Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          NLT+0L+OQ422wlu87L7Pm/m0VCJNQNak7kiWPPmjmRs=
Subject key identifier:   32:F1:30:5C:73:55:79:81:C3:70:01:6F:2A:9B:6B:F1:09:CB:F7:3F
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       018FD7C03716B660B5AE399F4D1385E27DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          10CC
Signing time:             Sun 02 Jun 2024 07:00:49 +0000
Manifest this update:     Sun 02 Jun 2024 07:00:49 +0000
Manifest next update:     Mon 03 Jun 2024 07:00:49 +0000
Files and hashes:         1: IvYSO-4EKOiuvKf6uNuqHrAOXmY.roa (hash: rFgpDcrDt+KUX/ENBAuqEcFOaPtbL0N7zICJieULzEY=)
                          2: NxcwqwNv9CgCFhCNWnYSxmQyHyU.roa (hash: fArYI7IPgIOke0TCnEF0g69/H8Dt04fo9ARsDOMVRK8=)
                          3: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: jad9xBoTHy3jY8MmJudvdp+m5zQHljuV9QtQrtjTQew=)
                          4: mcen2pkFM9WR8x1zJ_rQw0x3E30.roa (hash: deQ9ffvYJjyrE2MN9hd25MGieqWhmdMMEJnQML/F7yo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:c0:37:16:b6:60:b5:ae:39:9f:4d:13:85:e2:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Jun  2 07:00:49 2024 GMT
            Not After : Jun  3 07:00:49 2024 GMT
        Subject: CN=32f1305c73557981c370016f2a9b6bf109cbf73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:34:2f:10:7d:1c:6f:19:46:b9:70:3a:ee:
                    05:7b:18:28:93:48:0f:33:41:62:81:aa:cb:fd:ea:
                    7c:db:86:9e:15:8d:43:f0:81:6d:cf:6c:d1:e2:90:
                    2c:ab:69:b3:d5:b6:0c:4b:90:3b:17:22:4a:1f:1c:
                    41:e8:8a:b2:e4:24:74:eb:0d:8c:bb:94:5c:b0:cf:
                    1a:c8:a7:2a:5f:e6:cc:f1:35:ac:24:50:f5:39:86:
                    fb:7a:b0:18:1a:30:9b:f8:5a:69:c3:14:98:01:f9:
                    98:94:55:9f:c5:ec:81:7b:7e:b0:a6:13:0a:93:6b:
                    be:d0:08:aa:6f:fa:ff:c7:d0:0d:5e:a5:38:ea:cb:
                    7b:d4:06:a7:eb:52:5d:4c:fb:5d:26:a4:39:33:2b:
                    3a:e0:0b:63:83:f0:b7:88:f6:78:b8:42:46:49:ab:
                    d5:4f:73:f2:32:38:63:af:c7:ae:9e:26:b7:ab:ed:
                    55:ef:6c:b7:64:20:66:8b:20:7f:44:fd:9b:38:30:
                    15:54:15:b4:f2:46:5c:17:94:ba:7a:6c:64:bb:d0:
                    c9:0e:f8:4c:b0:3a:15:81:55:43:d5:bd:27:7d:5a:
                    03:1c:3d:97:e5:3e:b9:7c:f0:66:b3:35:b5:74:d6:
                    b0:41:dc:1a:a6:4a:93:9f:a5:cf:17:65:1b:bd:f5:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:30:5C:73:55:79:81:C3:70:01:6F:2A:9B:6B:F1:09:CB:F7:3F
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:71:30:6c:e6:19:91:eb:88:f9:74:84:75:4d:91:7a:6f:
         c4:ef:fa:bb:5e:6f:f0:54:94:98:8d:58:12:ec:b5:42:09:52:
         49:10:40:0c:58:6f:32:7e:ac:1f:27:db:53:a9:b8:12:03:fd:
         4b:b3:69:74:21:60:4e:b4:00:55:29:8e:e6:f0:75:57:be:0e:
         d2:8d:1f:d2:54:4f:da:bf:d1:4d:a4:a6:b6:8c:39:f6:78:fa:
         61:9b:0c:97:27:bd:77:8e:35:0b:51:50:b1:c8:bc:66:25:77:
         34:cb:a2:e2:b5:2b:75:93:ab:e7:7c:e4:fa:e3:4e:1e:21:be:
         8f:cd:e0:d5:b3:f6:7e:23:6a:9a:39:cf:36:1d:dd:10:bf:3f:
         40:65:3e:5f:8e:4f:80:bb:e4:50:89:b0:21:e0:28:bd:30:df:
         0d:c0:15:7e:c1:c4:5d:18:4d:4e:70:13:59:79:0c:f6:a4:b4:
         43:21:ce:b2:2c:f3:7a:79:a1:51:90:70:d5:f0:ce:d0:51:ae:
         51:a4:1c:cf:81:ef:c3:c7:b1:a2:a6:ff:2b:7f:93:41:88:23:
         4e:78:80:2d:08:7c:8b:e8:13:12:b5:08:f6:ff:4b:52:1c:51:
         cb:0e:91:67:21:6f:3b:84:b5:0c:f0:ec:1d:80:5f:9c:f2:5b:
         32:18:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:32:09 2024 by rpki-client on console-ams.rpki-client.org