Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File:                     tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier:          N7DCx6joW6DyOB+8ot3tZ82avVsrZ3vW6UilOorv0N8=
Subject key identifier:   5F:B2:FA:51:58:54:1A:92:8B:14:91:F7:F4:B3:F3:A1:D6:CB:B4:0D
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer:       /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial:       018F885AF3043C4761E0A1324C2EE97C93EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number:          019A
Signing time:             Fri 17 May 2024 21:00:12 +0000
Manifest this update:     Fri 17 May 2024 21:00:12 +0000
Manifest next update:     Sat 18 May 2024 21:00:12 +0000
Files and hashes:         1: HL5FzkPJLJGrsB0ogfRDWH6PowI.roa (hash: pDIVCTEaF6/jxD9bAEd4CuWW1ZqX7S2CpvmfxDVGKLM=)
                          2: V8nWP9tj3PZ8Y9_LJ4vlX785LB8.roa (hash: 9kwvkNza9Ld1zF0bmJVWciFUgmlKZE6HbPlQRLwmrRY=)
                          3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 7IBrHk2g1pg8UnUjb/X/pqCQ7aXGkvGFeBrKUeb1jrQ=)
                          4: wU28G3tawTJ6GLRlirJoiOEXF78.roa (hash: xnMyds1gYp8SspQJyQiK0H1e/y9eCK+ELlugawtxHF8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f3:04:3c:47:61:e0:a1:32:4c:2e:e9:7c:93:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
        Validity
            Not Before: May 17 21:00:12 2024 GMT
            Not After : May 18 21:00:12 2024 GMT
        Subject: CN=5fb2fa5158541a928b1491f7f4b3f3a1d6cbb40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:c7:99:4a:a0:bc:ae:21:cc:b9:9c:7e:8e:
                    97:d2:5f:fa:a1:ea:3e:08:d9:f2:8d:32:55:50:2c:
                    33:4c:e0:68:95:86:7f:da:0f:e6:d2:d1:c5:5c:54:
                    b4:63:17:8a:f5:9d:1c:f8:42:a4:65:ee:5b:62:af:
                    a7:02:6d:50:c9:7c:36:37:e1:11:79:8d:af:54:11:
                    7c:ac:07:33:61:92:05:c5:13:cb:40:9f:f8:56:14:
                    93:ef:17:2d:45:d5:4e:ca:18:a0:77:9f:77:8b:c1:
                    1e:13:bb:b5:c1:42:36:f8:a5:dc:99:8c:17:f6:6a:
                    7c:b5:25:c7:e2:0d:28:fa:3c:5c:5d:99:f9:5e:e6:
                    2d:95:bd:e4:35:84:82:d2:6c:53:05:e7:24:fc:5d:
                    3e:78:2a:54:ba:b0:ab:df:25:c8:1f:c0:62:cc:72:
                    82:ca:9c:d9:35:4d:7a:8e:4d:ff:8d:be:31:1b:81:
                    a7:0b:a5:7b:50:37:66:6e:f3:70:40:f0:42:d7:e1:
                    64:68:55:81:d8:09:e8:44:1e:28:06:3c:9e:cd:25:
                    0f:b1:ad:42:8a:32:e6:94:02:45:ed:0a:f2:6e:64:
                    24:a3:c6:6f:fb:d7:38:ed:af:d0:44:30:ee:fd:7d:
                    36:a2:bb:03:cc:ca:41:af:53:2e:98:03:19:26:03:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B2:FA:51:58:54:1A:92:8B:14:91:F7:F4:B3:F3:A1:D6:CB:B4:0D
            X509v3 Authority Key Identifier:
                keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:49:ed:fb:67:e7:3a:d0:e1:3f:65:c9:07:b1:3f:8d:79:
         5e:99:51:53:92:18:88:28:65:d5:7c:99:81:45:4a:57:a6:0a:
         47:24:9d:38:53:f0:c3:20:b0:69:1d:36:92:00:a5:43:dd:ae:
         21:b7:99:a8:13:fe:42:ac:46:da:8c:e8:7b:5a:db:81:8f:cd:
         c9:91:32:3e:d0:68:53:f0:0c:7f:6b:bb:75:43:39:88:3d:88:
         88:3f:72:ca:27:af:3b:84:fd:98:07:07:9a:9c:68:32:6d:80:
         95:c9:7b:43:7c:36:4e:5d:37:44:94:41:ce:ff:8f:af:71:4b:
         df:98:ae:a3:98:42:17:d9:d8:b9:66:1b:bc:36:ee:a7:53:cb:
         b8:e8:ee:f0:24:46:6d:3f:18:a7:d6:13:bb:e9:36:d3:9e:0b:
         8c:50:18:b5:c4:47:e2:45:dc:cd:d3:19:67:f8:06:82:30:7d:
         a9:4f:34:97:bf:ed:b2:8a:e7:63:63:f9:54:fb:8e:53:b4:7f:
         36:bf:93:67:44:ab:a1:56:fa:f0:a1:b3:90:7d:6e:33:3d:2b:
         40:38:8e:3c:af:fa:95:15:31:51:7b:bb:ca:86:fb:fd:00:c0:
         0b:ab:5c:36:e9:29:5e:83:4c:04:38:0f:38:35:7c:26:99:86:
         1f:dc:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:43:00 2024 by rpki-client on console-fra.rpki-client.org