Manifest

$ rpki-client -vvf rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
File:                     312968D65F7C01F38D23ED8B20F58313B5F2862A.mft (raw, json)
Hash identifier:          B5MemB3CCYpnvnU+HHY+hnRJrm+Kt4AjEl3lTtIjuUI=
Subject key identifier:   C9:36:D9:48:97:B6:FE:0D:19:49:BC:6A:53:AB:C1:89:34:20:7A:8E
Authority key identifier: 31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
Certificate issuer:       /CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Certificate serial:       18CE7C302835C0399E084028A57AF20B4171B336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
Subject info access:      rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
Manifest number:          01DD
Signing time:             Thu 28 Mar 2024 07:06:17 +0000
Manifest this update:     Thu 28 Mar 2024 07:01:17 +0000
Manifest next update:     Fri 29 Mar 2024 11:02:17 +0000
Files and hashes:         1: AS202559.asa (hash: BNlwNL/7WPEeaPJ/UrexLTDgmCwNfpKWmzy6VkA8H40=)
                          2: AS64457.asa (hash: NBzualMVX12rVB2txEEddtZ41DQyn7KWydAdLdLbJo8=)
                          3: 312968D65F7C01F38D23ED8B20F58313B5F2862A.crl (hash: e7+grF9wD0gh1knvC/YI69oEgCDJmFaO2HkQcPxyH5w=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl
                          rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:7c:30:28:35:c0:39:9e:08:40:28:a5:7a:f2:0b:41:71:b3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
        Validity
            Not Before: Mar 28 07:01:17 2024 GMT
            Not After : Mar 29 11:02:17 2024 GMT
        Subject: CN=C936D94897B6FE0D1949BC6A53ABC18934207A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:50:fa:49:29:32:66:83:7f:63:9b:98:df:
                    a2:d2:a6:e4:1f:0f:f5:4f:5f:ac:ae:ed:cf:04:77:
                    95:32:8f:ab:12:63:71:c4:f3:7d:f6:73:18:0d:4f:
                    2e:fd:cd:ec:9b:62:7f:95:01:d3:14:54:1e:bf:5b:
                    df:79:8c:0f:f1:dc:3a:cf:c3:71:9a:38:75:7b:10:
                    eb:fd:7e:a6:9b:92:65:b3:d6:ae:ed:05:90:93:82:
                    72:a6:a4:d4:54:e2:29:f5:d9:01:b4:77:a4:3e:14:
                    ac:48:1b:0e:8d:37:13:cc:88:a2:37:eb:67:8b:f6:
                    9b:d4:92:32:4c:2a:19:71:1d:b3:8e:4f:e3:37:a4:
                    5a:6a:90:72:78:95:37:5a:18:c6:d5:7d:6e:34:34:
                    a6:5d:df:2c:f5:45:cc:5c:b5:9e:0a:96:9f:11:3b:
                    89:d8:6e:b5:16:65:44:bd:6d:fb:38:bf:9a:a2:06:
                    db:cd:7e:89:4b:56:34:3f:d2:19:26:10:ae:15:d9:
                    d9:d6:8f:50:51:4c:21:d6:e8:c2:90:70:6a:1f:2d:
                    34:da:6f:5c:77:30:0a:be:5f:f4:1a:f1:3b:74:5b:
                    ef:79:e6:31:9d:c8:50:1d:42:6a:6c:1a:7f:38:d9:
                    69:fa:cb:c3:09:ec:f3:ac:72:24:90:78:44:6e:43:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:D9:48:97:B6:FE:0D:19:49:BC:6A:53:AB:C1:89:34:20:7A:8E
            X509v3 Authority Key Identifier:
                keyid:31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:1c:31:15:0e:c2:e1:a9:84:ee:6e:9a:85:81:a1:f5:a4:
         4b:ff:b8:2d:af:f8:ba:fe:97:e6:dc:d8:9e:53:25:e2:35:1d:
         24:c7:23:a2:00:5c:7d:2e:7d:a2:8c:dc:e3:28:89:9f:70:dd:
         22:27:15:d3:e6:75:23:b3:48:08:c5:ac:4d:91:e3:59:17:a1:
         73:b6:1e:6a:12:59:8b:bc:99:7a:0d:d3:55:3c:0a:03:01:a1:
         8c:df:44:fe:27:9c:15:1e:48:8b:61:48:d0:90:2b:75:84:79:
         1e:6e:7c:3e:db:1f:c0:10:94:fc:4e:70:07:59:10:d0:1c:71:
         1c:51:3b:58:d9:5d:a7:cc:cf:7f:29:3d:50:05:47:6d:25:83:
         cd:95:07:62:ce:7f:f3:76:d5:92:50:3e:a8:bc:b3:5f:0f:4f:
         48:68:04:04:5c:4f:3c:4c:36:76:00:fa:70:62:55:35:a6:87:
         dc:3c:fd:fe:68:f6:34:0b:77:a3:5d:e7:7e:37:01:6d:bb:ef:
         1e:50:f2:75:e6:09:9d:73:ea:76:67:bc:dc:01:f8:f7:4b:78:
         8c:7c:fe:10:a4:e7:b3:9d:02:aa:88:ca:2d:8e:f8:41:60:66:
         68:77:b0:73:c6:81:f2:4d:a6:73:81:49:7a:f2:77:84:43:a5:
         c0:1c:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:20:00 2024 by rpki-client on console-ams.rpki-client.org