Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File:                     4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier:          hEA5Ws2Dw4Q1SJnSm/EC9mQWHjRz+v4cNwdzkrus1+4=
Subject key identifier:   A1:85:2D:81:06:48:74:35:EB:A4:CB:6F:39:F7:E1:E3:22:2D:51:03
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer:       /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial:       018F866C96330128E4B68FE9E5A282EFAC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number:          0992
Signing time:             Fri 17 May 2024 12:00:14 +0000
Manifest this update:     Fri 17 May 2024 12:00:14 +0000
Manifest next update:     Sat 18 May 2024 12:00:14 +0000
Files and hashes:         1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: PA4TG0Z6YnwUDiSG2J4o5NzDhtBpOO9eBf68payVPPY=)
                          2: IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa (hash: QmXKZimEA4Ngtjg2ZdYcXuxxxYpr0Wi2yuDSbZpDfBI=)
                          3: V-Oh9-iBy5SPjZ5yHk5zXD1T98s.roa (hash: 4wqzVTsR1NlJjYmMe/uoOExAU6umOUIyuNom8VGcmAE=)
                          4: YZ_uk0AwzR-Ff0OiZRuw41qX0vQ.roa (hash: zLbmqPhAX0Q+0UEUIc+q46B1jtxYkovpa3rZPy/6Cd0=)
                          5: dbYnx4iYb9WYJAumHyCMIYsUECY.roa (hash: mJdK9SfFJEXfCgq16GSe1e4bH053bLTJoJCo2qrmAuw=)
                          6: qW8uj814qLw3SY6PDe8Zmlyj0Ls.roa (hash: wRvHUWiO9P1aGJMVjBkUsPEGRX6tArewRGfuGHnOCRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:96:33:01:28:e4:b6:8f:e9:e5:a2:82:ef:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
        Validity
            Not Before: May 17 12:00:14 2024 GMT
            Not After : May 18 12:00:14 2024 GMT
        Subject: CN=a1852d8106487435eba4cb6f39f7e1e3222d5103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:57:6e:08:47:44:9f:44:79:c7:92:8e:3c:
                    91:b8:2e:19:1e:45:34:4f:35:99:e9:3c:9b:d6:24:
                    d8:7b:05:67:e6:1d:cc:24:c4:b2:e6:ce:6e:02:da:
                    ed:4b:80:8b:ec:07:ae:ae:b3:76:4e:7c:be:c1:6c:
                    64:73:01:86:0d:7a:1f:d6:d6:78:43:20:f0:5b:8f:
                    ef:60:2b:97:31:3d:9b:c0:8e:01:9b:fd:11:03:c4:
                    ed:42:54:3a:fa:63:cc:68:cd:b1:40:5b:bc:a8:18:
                    8b:af:13:49:2e:ca:84:c8:25:8e:b7:13:b5:9f:d1:
                    1d:9d:69:47:a6:58:c8:ec:30:90:2d:ae:31:4a:38:
                    4c:e2:fd:52:77:96:4f:4d:2f:5c:8c:79:d2:50:2b:
                    eb:1f:8d:0e:30:c3:26:46:a4:9c:8c:6b:25:a5:ec:
                    87:c8:d7:7f:58:8b:5b:46:0a:b0:91:48:1c:0a:f1:
                    fb:b8:e3:c2:dd:15:d9:e4:62:08:ee:7d:e0:9b:fb:
                    6b:62:60:23:07:8f:73:31:c9:0a:71:f4:d7:5a:45:
                    80:e9:1e:9f:22:fa:c0:f9:13:2e:23:d1:0e:9c:60:
                    0a:74:61:aa:6f:56:6d:49:80:d3:c1:4a:9f:60:0a:
                    fe:7c:33:08:a1:8b:df:45:2e:c7:77:e3:76:55:68:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:85:2D:81:06:48:74:35:EB:A4:CB:6F:39:F7:E1:E3:22:2D:51:03
            X509v3 Authority Key Identifier:
                keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:35:41:6e:f4:3c:5f:c8:c9:0a:88:5c:4b:c9:ae:70:bb:
         15:b9:4f:0c:4d:52:e4:7d:e5:60:f5:1f:17:e9:ce:6a:11:ad:
         88:1e:e5:56:42:bb:a1:07:54:da:db:fc:a0:18:3c:ea:f2:2d:
         d2:d7:5d:fc:c5:52:21:28:b2:fb:33:b4:70:da:25:e8:15:d8:
         aa:19:d4:80:91:89:7d:0e:19:06:23:97:d0:5a:48:29:c5:50:
         ba:8e:17:17:52:57:bc:bc:1a:f8:5c:c4:50:c9:c0:38:b1:aa:
         db:f7:62:c1:09:37:ae:ff:27:49:7a:2c:6e:f8:77:9b:3d:e4:
         8f:3a:e1:55:2b:06:c5:61:78:c1:33:92:48:c7:27:a7:db:9a:
         3b:40:85:3a:4b:78:07:c7:b3:6f:5b:02:13:b2:52:28:e3:8d:
         c7:e5:98:76:c7:d9:65:8e:54:a6:5d:c3:ef:26:4f:e5:90:9d:
         e4:06:08:c6:43:e7:60:2a:03:0b:89:f4:5a:a0:4c:e1:92:61:
         27:3d:be:9c:03:cf:02:bc:fe:78:b6:52:7f:d9:68:72:f6:91:
         90:6c:98:58:6b:5c:6a:ce:81:09:3e:7a:cd:2a:19:0c:39:ac:
         38:dc:f9:af:35:9a:15:39:7b:59:8b:21:d5:20:bc:d4:50:24:
         7d:10:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:54 2024 by rpki-client on console-fra.rpki-client.org