Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          WE3ISa8+u2YvZgNIlPWphWWtT/AjLY2B7rf5wMZf1jI=
Subject key identifier:   CE:DD:A0:CE:B8:09:71:A9:37:0B:D8:60:DC:8A:78:6C:9D:1F:44:D0
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       01901F34FEF2470535B4BDF2721D2355E85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          1208
Signing time:             Sun 16 Jun 2024 04:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:25 +0000
Files and hashes:         1: 0prrmwK9kbiI57cgWMJEdAjX8Gg.roa (hash: jnPdCch38Xgk00VdXz6H58BgFNvdAesRE3dhYks/Nyg=)
                          2: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: Pg7fj6UtQ7Dwa4K12qDKRe/M0R0EooyQr10Rk+X2/JQ=)
                          3: DunjairTKuXQjriYWwUsOIoDBJ0.roa (hash: 8kr7XvJTpZrXAhRYadgXFJE1IUqSB49pZbXIXstym1U=)
                          4: PuPuy531kNasXvi535wRY9D0_7w.roa (hash: rM3uXWVsndtJem4qvsOHFBKJtk9rzp4ADSIAH0zxD5g=)
                          5: dqk4eEX1gbXe1v0aQ78x0ok4AZA.roa (hash: XmqkX5rBV7GEdFwf5GAZLLZ2npMSlovyf0TdtacO0so=)
                          6: f_PhZ3cVUwt8KU-Q3R_Rp7U5Qqc.roa (hash: pw8iMe30wEQ4gcHbIBeGRCxxy8nXFVPTczNYkVJNSus=)
                          7: pmuBgLn6GCY-3DVdVZHjYQNPrck.roa (hash: +hxvnHf9CAHfpZhpSFHdHIfb7tYSggV5MB239KbZ+Ic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:fe:f2:47:05:35:b4:bd:f2:72:1d:23:55:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Jun 16 04:01:25 2024 GMT
            Not After : Jun 17 04:01:25 2024 GMT
        Subject: CN=cedda0ceb80971a9370bd860dc8a786c9d1f44d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:fc:b7:d1:9e:94:7d:5c:31:cd:29:d3:15:
                    d7:a8:56:9b:b5:f4:92:81:4f:21:ff:2c:08:12:9c:
                    9b:80:dc:2b:9c:d7:bf:3a:ed:d2:00:58:bb:e0:0b:
                    96:14:5f:27:cb:1c:9d:f7:b9:0a:c7:2d:1f:83:f7:
                    ce:04:33:d2:d6:26:a3:cc:54:89:7d:79:a3:b8:75:
                    9f:13:65:1c:27:e2:a4:ae:89:33:d7:45:b8:af:db:
                    d2:e6:53:4f:b4:49:48:5e:d8:e5:22:9e:9e:13:91:
                    2f:c6:35:4d:34:e9:a6:05:c3:40:b2:95:b7:20:8e:
                    2d:40:c9:ea:f4:31:14:e8:0a:83:76:97:14:94:04:
                    94:87:51:e1:70:db:60:44:1b:28:0c:98:f6:d2:78:
                    08:4e:6f:2f:32:c8:8d:bf:40:2f:86:45:66:7a:67:
                    74:d0:f5:50:f0:87:a8:5f:91:81:cd:59:d0:cb:40:
                    59:3e:32:14:c0:56:b0:bb:6c:82:26:1b:a2:61:12:
                    f3:66:92:87:49:12:11:a2:d1:ff:e9:bb:66:c6:e9:
                    f1:87:88:42:2e:90:3b:df:31:be:bc:8f:b9:fc:21:
                    28:6f:54:20:e3:b3:31:50:99:7f:0d:93:f1:b8:2d:
                    2a:b6:95:1d:de:c4:3c:e8:0b:de:61:ac:44:eb:59:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DD:A0:CE:B8:09:71:A9:37:0B:D8:60:DC:8A:78:6C:9D:1F:44:D0
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bd:02:15:6e:a4:8a:bc:f6:80:19:22:95:40:ae:2f:f9:ed:
         68:f7:cc:f6:88:56:05:7e:00:a3:b1:e7:93:ea:e2:4e:d0:ea:
         84:32:c0:51:d1:59:da:3f:3b:fb:a1:18:33:c5:ca:d3:9d:0b:
         bc:ca:b1:df:a3:1b:95:e1:83:87:7f:33:a0:ba:92:f1:6d:e8:
         69:c3:7a:93:a6:c5:f3:80:89:fa:a9:71:05:c5:d5:81:5d:8f:
         90:94:d1:16:6a:3c:d5:2e:3e:56:60:20:1d:e9:59:0a:c9:fa:
         0b:99:aa:99:31:76:c3:f7:ba:77:6c:8e:26:69:01:43:75:31:
         33:e8:af:35:b1:51:f6:c4:e0:8e:d0:08:39:c5:bd:bd:8c:09:
         78:d4:12:45:86:be:61:f4:9f:88:39:dc:a7:6c:f2:7c:31:e1:
         bd:d3:e4:80:fb:9d:4e:6f:4c:90:8b:c4:29:9d:14:b6:16:a6:
         7f:f8:2f:08:ea:75:fe:60:eb:39:a0:13:d8:3b:08:35:c1:40:
         6a:38:7b:14:b0:a0:97:98:e0:6d:b3:d8:ca:25:cf:39:8a:d0:
         b3:69:b7:17:62:fb:37:04:6c:d5:19:21:eb:d2:81:16:96:5d:
         a4:8e:b9:ef:d5:33:82:9a:da:a7:eb:5d:9b:52:31:73:87:b9:
         75:ca:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:41 2024 by rpki-client on console-fra.rpki-client.org