Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          aeUCjNRBod6+L2tmSuzVEUqXHuOuzZKTKxya+WP9gdo=
Subject key identifier:   39:1C:74:74:39:73:6C:BB:61:19:FB:D2:15:E0:E5:59:AB:07:14:4C
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       019040ADF1B72A6F9B9AC7930A466B4A7992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          05A3
Signing time:             Sat 22 Jun 2024 16:00:59 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:59 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:59 +0000
Files and hashes:         1: 1-byz3nCcFsgcS5pjOZ3OXVA4nSQ.roa (hash: riTxr2gD7+WfjM7aDmTwCVplBI2CnDZIs/V9gvy/kiE=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: LSQVy9gF5HlydIaaM8ebbhA67vb6OwlYqnR2DBeQRW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:f1:b7:2a:6f:9b:9a:c7:93:0a:46:6b:4a:79:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Jun 22 16:00:59 2024 GMT
            Not After : Jun 23 16:00:59 2024 GMT
        Subject: CN=391c747439736cbb6119fbd215e0e559ab07144c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:44:9b:3c:8b:ab:88:ea:1c:64:e8:9b:b3:
                    19:87:90:8d:30:97:90:ad:73:50:47:d6:f7:3a:ba:
                    16:68:bb:62:59:59:58:29:a3:a4:e6:33:33:78:0c:
                    af:7f:0d:b8:63:ae:62:11:c1:28:22:6d:63:c4:65:
                    65:f0:ee:f5:7e:99:bb:34:21:a1:cd:a4:84:19:40:
                    ef:f0:09:34:b1:21:c5:53:34:ae:92:9f:79:41:19:
                    10:39:e0:e9:07:36:34:95:11:4f:6a:1d:dd:fc:c4:
                    92:f0:2d:c4:14:79:9d:63:10:41:7e:70:fe:e8:e4:
                    87:2e:5a:01:da:28:58:fc:60:70:78:47:5b:89:f8:
                    d4:2c:7c:de:b2:9d:65:23:80:3d:73:79:74:cd:4c:
                    ca:11:ee:91:00:80:a7:f4:0a:fa:81:e2:72:b9:d1:
                    f7:3b:c6:45:52:18:1a:24:94:d5:20:56:f3:97:76:
                    a1:74:c0:09:f8:4c:2e:2c:da:fd:b7:5f:fa:d8:a0:
                    dd:b7:28:55:20:83:c9:e7:53:b5:8f:40:52:de:b6:
                    a1:84:da:4b:22:d6:cd:80:e3:bb:2d:8a:a8:1c:90:
                    ee:4a:9a:f1:28:07:f4:ef:80:12:84:17:04:08:90:
                    3f:e3:96:37:f4:08:f5:a7:3c:fa:c1:78:a6:b4:59:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:74:74:39:73:6C:BB:61:19:FB:D2:15:E0:E5:59:AB:07:14:4C
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:d9:3b:e0:6d:b9:3e:09:d5:01:fb:58:8f:c6:ef:69:c5:
         c9:56:b4:fc:c8:b5:81:96:be:ac:00:35:2a:40:37:af:fc:3d:
         5f:97:8a:98:97:d3:4c:5d:e3:8b:d2:27:6a:78:15:b3:ea:59:
         67:a2:5a:4c:b6:51:e2:e4:9e:be:af:8a:67:d4:9d:94:00:f9:
         24:ed:18:5f:81:b2:26:72:87:c4:b3:1d:d5:ea:69:99:e3:d9:
         aa:f8:32:9e:47:30:28:e6:8b:9f:ab:db:46:2a:05:6b:85:04:
         b5:b5:9b:58:8b:15:06:1b:c5:0c:be:b9:ca:16:cc:c5:4b:84:
         ec:1c:d7:07:62:e8:64:bb:f5:c4:5f:05:45:aa:23:44:3b:23:
         f0:6b:e4:27:b5:86:28:e3:0a:a2:e9:69:15:70:d7:67:45:04:
         d1:61:d1:31:87:cf:3e:2a:c5:1f:42:14:11:7f:86:79:d6:37:
         64:9e:cd:09:ea:df:59:19:2d:21:cf:45:e7:6b:f0:7c:f7:bc:
         ae:23:d6:9e:75:c9:43:4f:e1:25:c2:5c:5e:41:23:83:e1:03:
         81:64:22:98:f6:71:1f:47:02:4e:25:0f:a9:f2:52:96:4d:b1:
         c1:de:40:48:ea:d0:78:e6:50:74:01:4d:d3:8c:02:fe:ad:e2:
         0f:84:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:32:47 2024 by rpki-client on console-ams.rpki-client.org