Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          Jj2RdAoLmPfg7LTh1V1JQX9FqhQLL8FS3o/LE56eTXI=
Subject key identifier:   E7:02:3C:AC:5D:23:BE:B3:95:06:F5:2D:DA:8D:65:B0:2A:B0:33:7C
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       018F8D149408E5555BBBB2E1BB35526F4E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          0CB0
Signing time:             Sat 18 May 2024 19:01:27 +0000
Manifest this update:     Sat 18 May 2024 19:01:27 +0000
Manifest next update:     Sun 19 May 2024 19:01:27 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: sfAp1AxxF2jlgx/VFDqMt0ORKxYdn8tsJrILqZ7eEcs=)
                          2: CliSfF1Lk74J61-IPpZDTTZStoU.roa (hash: f4uLAGYlsJO0oevdpCBtgxXsB1xVZy6sTUKYqWZrEBo=)
                          3: YO-z1xU6OckcJVV4Srz_Hc7c7Qo.roa (hash: 9BxT7F1iwowacFoFZaZGmWi2lJ3ShdNCC6LgO9QgwGY=)
                          4: yCv7etAYaibf4OILHU6IZERLqWU.roa (hash: 7TfruWOcv4evuHsY0LE9YAaB7mA4zbxechuazIGW33I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:94:08:e5:55:5b:bb:b2:e1:bb:35:52:6f:4e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: May 18 19:01:27 2024 GMT
            Not After : May 19 19:01:27 2024 GMT
        Subject: CN=e7023cac5d23beb39506f52dda8d65b02ab0337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:2a:41:69:ba:93:4d:9e:6b:bf:07:6f:38:
                    be:46:93:7a:1f:8f:8a:9d:31:ce:1d:74:39:db:a0:
                    68:44:ac:ca:bb:af:14:35:9e:9b:5e:93:1f:fc:a1:
                    0c:11:3b:2c:5e:e9:54:e2:a7:2b:27:b3:c1:d5:01:
                    b8:e1:49:1b:e0:40:a1:ee:03:1c:6d:59:53:69:1f:
                    a3:28:3f:b2:4f:d5:2a:ea:57:ac:ec:8f:76:3a:72:
                    67:7f:d9:b0:e8:a5:af:87:fb:f6:06:b3:46:7d:85:
                    a0:79:2b:4e:f0:34:d6:05:fd:bd:da:72:cb:2f:ba:
                    02:66:38:46:ce:c6:75:1e:19:79:bf:43:07:d2:a6:
                    d3:09:bf:f9:81:03:e8:64:f6:a5:63:6f:1d:cd:fc:
                    78:77:17:a4:df:c6:06:cc:21:a4:60:d5:db:fb:ac:
                    da:39:ee:92:58:2d:61:2b:25:ee:86:ba:1e:74:57:
                    bc:ee:79:42:89:23:a5:0f:a8:11:c5:58:2f:a4:06:
                    d4:3c:e2:dd:8c:7f:a7:cc:fd:fb:08:c3:a1:ff:3e:
                    87:c7:bd:d1:8c:7f:7c:e7:76:e5:10:8c:3d:46:5a:
                    42:21:2b:c3:34:f0:64:8b:08:5d:c4:e0:9c:91:64:
                    22:8f:a9:fd:1d:a2:eb:37:97:5e:14:0d:99:ac:fe:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:3C:AC:5D:23:BE:B3:95:06:F5:2D:DA:8D:65:B0:2A:B0:33:7C
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fb:2d:65:9a:4e:3e:b3:ca:8e:00:c7:da:7e:22:47:95:18:
         2d:39:38:6e:fe:ee:c7:b2:74:1e:ed:28:f2:ae:86:39:69:8d:
         42:7c:36:fb:88:d5:3b:4a:41:03:61:99:75:37:89:4a:c7:be:
         5c:e6:4c:66:2a:cf:b3:5c:bb:f0:34:b9:2d:d0:a5:7c:90:6e:
         97:81:8b:9a:1f:b1:57:54:3f:63:60:d8:5a:13:4a:c6:da:b1:
         93:94:d2:be:be:b5:77:74:d8:46:31:b9:3b:db:d6:ad:ae:39:
         9c:48:5b:e2:13:bd:f2:b9:38:94:96:4f:d2:ea:ec:9b:86:8c:
         36:64:8d:b2:07:86:ff:37:bf:1f:11:de:cb:5c:90:9e:e0:d8:
         f4:26:09:73:43:a1:36:06:31:81:be:b7:84:cf:f6:f8:35:c3:
         19:67:0c:2e:39:c6:70:50:0b:ae:db:fb:12:8b:ca:f1:ef:c7:
         e3:7a:93:d4:b2:d3:15:da:b4:59:91:8a:39:54:eb:cd:a2:3f:
         d6:b6:2d:5c:20:98:40:87:50:8d:f9:a2:cd:a5:cd:d2:72:94:
         0e:6e:7f:95:45:47:e8:86:60:5d:28:d0:dd:87:e1:87:07:1a:
         9a:bc:22:25:a8:22:7f:a3:87:3f:89:36:36:4c:b5:99:96:7f:
         72:8c:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:24:14 2024 by rpki-client on console-ams.rpki-client.org