gyttzV4nxsdj4OGMd1ZjXw=)
                          4: _ZHX-Y48ZiSGxdFdjlU5hz3zgds.roa (hash: 0ebihoJypkCsn2GUaJYU/VChaIgTkq/zlmG+fQmjYho=)
                          5: i6_4q9334QpnD2WezF7Rmgf9j_k.roa (hash: amQ31RBnLuOUUB5vUxdaRbXOXykCOJuxRTWhVb6ARcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:80:ee:34:a7:81:e1:b8:bc:4d:43:0c:c8:b7:58:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: May  8 00:01:03 2024 GMT
            Not After : May  9 00:01:03 2024 GMT
        Subject: CN=cbb0a371dd310d3208aa6ec666777b1070f7080c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:22:45:4d:7d:a7:21:87:16:ac:81:60:0e:
                    51:ca:e7:3c:e6:3a:15:ff:81:5c:61:13:b0:27:e3:
                    f6:cd:31:b8:0e:ae:da:ae:97:97:36:f7:8e:cd:ba:
                    5a:ac:84:5d:57:f9:28:4f:2a:1e:56:f6:96:80:80:
                    f2:6a:f2:fe:2d:41:96:74:56:9c:32:7a:5f:a9:c8:
                    e0:aa:4d:dc:c8:60:a0:ee:72:16:8a:58:f6:b4:df:
                    5b:c3:c9:08:94:5d:0e:5a:ed:a6:4f:df:b2:e0:79:
                    ba:7b:5c:8a:c4:05:50:e2:ac:2e:76:e3:21:e8:93:
                    a8:70:44:21:36:69:62:03:b6:8f:21:3b:2e:c9:80:
                    7f:be:80:d6:ff:62:98:f9:39:fe:15:3c:dd:13:c2:
                    08:ad:e8:a6:eb:d6:1c:67:b5:2a:8d:65:fd:d5:bd:
                    0a:8e:95:d9:3f:41:75:13:75:11:1a:af:6b:db:64:
                    7a:5e:9a:bd:bc:bc:fc:0c:11:9d:04:18:54:5e:9f:
                    9b:19:1e:42:e1:c9:ec:2d:92:da:38:50:9a:54:0b:
                    6c:50:30:ac:e6:e8:c2:fd:07:b0:bd:11:12:93:4e:
                    a8:c6:7d:c2:8a:2e:de:fe:c2:8c:21:a4:b9:65:86:
                    62:64:17:cb:bd:01:f0:85:4c:9d:e3:0d:7b:1a:6e:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:A3:71:DD:31:0D:32:08:AA:6E:C6:66:77:7B:10:70:F7:08:0C
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:3d:ee:03:1f:f1:69:21:83:c6:fd:24:d8:5d:e3:ec:4e:
         1b:7e:64:39:54:84:4a:ff:7d:74:a1:8a:9c:03:d0:89:2c:de:
         18:36:75:06:5a:4f:1e:6c:8f:1b:11:3d:d4:74:5c:4f:5f:46:
         88:e4:a0:ec:d3:e2:72:ff:80:cf:23:b7:f6:21:eb:04:a8:50:
         aa:b8:54:28:63:05:3f:b4:7a:cf:d5:a7:57:04:55:e8:ee:ce:
         c3:6f:a8:b0:f8:51:6d:12:79:a9:9d:c1:15:fd:e5:20:8c:bc:
         86:be:87:1f:82:ef:0d:9d:1c:06:66:3d:8c:91:f4:8d:7a:18:
         77:17:e3:af:14:f4:d5:6d:50:e0:77:d2:8d:3a:e3:96:f3:4b:
         87:ee:62:f5:70:55:be:29:06:fc:77:c7:ff:7c:5c:2f:df:51:
         9a:3d:98:8d:57:92:8b:2f:5b:11:52:a1:b6:8a:a0:71:20:8d:
         5f:9f:a7:f9:6f:13:88:76:32:eb:94:33:be:6e:7e:b9:76:24:
         61:b5:4f:08:1c:2a:be:db:db:bf:a1:51:dc:f1:c8:60:ce:eb:
         19:22:9a:f0:21:8d:c8:31:01:5f:01:b1:92:37:16:86:5e:41:
         8f:59:cb:6e:a9:70:f1:90:cc:a6:76:51:f1:85:5f:d3:f3:e0:
         cc:c9:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:52:05 2024 by rpki-client on console-ams.rpki-client.org