Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          GDmYxjYbMDWXrFqAo3aHjp63cbvj/4d3ucozfFHMQPs=
Subject key identifier:   2D:34:B2:53:48:77:C6:0B:43:B8:AF:18:71:AF:D5:72:5D:FA:C8:77
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       018F83DA0003417FEA436BC76E54CD7312D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          0C2E
Signing time:             Fri 17 May 2024 00:00:53 +0000
Manifest this update:     Fri 17 May 2024 00:00:53 +0000
Manifest next update:     Sat 18 May 2024 00:00:53 +0000
Files and hashes:         1: 0EA9_cLxlsu6S1x8XuL50gICec0.roa (hash: FKjsI7s++P60eLiuovKWUyjwaGmG14nD5vO9pt8uCn8=)
                          2: 0IUAMipbGs9YjLp8SrmuRL4OhCM.roa (hash: 2FKboteZPqmaJRPvAn+VcoJUIiR3Qxbh7arYhIli+dI=)
                          3: iY9OEKWlNNraFJZ66bOfv5h4SBY.roa (hash: qiiyPbORa8eM2x8m+DGXMF/H7kr++lov/llHrBlcwPI=)
                          4: pUU4kzlaIwfqnYhnXkj_rLwcJi0.roa (hash: mVHpFvDn7NMq2td+nlaiyp+kTnmnVyrftyOW6mFYzhI=)
                          5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: ToRoP1XEClfBklHGO+CFItt6S9xObfYT+dHeBrhPORo=)
                          6: vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa (hash: s+XpPTzup3k+PtKmo1pl/zvHDVud4TsAaHVSyaZ+/u8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:da:00:03:41:7f:ea:43:6b:c7:6e:54:cd:73:12:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: May 17 00:00:53 2024 GMT
            Not After : May 18 00:00:53 2024 GMT
        Subject: CN=2d34b2534877c60b43b8af1871afd5725dfac877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:42:41:1d:a6:de:dc:91:74:1f:8b:a2:b0:
                    73:af:61:95:11:22:07:66:46:64:b8:6c:ea:02:d7:
                    f7:e2:13:6a:26:5a:d3:02:d8:c3:60:03:56:3e:ec:
                    7f:5a:67:fa:62:a7:c1:75:16:4a:af:53:6d:17:66:
                    28:d0:d3:1c:45:f7:6d:af:67:ac:df:25:e1:0f:b3:
                    6b:df:5f:cd:e0:b6:04:7c:fa:5e:85:b4:2b:37:be:
                    8f:5f:0f:db:88:b5:a9:84:3c:97:6f:e0:d1:9a:d1:
                    2d:5c:a3:91:d7:57:8d:b2:aa:69:24:98:08:44:31:
                    5e:18:dd:1f:9d:d7:60:da:c8:61:b3:a1:36:b3:8a:
                    6b:37:bc:78:7d:e3:c2:c8:e9:73:d8:70:01:d3:ca:
                    88:44:9b:91:77:6a:4b:b6:66:7e:cf:d0:90:47:96:
                    77:60:f0:15:dd:6e:20:b5:42:67:a2:bb:df:15:09:
                    80:28:e0:8d:a8:f6:98:17:76:3c:0b:75:3a:59:46:
                    5c:fb:61:4f:b3:9d:b5:f0:46:ef:3e:ba:b0:a9:19:
                    88:bf:b2:73:76:92:14:48:2f:7e:84:3c:e0:00:b0:
                    ff:da:d5:00:2b:64:aa:75:d9:f8:6c:46:39:ba:6c:
                    5b:6e:2b:bf:9d:f5:fc:aa:03:fa:20:a4:9c:83:68:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:B2:53:48:77:C6:0B:43:B8:AF:18:71:AF:D5:72:5D:FA:C8:77
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:5c:75:92:d9:77:80:db:2f:e9:3f:48:d1:da:4d:56:f1:
         85:b7:14:94:a4:8c:41:ab:58:af:36:04:a7:28:14:98:38:e4:
         c2:d6:3d:7b:a0:74:c5:fa:79:2d:73:7b:90:07:e7:c5:e3:79:
         23:90:0b:90:b8:d0:d3:81:43:93:3e:51:f1:90:c9:b4:0b:fc:
         53:c6:5e:a6:74:0c:ce:76:29:1c:83:dd:7d:bb:d7:6d:9a:9d:
         f7:4b:ab:59:c3:55:fa:9a:bc:bc:e3:4b:29:5d:cd:c7:50:8d:
         65:ff:95:e7:7e:97:c3:bc:c9:7d:32:d2:9c:37:4e:da:2d:f4:
         dd:c7:9b:9a:a4:82:22:bc:9c:96:1c:32:03:71:19:eb:8a:8e:
         d2:0b:36:93:5a:86:22:d9:c0:fc:df:56:c0:bd:cf:a7:be:a0:
         0e:50:fb:28:b0:d3:ca:da:6a:88:34:04:ca:d0:a7:9d:a8:5c:
         a0:cb:92:02:4f:94:6f:69:56:55:f8:9d:e4:22:94:8d:18:04:
         f2:b7:cd:5d:1d:df:33:be:94:fb:bb:59:61:92:e3:c2:30:21:
         f2:0a:ea:a2:28:dc:58:dc:4a:3f:53:13:4a:1e:20:28:f3:39:
         2a:79:e5:de:8e:aa:0c:d8:55:37:05:65:9a:8b:ac:13:60:17:
         cd:61:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:18:59 2024 by rpki-client on console-fra.rpki-client.org