Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File:                     exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier:          N0ZCCU6LD2rnZbNROVqA087jG3ay4LxJtSTUfsV9KTM=
Subject key identifier:   31:1F:81:10:55:97:41:73:4D:F5:E3:0F:5B:8B:16:99:B5:2E:C2:DB
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer:       /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial:       018F8F03C3B049B43D515C58A9B2000B6AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number:          02AB
Signing time:             Sun 19 May 2024 04:02:19 +0000
Manifest this update:     Sun 19 May 2024 04:02:19 +0000
Manifest next update:     Mon 20 May 2024 04:02:19 +0000
Files and hashes:         1: KQKH0iFGbZM_R2XcELsI7KmdhOg.roa (hash: zqS19I/YtqB+TocqDlfuFTYhoBaDYcMb8OKdAtyH93c=)
                          2: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: vFDHSntKRPgnn0Ai1vHfbfXGX7TbB/5S3BDT2xZsCR8=)
                          3: kyfZjYN2sTCiayXpmS1OlrI5hgc.roa (hash: k6YhfDc0sBXywRJHIT1LcVtYHot+Khbalzqu+ER9Q3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:c3:b0:49:b4:3d:51:5c:58:a9:b2:00:0b:6a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
        Validity
            Not Before: May 19 04:02:19 2024 GMT
            Not After : May 20 04:02:19 2024 GMT
        Subject: CN=311f8110559741734df5e30f5b8b1699b52ec2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:44:58:79:fe:12:a7:c0:93:1e:f7:50:ef:
                    c0:12:dc:c6:95:7e:32:de:84:63:65:ea:6e:2b:77:
                    b0:ba:e5:5a:e5:37:64:db:aa:e7:e1:18:ec:87:1e:
                    c9:97:5d:60:db:a5:18:6a:25:3e:d5:6a:44:76:5d:
                    74:d1:f8:2e:76:c9:2a:02:90:b0:69:c5:31:da:c9:
                    de:ab:12:f2:e8:61:e1:d4:4c:57:11:0a:5d:df:83:
                    70:44:e7:e3:16:d6:a1:a0:d1:2c:d1:40:7b:4f:c2:
                    50:45:0d:43:78:a9:54:ae:3d:c1:d4:cb:13:48:9c:
                    e3:6e:32:fb:6b:89:a0:0f:85:36:9c:37:ad:53:ae:
                    00:57:46:7f:7b:ac:76:09:57:51:59:31:f5:3f:1b:
                    ea:14:37:e2:e9:e7:9d:6f:da:ca:01:5d:6b:a0:45:
                    5b:5e:5f:a0:32:e7:fc:b5:47:1d:57:a7:a9:e6:21:
                    3a:cb:ae:c5:1b:3e:4c:33:b1:3e:24:aa:34:9d:28:
                    c6:d4:69:43:4a:a0:34:61:db:66:6f:6f:a9:e7:e6:
                    b0:69:6a:e9:4b:a3:89:c1:74:fc:99:d4:d6:89:8b:
                    85:f0:3f:60:09:ae:9d:91:05:a8:3e:3b:a4:65:a9:
                    84:0a:38:d6:44:ba:5d:6f:56:99:f4:32:3f:03:e7:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:81:10:55:97:41:73:4D:F5:E3:0F:5B:8B:16:99:B5:2E:C2:DB
            X509v3 Authority Key Identifier:
                keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:38:88:f3:46:45:0e:86:45:0b:ea:1d:2c:85:7a:0b:e7:d8:
         12:ce:80:42:43:69:fa:3f:ed:f2:6a:10:85:7f:e9:5e:88:4a:
         71:1c:84:bf:a5:ce:b1:ed:e2:29:44:48:c5:a1:9a:83:64:b7:
         e4:7e:f4:e9:28:cb:0f:ca:c4:e1:06:07:f3:26:7e:37:64:03:
         ad:fb:ca:9c:b5:93:86:04:f1:8c:2d:e6:9c:ac:11:9c:ce:64:
         0f:7e:30:cf:f6:e3:f4:f9:f9:c2:71:eb:34:7d:c9:eb:98:30:
         bd:e3:48:99:93:37:19:92:42:a9:23:77:85:de:d2:02:dc:f9:
         81:c8:62:bd:c0:df:cf:b8:fa:02:f3:da:d3:07:f6:01:ce:d8:
         9d:29:33:d0:34:da:97:07:d0:d3:a6:04:d6:7a:a6:71:f1:8d:
         b2:6b:31:a2:7f:3b:33:5e:ab:32:a9:a9:30:24:65:04:b0:65:
         9d:80:4b:31:4e:b8:b6:c2:ce:f9:62:b1:93:05:03:20:87:2a:
         59:71:b2:d5:63:71:1e:04:03:5e:fe:e6:b7:75:04:d7:a2:a0:
         84:a3:1d:7d:5e:41:58:65:65:ab:e7:e2:16:3a:5f:98:3c:6d:
         a8:78:be:28:b7:9c:51:1d:e2:c9:68:dd:2f:70:b7:68:7c:07:
         49:9a:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:04:43 2024 by rpki-client on console-ams.rpki-client.org