Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File:                     IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier:          8ATBL31wL+4VSEdc/MGXf5RJz/YHRMqmuw2RjKU+KRY=
Subject key identifier:   A4:AD:0D:DE:11:19:A0:68:EA:A5:2F:7B:B8:EB:70:11:DA:E5:E7:83
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer:       /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial:       018F9EABCECC9290833D12CB7C74553BCED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number:          04A8
Signing time:             Wed 22 May 2024 05:00:10 +0000
Manifest this update:     Wed 22 May 2024 05:00:10 +0000
Manifest next update:     Thu 23 May 2024 05:00:10 +0000
Files and hashes:         1: 4tOKlP1T3bDrTqkAmVV6UQsvOIw.roa (hash: fbyIrovjz2LFUWdgFAe/c/Tjvv1l2c8mcyiOkk7SOcI=)
                          2: 7-2b6LTg2NhO6Ud0OC9r99bqsIs.roa (hash: ANw7yDP1/hr55Egk9BlaEki4TrpUVmaeYi0AGo70fK0=)
                          3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: lRhTw2c23CVbM5a683grOZaKffJJt+fsWRs6OF01zjE=)
                          4: Jm8VskJ4LJNZQ8QOwPD958E7d6w.roa (hash: eDctTKHz5As5GuoaduObkoU0knXo29+j2U2W6koVpPY=)
                          5: ku9ZZmOrkwWoOcsnmmUNDY8RlZQ.roa (hash: QPTgQtplxi6SCeez9icbnzTMeALf4M1ECkGqLCOzDQ8=)
                          6: umrrdDgmKLn7ngVsQ1-cE9eWkLg.roa (hash: u0DGWapdVwki01vtckAF5EchE6aFKJ9HZWFWe6ptSyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9e:ab:ce:cc:92:90:83:3d:12:cb:7c:74:55:3b:ce:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
        Validity
            Not Before: May 22 05:00:10 2024 GMT
            Not After : May 23 05:00:10 2024 GMT
        Subject: CN=a4ad0dde1119a068eaa52f7bb8eb7011dae5e783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:48:e5:1a:52:49:e6:fe:58:1e:28:45:2d:
                    d6:9f:52:3b:bc:b7:78:02:4e:4c:e1:b4:0f:2d:8f:
                    b3:c8:a2:69:6c:d8:0f:bf:4e:6d:1e:53:6b:e0:ee:
                    e2:82:b7:d7:ef:85:03:73:86:d0:ba:1a:a6:0b:a6:
                    a8:17:5f:9a:47:35:6e:e1:1e:9a:4f:e6:e0:88:c3:
                    e5:9e:c6:a8:f8:1a:f2:23:1f:f2:06:70:f3:89:6c:
                    34:1e:90:88:be:2a:a1:d9:fd:ef:d6:8d:6b:e7:9b:
                    3a:31:b6:e8:4a:d5:48:77:fb:43:f1:64:07:54:f1:
                    ab:06:f7:6e:df:7b:6f:64:e2:37:6c:d7:f9:50:54:
                    f9:34:57:47:d1:b1:95:36:36:32:6f:75:0d:12:95:
                    dd:b1:22:b2:83:e6:f7:2f:4c:d7:0e:c1:78:48:1c:
                    0a:ff:e4:44:11:53:16:e2:76:b3:64:eb:15:e2:00:
                    c8:b5:fe:51:d5:56:80:88:e7:ac:03:7a:eb:e5:42:
                    33:22:5c:a8:87:47:18:70:99:06:f4:6d:49:25:b7:
                    03:8d:bb:f9:d1:b6:83:23:61:c2:8c:5f:ce:ec:80:
                    d8:59:12:3c:5a:a7:8d:e1:5a:13:a1:2e:4b:70:6d:
                    7c:51:cd:10:1e:f6:cb:d3:43:50:a1:c8:97:b7:70:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AD:0D:DE:11:19:A0:68:EA:A5:2F:7B:B8:EB:70:11:DA:E5:E7:83
            X509v3 Authority Key Identifier:
                keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:02:76:14:58:8e:46:e6:b7:cf:8e:09:81:0b:fa:d5:38:cb:
         51:ab:9d:c8:ed:28:e4:59:05:50:6b:2e:10:67:51:9b:c1:a4:
         a5:cb:6b:32:70:84:67:df:37:74:70:dd:2d:09:7a:a7:8f:7c:
         e1:1a:2b:da:ca:fd:9f:56:29:48:7e:41:e7:d5:a5:c7:ac:74:
         ea:55:f0:68:d3:b8:77:df:98:ea:58:a8:34:8c:b4:57:e9:a8:
         bb:5a:6d:f0:f2:5a:5b:3c:3a:68:24:f0:3a:5b:91:bb:39:0e:
         c4:02:48:42:1a:2a:2d:9d:8f:9e:20:de:fa:2d:17:7b:4f:04:
         9c:08:a5:bf:1e:11:ec:55:6f:fa:90:5f:9f:7e:cf:b3:aa:43:
         8e:c2:eb:be:99:32:9e:c5:ca:aa:c1:6b:f4:40:4e:fc:68:c8:
         5d:4e:44:fe:76:f4:ee:18:f2:ef:7f:4d:5b:8a:71:33:8b:a3:
         af:39:c5:4d:1a:ef:fc:9a:86:e6:d6:c2:de:5c:60:2c:7b:f6:
         40:a2:3f:84:94:bf:c7:49:24:ef:e4:89:cc:80:ff:4b:d7:80:
         b4:25:21:ff:c1:19:09:15:86:8f:7a:cb:d8:af:c7:c6:93:b6:
         ab:e7:7b:57:af:03:67:3e:ea:b4:31:da:ce:6a:51:f1:5c:16:
         6f:c2:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:33:36 2024 by rpki-client on console-fra.rpki-client.org