Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File:                     XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier:          WD87fPHxq5zLyV9ie7v5Gfo3bSsd6ruNTN8KH7hjnRo=
Subject key identifier:   A7:E5:DF:34:9A:7E:62:7C:A5:08:87:08:7F:6D:20:63:27:C2:75:7D
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer:       /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial:       018FA81E1E4956B1A5B4B00FCD4644BC889F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number:          118C
Signing time:             Fri 24 May 2024 01:01:37 +0000
Manifest this update:     Fri 24 May 2024 01:01:37 +0000
Manifest next update:     Sat 25 May 2024 01:01:37 +0000
Files and hashes:         1: 6EgqkZi8qb3OrE_KatzUDRXDERY.roa (hash: /DKWxAGTVy8qIasX07gtHjL/ijmd5q4mP+6zO7AvQsY=)
                          2: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: +WAue/kqmX9dXXke1SpHjlcy9qH6uMpoh7r/99v5fIg=)
                          3: fRhaL588aGbUVfpiHLJUiVfi1Nc.roa (hash: hDFdlx5f5Y21S60sT46E61l5rNxvxeYDKF0Eak7rntI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a8:1e:1e:49:56:b1:a5:b4:b0:0f:cd:46:44:bc:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
        Validity
            Not Before: May 24 01:01:37 2024 GMT
            Not After : May 25 01:01:37 2024 GMT
        Subject: CN=a7e5df349a7e627ca50887087f6d206327c2757d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:31:b2:96:ff:8f:33:b1:5f:93:c7:39:47:
                    5e:80:8c:eb:09:90:e5:22:7f:eb:98:36:31:2f:9e:
                    ab:75:27:0b:bd:73:cc:d8:70:0d:fa:f7:71:68:06:
                    25:d2:d6:e2:ab:1a:9b:96:56:99:f6:a9:fb:18:c2:
                    ce:58:9b:9d:79:87:90:03:79:fb:0f:e1:14:b8:99:
                    66:8b:ea:d3:fb:48:63:fa:51:c4:07:36:ef:ff:6f:
                    f7:4b:7c:63:b6:87:0d:61:48:27:9d:6c:12:b6:2d:
                    ea:6e:4f:24:3f:ce:7c:ed:59:1e:38:8f:12:8b:8d:
                    90:06:4a:90:a4:48:97:a8:7e:4b:d3:88:a0:12:d5:
                    8c:9d:df:1f:c0:11:77:10:20:f0:72:12:e3:01:ad:
                    d6:40:39:b5:f4:ce:9b:8e:c5:0b:9d:79:52:ad:da:
                    86:33:b4:9e:66:12:b7:3a:95:8e:b6:e5:a4:bf:8b:
                    c6:6a:4c:6d:ee:c4:87:18:c5:e6:de:ac:65:ff:43:
                    7a:85:4d:11:dd:58:30:87:46:9f:01:b7:e1:28:c1:
                    4e:05:b9:ce:c4:a3:e2:5c:e9:a5:c2:8b:11:dc:49:
                    ee:82:9b:ff:52:55:f2:1f:7f:5c:f5:26:ca:84:a9:
                    4c:6e:31:ad:b4:5d:7b:eb:6f:07:8c:3e:0c:b2:5d:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E5:DF:34:9A:7E:62:7C:A5:08:87:08:7F:6D:20:63:27:C2:75:7D
            X509v3 Authority Key Identifier:
                keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:dd:18:87:0b:86:e9:f9:62:f4:f9:d2:1f:17:c1:25:64:
         fc:2c:49:ed:92:18:d2:00:7a:b0:71:13:63:57:5e:8d:6a:6a:
         e8:9e:fd:5b:10:72:84:cb:8c:05:eb:02:35:df:18:99:c5:57:
         b5:2a:e1:f9:b8:d1:b6:51:17:74:0d:8d:b6:db:5c:83:21:b0:
         81:1f:cd:75:dd:05:00:12:8b:40:ab:66:e1:25:74:5b:6b:4f:
         fc:8f:65:bf:c1:d3:7f:92:b3:95:e0:60:ea:22:3a:3f:cc:6c:
         0f:c9:f1:2a:24:df:82:b5:d6:ff:72:88:40:c5:8a:c2:be:7b:
         04:69:dc:89:34:5d:38:cf:cd:f7:9f:cf:de:c7:81:8b:e6:64:
         6b:b5:76:c8:5e:e7:57:42:fe:fc:c3:b0:35:27:26:2a:b4:4a:
         68:1b:58:43:62:ba:39:41:d3:4a:a8:47:12:43:7d:38:d7:3b:
         c2:4f:1b:49:49:dc:a2:95:9a:6a:14:81:b9:92:9d:78:2d:91:
         cb:9e:4a:1b:4d:6a:f2:7c:73:e4:1f:0a:e2:7e:44:9e:19:b1:
         f5:d2:6c:d8:da:9b:4c:15:a3:9b:30:fa:4d:c2:d8:66:a1:0f:
         27:a8:35:03:bb:cf:63:88:e4:64:b9:29:2e:5c:0c:01:cb:2c:
         d8:d1:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 03:17:13 2024 by rpki-client on console-ams.rpki-client.org