Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          p/fwITE06AHV2IdJqQFhUwmI6asF8r9Gkn9sZmYR0Ck=
Subject key identifier:   DB:3E:98:6C:36:65:8B:AA:04:E9:CB:34:CA:E0:FB:20:4C:1C:EB:A9
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       018F8A12DC9682CD0BB23A4959D423BC94F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          0CC9
Signing time:             Sat 18 May 2024 05:00:42 +0000
Manifest this update:     Sat 18 May 2024 05:00:42 +0000
Manifest next update:     Sun 19 May 2024 05:00:42 +0000
Files and hashes:         1: 8QkjgzgeVZegs7M6TQbWRJpXI4o.roa (hash: pM8vKnjaY6FWpRIQ2pxqzvLwmG8U81Y80Cb7Tqcvm0o=)
                          2: DSmY0digd3_FMEq48nMrPJa48hI.roa (hash: XKLtrnLtXo1sfPOPYRn7KQDcQoQP2vZrpLaDum1d4NE=)
                          3: GMF4_uBkLgbBDjB9eiE_AdkatHA.roa (hash: rLGc+YiIecb4TJATSjC6VhRK0tbRo+MHUH/OsVEgCl0=)
                          4: IUdvhvnaWQ61qInacdHfr4qjoDM.roa (hash: TbJyYO51UqlMC4crxBw07Hy9CU5fJHQfxzhzr4Q3JdE=)
                          5: drrffxw93NAjV9gpKv6ih8MmeXU.roa (hash: Wn9OY6C6BoUYalsgbGs6ak+U7H+DM0lmI5uTt7ORj9o=)
                          6: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: deoA+0P1d6KlHq1tslFh4CGpJvp2KrIgwryB9v7uA20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:12:dc:96:82:cd:0b:b2:3a:49:59:d4:23:bc:94:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: May 18 05:00:42 2024 GMT
            Not After : May 19 05:00:42 2024 GMT
        Subject: CN=db3e986c36658baa04e9cb34cae0fb204c1ceba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:4e:a2:56:6f:70:fe:bb:1b:f0:52:d9:ab:
                    66:c0:08:77:9b:cb:ae:58:43:3b:1c:32:7e:23:98:
                    39:8e:06:42:b5:fb:86:6b:a0:ed:8a:ca:c4:93:4f:
                    37:3f:e5:3c:71:98:d5:3b:e0:79:a7:c4:0c:82:8e:
                    25:c1:ae:e1:4b:3b:b1:00:72:28:5e:17:3f:60:3e:
                    1c:34:c3:78:8b:b2:ce:05:d1:2f:82:5b:e6:21:a2:
                    ce:38:f0:70:68:50:43:8a:c5:20:1e:98:2b:78:64:
                    74:fd:ba:0f:0b:dc:96:73:47:ea:d1:2a:55:87:b4:
                    59:4d:2f:79:92:63:59:f4:9e:86:74:02:cd:e8:3f:
                    1d:06:17:9c:30:8a:80:6d:28:f0:40:cf:19:0b:91:
                    45:6a:d6:76:7d:e0:ca:ee:02:37:e5:bf:18:5c:0a:
                    20:48:ac:d8:b0:c6:c0:6d:09:7e:f3:e7:ba:4f:87:
                    58:a0:41:77:26:7f:f5:55:9e:79:07:d8:5f:c0:07:
                    b1:74:f7:e6:00:82:eb:5b:57:58:4f:04:04:b6:2b:
                    90:7f:ed:19:ee:ae:81:64:8a:61:92:86:d2:7b:17:
                    b0:e5:85:f5:16:49:b7:88:0b:73:20:be:bb:b0:e9:
                    49:b4:08:00:1c:b8:2d:20:6e:af:a3:80:0d:f7:3d:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3E:98:6C:36:65:8B:AA:04:E9:CB:34:CA:E0:FB:20:4C:1C:EB:A9
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:b9:f2:e9:e9:27:98:aa:1a:a9:a1:a3:70:8a:c9:b3:a7:
         f5:c3:e3:d3:1d:f9:a3:db:6b:db:0b:90:29:fa:e0:33:fc:37:
         b3:d4:c6:c0:c5:07:a2:47:72:d0:20:22:1e:b8:d4:69:cf:43:
         a1:0d:7e:df:e1:e5:f1:e0:3b:71:74:0f:4d:85:bb:fd:d3:3e:
         82:aa:0d:9a:db:a9:25:b1:3a:4f:d5:06:a6:07:f4:55:49:23:
         19:52:ea:fb:59:83:f9:69:5d:67:f5:d5:bd:15:36:44:19:80:
         9b:20:6d:e4:40:1b:fa:7c:49:4a:b0:57:54:f7:0c:e1:ad:cd:
         be:21:8f:da:dc:16:a5:e5:69:19:0f:5a:cd:d2:fd:e7:a4:d9:
         a4:de:13:ac:e0:5e:11:7d:4f:e1:a9:65:24:de:c9:79:dd:ed:
         65:f5:14:9b:11:93:79:7a:ce:56:c7:a8:eb:e4:9f:78:76:59:
         75:90:84:4f:ef:88:4d:e4:37:fd:81:8b:78:a8:22:62:a9:49:
         8c:d3:1c:ff:7d:4d:43:32:70:26:2f:13:7c:90:eb:be:1a:50:
         c7:ac:f5:ce:d9:fb:f7:52:cf:f8:fe:76:08:66:19:c5:53:ad:
         d7:b3:75:c0:8d:ae:ae:27:aa:2c:ca:8d:e7:78:6d:75:8e:e7:
         f9:4a:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:39:38 2024 by rpki-client on console-ams.rpki-client.org