Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          BUzLUDgyE8JfarofSxJsl9i5Z0+o3uMNHTgXDY2p1Pw=
Subject key identifier:   C9:A2:BA:22:8B:E3:D7:B1:4A:B9:3C:6C:32:DE:0C:7C:4F:91:C5:91
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       018F836DDBCE8A8AAF180A74F2D788B97AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          1178
Signing time:             Thu 16 May 2024 22:02:46 +0000
Manifest this update:     Thu 16 May 2024 22:02:46 +0000
Manifest next update:     Fri 17 May 2024 22:02:46 +0000
Files and hashes:         1: 09sLsVVB7CxSU3zRMbha3zsyhF8.roa (hash: tTAYoFfoEPVf4pJlvL5DbYsyWvbF6BeodnMVrKS3ULM=)
                          2: 1XsxMMavXz4EynBf7K8KojYHxY4.roa (hash: n3j0AYSYJyz1T1/zM2FXPpTspN2VsC+17hm+rsWglNs=)
                          3: Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa (hash: IYPvGvOP3Hl7DOEW3p83WuNgIyIRVBF5o7PxYk1KZ6Q=)
                          4: UXkaTHP_xJFTL9koLApJw6jU_RM.roa (hash: gPgDjKFqybNYP9Mxn1GDXwgCe7HpxgC/qtYRMCXUR4M=)
                          5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: W1lAuGw6TL5ZQSZVlanW4+Sk7P2P4fweBo8leWEvNHw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:db:ce:8a:8a:af:18:0a:74:f2:d7:88:b9:7a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: May 16 22:02:46 2024 GMT
            Not After : May 17 22:02:46 2024 GMT
        Subject: CN=c9a2ba228be3d7b14ab93c6c32de0c7c4f91c591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:23:23:47:0d:d5:be:19:0c:f5:07:ec:51:
                    b0:78:92:9e:78:4d:4e:ed:4c:5a:65:1c:5b:4c:e0:
                    ed:2b:f9:c4:4a:7c:e4:3d:49:a6:c8:f3:e7:c7:29:
                    d0:7d:25:e9:ac:0d:8e:33:63:8c:ce:76:a8:03:b6:
                    b7:51:a6:c6:07:2a:7b:00:36:30:4b:1c:0a:80:c2:
                    e8:33:23:a9:5d:c9:ec:4a:85:d5:8a:df:d6:66:5f:
                    80:88:b6:6e:37:0e:40:07:68:c9:4e:50:32:15:22:
                    47:e3:81:a8:a4:75:3e:91:ad:04:be:dd:4a:6a:f1:
                    6a:2c:6f:c2:ce:db:d9:bf:d2:dd:c1:ee:7b:df:a2:
                    02:52:84:fd:76:d4:0f:34:db:2c:a2:a2:4b:c1:9d:
                    2c:55:e4:08:53:7f:8e:4a:50:d5:25:55:09:53:a3:
                    6a:f7:08:1f:4d:0f:15:3a:95:52:9a:9c:28:d7:f0:
                    e1:c7:63:4f:80:e6:76:1c:f1:72:dd:cc:99:7c:64:
                    43:24:32:a4:a3:db:31:56:8e:4c:78:d0:98:7b:0d:
                    fc:95:06:20:3e:ce:b4:66:2f:09:95:71:8c:67:d4:
                    dd:91:cc:fc:af:2f:b4:2e:f8:59:65:1a:e8:da:46:
                    98:43:ff:b7:f5:bb:e4:37:83:05:29:0f:e8:aa:41:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:BA:22:8B:E3:D7:B1:4A:B9:3C:6C:32:DE:0C:7C:4F:91:C5:91
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d4:28:03:a4:0d:67:db:e7:96:99:9f:b5:fe:87:f0:89:c0:
         19:94:b5:9b:a5:11:2d:3c:b0:cc:f3:96:cd:15:3c:a4:c5:ed:
         27:9f:72:ad:b8:57:e6:68:77:51:1d:7c:8b:7b:c6:f3:da:05:
         80:22:b2:b6:4f:91:d4:f2:8c:ab:8b:0a:ac:63:6f:fd:8c:4d:
         b2:89:c3:c7:47:45:c6:db:84:26:90:8f:6a:40:19:0d:e6:f7:
         8f:55:e8:06:80:5b:52:3b:c6:61:cd:73:5c:ab:b5:00:f0:cb:
         15:5e:0e:3e:77:de:fc:1a:d9:f4:53:0a:77:5c:bd:8f:df:19:
         b8:82:25:36:5c:a3:82:9c:5f:36:8f:87:d1:1a:4c:90:84:b5:
         42:37:e2:e4:eb:ac:b0:3f:3d:3b:ae:83:15:71:64:75:0c:8f:
         62:32:af:49:91:b2:e5:a9:3f:9e:51:67:c4:c8:95:52:8c:88:
         b4:84:d5:d2:88:81:e0:50:e0:1d:1a:6e:fa:1f:c6:13:d5:d7:
         97:bf:ed:5a:88:51:63:42:16:ee:95:d3:97:60:9f:37:a6:bf:
         3a:7f:80:6e:3c:55:02:c4:e2:b4:f4:7d:0d:55:32:de:e5:fe:
         de:34:b1:86:c0:fe:8e:20:a4:82:9f:be:a7:5e:9a:dd:13:31:
         fb:4d:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:45:54 2024 by rpki-client on console-ams.rpki-client.org