Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
File:                     gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json)
Hash identifier:          ouF752pDWvKv03xsheBbPPKEbb+VuFoVFGcC65u2Atw=
Subject key identifier:   07:2F:88:1B:53:E3:B2:89:0B:CB:01:72:92:A1:39:8B:0F:BF:17:B3
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018FA25448AFCAD71896956EA8F4D3F671DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
Manifest number:          11F3
Signing time:             Wed 22 May 2024 22:03:03 +0000
Manifest this update:     Wed 22 May 2024 22:03:03 +0000
Manifest next update:     Thu 23 May 2024 22:03:03 +0000
Files and hashes:         1: 6Eu48A2naORFxVzqOyvVy22s9h0.roa (hash: fhtlyh/P4f7kq9tfdwrHFKoZCegblT5+ms+oZBHVNCM=)
                          2: IdS3yV5NzB0LApCKNpVKGwMOG4U.roa (hash: xpJCNK19xOY5wRORw6WK3wQHwDLFCRDtTbywQziSQOM=)
                          3: OY1ElTH2Y-EVkZquZzG6Hc3HwrM.roa (hash: qJ3yGbvbM9ygvskm5pV/PLDc31deMwzhKOehUYSFxlw=)
                          4: XkgfkKWPoRURb6Wes5ZsQc0lkJc.roa (hash: dvQChCkpSr88LEqu4sLCpoo/9SZMFHldtfhNpPgBB3A=)
                          5: fdjq6aEZ6kd7DciK7Sgt4UqQMJE.roa (hash: emEfw6TwF1l/5DBgUz6HJD1Mcz4GJk0muuxgGMUi8zg=)
                          6: gJfiLK_JtF7dCh4dVFeRe11Q7wI.roa (hash: mCv8QpT5/sYCCXX0TG28ty2LhMHvFrI4iu38KifZVdI=)
                          7: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: pvzlRCHEHq+NnFZv/waNMc7jSA3llNXVJVHUw8qiYfc=)
                          8: jLe-OTyfu-Kmy4I72ILq_UexeK4.roa (hash: uJpGjC1kYFH42qpXXzTBSi0bVGqFCCyzLcCVWfq1jUk=)
                          9: mSs2GGpXt_LofJ59COBikVNTPJg.roa (hash: XFX7wqliHm5bFrhb54wvJAuJlwJPtVY2mrtuAWOgj2k=)
                          10: oMbaJSssqUWbVeVRbmRfbHitjXQ.roa (hash: yw2KY5dZMsRDVN8yJQUCxQSw+CitLsIGcV/seIRUqbE=)
                          11: qow4auxX9C-7UMr80RFbsckyYYU.roa (hash: bnNxdSKkSL/jJQioIgSrpl61iNFGlSETHBvJR2N5eHY=)
                          12: rb1-8VqK6WW7GnPi3dVuiMtkbjg.roa (hash: 3hK9LoK0Oj0D/HqKNm5Q37ietlXuNTYSIk9zecXjQ1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:54:48:af:ca:d7:18:96:95:6e:a8:f4:d3:f6:71:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: May 22 22:03:03 2024 GMT
            Not After : May 23 22:03:03 2024 GMT
        Subject: CN=072f881b53e3b2890bcb017292a1398b0fbf17b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:6c:a1:83:80:32:38:36:b0:18:66:56:7d:
                    e0:b6:b1:a2:12:b5:e1:6c:81:56:f8:5f:9f:34:5f:
                    83:f7:dc:0a:e7:e3:68:ef:5f:93:ca:a2:7b:c6:21:
                    0b:c7:31:8c:dd:4e:55:98:d4:10:0d:e0:16:a0:22:
                    07:02:97:24:73:16:62:30:88:4b:fb:92:bc:29:76:
                    73:4e:bf:93:4b:ab:1a:8f:ba:be:08:db:62:e2:c8:
                    be:6b:7e:8d:72:71:e5:80:db:73:18:35:7a:c8:93:
                    64:f8:a4:20:da:87:13:1c:d5:55:e0:36:a0:9b:94:
                    48:bf:25:ba:0a:96:da:ba:43:31:45:34:de:06:22:
                    ad:cc:83:09:c7:82:fc:3e:73:7a:f3:cb:28:5a:50:
                    e0:48:1c:9b:c3:00:bb:53:13:a5:15:3d:c5:d5:21:
                    40:58:d6:30:ed:a2:21:f5:39:b2:e7:18:4d:45:3b:
                    49:8c:4e:37:ff:8a:8e:2b:fb:e9:58:a7:d7:43:56:
                    21:bd:49:44:39:bd:8d:9f:bf:fb:01:5b:fd:93:ae:
                    7c:dc:e2:71:ee:0d:7d:25:6c:3d:24:d0:f7:6c:8a:
                    33:40:28:56:fe:57:8e:0c:94:cb:3e:20:c0:88:7c:
                    5e:64:e6:90:ee:c7:36:e3:8a:80:39:4e:ec:47:eb:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2F:88:1B:53:E3:B2:89:0B:CB:01:72:92:A1:39:8B:0F:BF:17:B3
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:97:b8:dd:05:77:2a:77:ba:47:10:5f:d9:7b:e0:0a:d9:1b:
         65:46:5c:e3:0f:ec:a5:88:d1:a8:b4:4a:6a:28:1d:a5:83:5e:
         19:23:eb:f6:b4:91:9e:f4:ee:e1:da:9f:ac:af:59:4f:3a:28:
         7a:3b:0d:78:b1:1b:df:a1:d1:83:84:a8:48:d4:83:8b:fe:67:
         85:7e:a2:b3:4e:13:47:e1:8f:39:da:96:1d:81:68:df:f0:cd:
         62:1e:6d:10:43:fe:2e:1f:b5:81:38:28:1f:53:f0:37:42:70:
         a5:6c:d0:a7:6c:56:21:7e:ca:a1:9b:f3:28:ea:1e:f9:1c:c1:
         cb:65:3e:09:45:c6:43:f9:5c:5a:09:a2:9f:c9:a3:74:a4:2d:
         af:bf:8a:c6:33:af:1f:a9:64:b7:25:12:d2:0a:d3:02:6e:96:
         55:7a:40:1f:3f:6e:5f:25:c6:1a:a6:d5:41:66:19:56:d2:c4:
         f8:ff:e5:59:0c:2a:ac:f6:04:aa:b3:59:4c:2f:58:8a:c4:aa:
         79:36:63:0c:f5:4a:ce:b6:78:7e:ab:6e:26:8b:f1:48:43:4a:
         bf:25:48:5d:2d:9a:33:7a:05:87:ed:4f:f7:16:b6:dc:0a:4a:
         2c:c1:96:1f:00:a9:7f:40:c9:db:ae:dd:be:27:28:76:7c:dc:
         ee:e0:9e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:13:34 2024 by rpki-client on console-ams.rpki-client.org