Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          BMTeqDFbMKNbmwXDxDjUqLJyrYqL73xJNtfJgsRXSHs=
Subject key identifier:   D2:5B:09:4C:E6:09:31:72:96:F4:87:64:35:76:E5:64:B9:5E:EB:86
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       01901E902A7E796CB549361941F4E88E7AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          0BCC
Signing time:             Sun 16 Jun 2024 01:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:22 +0000
Files and hashes:         1: F0cWMfR9UodIyHTdqH5CZ3tvRq8.roa (hash: ClyCG+Q9Zz2vmNyWArzh5HBvDzF9tYhl1MtkZSa9NCY=)
                          2: Ij5GiqnT_BJJX8cGzLaDcWGn7kw.roa (hash: KDig2vEVv3uYgo9Luq8md+9oQ6Eq5ChQakJTJauFIWc=)
                          3: R5UwZ_uXDF_GJGsPfthGBrO02RM.roa (hash: lCU1Lv9rX1goK/+v904YRH9Tz/hjcPCF+07D5V5uDrA=)
                          4: SoaYqMlwnnuW7P3r2VTCzGav3Ok.roa (hash: dyG1vdq16Z9wbNSxap7zpcNhnmavbisZYD/afBpR1h0=)
                          5: VTb_MZxjIUR46QSS4BfMYF-erSM.roa (hash: XwnE80b4Hs/mOOLFGKsbEmCKVLs4qxG19mbQscIkZrM=)
                          6: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: dwuJAUPYu0GECg0rSwVDg5HdUb+SbpvmfW1F1DSY7+0=)
                          7: kfib2ZcU_k0XJ9_JA3AlQci9v-c.roa (hash: v5fpceWiqefhzd/1fRTEZcoQBwQhq3Dr7f1kgQQ5Ngo=)
                          8: wSIVfWHR9HqfiMkRrn8LqVptC9U.roa (hash: bJG+vTINq+Y6SpGiLVZNpKx/Y6bPlxrOHFw2w2roZjI=)
                          9: xwS23OWw0Syi5oyRsSRkmnPLboc.roa (hash: Z0+uEhYjsoGL9nikZmmq/pujI8Xn6AbpcAKHfKXESt8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:2a:7e:79:6c:b5:49:36:19:41:f4:e8:8e:7a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Jun 16 01:01:22 2024 GMT
            Not After : Jun 17 01:01:22 2024 GMT
        Subject: CN=d25b094ce609317296f487643576e564b95eeb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:6b:b5:f2:bf:1b:db:b5:29:d4:6a:00:35:
                    95:03:36:89:d3:f7:2e:61:e5:9f:51:a9:77:9f:10:
                    66:ef:61:f6:fb:65:ec:d0:a2:d0:59:fd:7e:46:56:
                    93:0d:62:c1:64:99:f9:27:01:ad:87:b9:be:fb:b0:
                    05:8a:28:0e:06:c3:49:f0:86:15:68:be:0f:53:f0:
                    8b:74:4f:cc:af:cc:94:df:e2:b0:48:b7:05:88:14:
                    85:5f:64:e1:7b:9e:b7:1f:a6:22:82:a9:27:7b:82:
                    0b:c4:70:60:d7:5c:1f:38:db:d3:8e:54:40:79:32:
                    ba:e1:4e:b4:f0:c5:dc:c9:a8:f1:9b:dc:af:74:0d:
                    4d:9b:a0:08:38:d6:29:37:d9:47:1b:89:a9:b8:35:
                    06:a9:22:b8:39:d0:ab:3b:f7:f8:a8:b4:81:8e:cc:
                    cc:fb:eb:cb:68:54:da:2b:64:52:83:d3:e6:b7:8e:
                    ac:58:3a:ad:d4:e8:05:e9:f7:2d:ee:53:f9:b3:17:
                    57:9b:e1:66:7b:06:ba:24:c0:f3:ff:3a:e8:8f:4d:
                    9e:6e:cd:a6:d5:03:5c:4b:6e:bf:08:9f:f6:6d:06:
                    2c:01:42:a8:d2:f7:e1:54:9f:9b:ca:22:79:65:33:
                    dd:65:06:7a:e3:09:56:05:98:c7:f3:a0:dc:ba:96:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:09:4C:E6:09:31:72:96:F4:87:64:35:76:E5:64:B9:5E:EB:86
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:de:e1:de:0c:f6:15:0e:3d:d1:a4:fe:93:21:5f:6c:41:
         87:9f:38:83:83:e4:fa:2c:fc:b8:76:23:c1:ab:5f:96:3e:75:
         5b:64:43:9d:ea:ab:d8:7d:ef:8a:ec:b8:0d:d1:a5:34:b2:e8:
         9e:42:61:a6:af:8c:eb:41:6c:f4:d2:ed:20:5e:2b:82:f0:1b:
         cf:c6:dc:45:f0:e5:13:6e:cd:cc:02:f8:b7:82:a1:1b:4e:2c:
         0c:b8:03:3f:60:83:03:45:84:f4:5c:75:e7:f3:a9:5b:29:5e:
         df:db:56:96:3e:4d:96:5a:1a:90:8a:56:ea:42:94:ee:56:21:
         45:8b:d6:dc:6a:bb:58:b4:be:7b:0a:a2:ad:f5:31:68:1b:63:
         fb:6b:b4:6a:63:24:ef:00:b0:d8:76:20:6e:8b:8b:48:e1:bb:
         3b:ac:0a:f9:67:e5:fb:34:32:db:0d:87:79:a5:4a:67:e7:8c:
         ac:6f:aa:29:63:6f:aa:53:5c:e1:14:80:a4:83:70:82:59:d3:
         9c:da:00:4a:9b:b9:c4:08:b4:93:2e:ed:e7:7b:81:07:c1:19:
         3d:5a:d3:d7:f2:0b:a9:59:29:1d:42:d9:57:50:64:ce:19:2a:
         2e:0a:dd:ef:e2:35:50:b4:6f:1f:66:3f:77:ca:34:a1:bb:37:
         aa:78:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:25 2024 by rpki-client on console-fra.rpki-client.org