Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          1ERSbVXvteJgP+sIpxXr7mvk2EZ8K3llTDOiIV6TCZ4=
Subject key identifier:   04:8B:26:C4:5C:ED:07:93:C2:9B:BE:6B:1F:D3:B9:7C:5F:41:C1:4D
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       018F46E9A128D3B95D48CD6E1E9086B53864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          0DFA
Signing time:             Sun 05 May 2024 04:01:07 +0000
Manifest this update:     Sun 05 May 2024 04:01:07 +0000
Manifest next update:     Mon 06 May 2024 04:01:07 +0000
Files and hashes:         1: 2XZQDWpT_JY5KkNaoVOUqBw6nOc.roa (hash: H+Quk5Ini/WA2277UNf3OF4SvNetSePqG8L1AB7XDY8=)
                          2: 5sxXG4EXpUoacQJbE1S4SdPlUjU.roa (hash: mgS2Xz2M6vrmKwspWcUvU2qzZvyIst2QVkQxeh0MG3I=)
                          3: APDlbQm--Am7-aLdPzeZvg73EcA.roa (hash: u5yY0IhNywaT0EhNtuFfYNSVUC5Ke4tdJJdN52f2NoU=)
                          4: Bp7DCK2sdFA8YO4sxbthqIfiG50.roa (hash: 3TZW71bZ8ZQTjQA9dDVuHkIsX2mX5BOQCSB2XtPqmD8=)
                          5: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: 19yX81f2Lasx9CJz6DbSSi1WqOBaJXsiod9jjZuEUZ8=)
                          6: JkFmo1cn70Uv8Vt6L4ZJ0bxv1_0.roa (hash: kAhl8XHEJS8PNAGYvL+Q1viSA4Nzl7DqYabC/supPFw=)
                          7: L4GVXHVxIvWgHPdXHA9u_wQAZoY.roa (hash: rBSBfSc8zM+456lBw4wtNETGfeZD27Y6XMaCuNymXLE=)
                          8: STT56LAMiqNNiEivh42EIw7rHeg.roa (hash: S6McwkSso4ObW0sFeKPenj55E9AWl8+JvVOI1ap6sLg=)
                          9: Tou15RsswsqvPmkVgHNvkewNz4U.roa (hash: sRVbf2T9+ueKcSBA91VjJaXnax5nRytHwlDUn+VMY0A=)
                          10: XJRT5qzrjyXAByD2W1GzCLBf6GE.roa (hash: XaLu+s67Q/J6EE+T2Oq/aLcAnnVj15McWPYxA87IH9w=)
                          11: fOa9LYlhfKUL4K9ZvhVlG61Rb1I.roa (hash: DC264x6pk0cdP8X6fv7PX01mZw21sBRPYmO/m1dVf84=)
                          12: fqWZce32UTOUOZwAqoSCBoe8ly4.roa (hash: OvyzlrD1Hn7A5oZekm7fWHZhSYlMvMZhO0NhWaIAzgA=)
                          13: gQqG-NESYatWDizIqN6008kUmAs.roa (hash: yEIFvfpp52Inj8+bND8nVvEMLjvd1I435/5mwzWmhrY=)
                          14: hp8F4JwaBwdGDvjnclOlq8OtaJo.roa (hash: HhZKdKEgs+1me0SNNVtsngu4uuQ+BB0p4hxwQrHekfs=)
                          15: ndxWdPiO_rhBP4lvoQZ7pYzxJgc.roa (hash: x4DhvVUuySwr4JAPlz3teBozLvaDUq3H1hCYiorfAJ4=)
                          16: vJNbCXUpj5SCJuTJ-zCPyYMClHw.roa (hash: ApUqpPAQMxhh04vyyjK6QO8vPBIO/R3iSkjGSXrzzCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:a1:28:d3:b9:5d:48:cd:6e:1e:90:86:b5:38:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: May  5 04:01:07 2024 GMT
            Not After : May  6 04:01:07 2024 GMT
        Subject: CN=048b26c45ced0793c29bbe6b1fd3b97c5f41c14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:eb:13:d3:9c:95:78:c0:68:3c:df:cd:ee:
                    87:ea:9c:a7:ad:23:c6:79:a8:0d:7e:58:a1:c8:39:
                    b9:46:05:92:24:4c:11:ca:d3:75:a1:83:28:49:f0:
                    bb:69:25:29:20:77:d6:00:ec:d0:fa:ed:93:23:36:
                    b0:da:3a:83:2f:77:b2:46:68:4e:06:e0:4a:a3:1b:
                    2e:f9:83:9d:71:50:b9:42:1a:fc:16:c4:d2:0a:c3:
                    f9:9c:2c:8d:b3:d1:1c:89:db:0c:d9:18:5c:d8:28:
                    87:ed:11:4a:b3:4d:3f:ad:3c:5f:fa:01:1b:d2:3c:
                    f5:6c:05:4f:9c:93:4a:fd:22:5d:29:4c:04:af:63:
                    60:4d:51:ab:50:15:a7:c4:1e:fb:e8:ab:5b:3d:5e:
                    1e:4e:16:96:5b:ba:d7:0b:2d:86:c4:69:a3:ec:09:
                    52:45:28:d4:a6:9a:4f:3f:3c:06:85:be:79:9b:42:
                    97:26:0e:16:b6:af:c6:d2:4f:4c:0b:4c:ac:03:58:
                    71:2b:50:a5:34:4e:c6:a4:95:ee:36:e8:d6:f3:7a:
                    81:d1:3f:e1:c3:7d:91:92:ff:23:ba:c2:74:c8:65:
                    36:30:86:1f:08:25:b9:71:9a:3d:2e:be:97:c2:07:
                    b4:69:73:24:a1:df:a7:68:91:a5:b0:bc:39:47:ac:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:26:C4:5C:ED:07:93:C2:9B:BE:6B:1F:D3:B9:7C:5F:41:C1:4D
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:18:08:1e:d1:4c:aa:31:03:59:41:cc:99:41:00:7f:07:fd:
         df:b2:33:7e:4a:ad:b8:b4:90:5f:ea:e5:96:28:09:ad:f5:3a:
         39:83:a0:72:1f:87:df:7d:b3:44:d5:b6:38:c3:87:f0:e6:a5:
         2e:7b:5a:03:5d:2f:44:f8:b8:e0:5e:73:4e:86:34:66:9f:67:
         25:66:54:d7:c9:c0:d3:d5:06:c7:64:7a:93:d4:f3:0b:84:2b:
         17:d3:9e:c4:16:01:33:94:f9:56:14:17:72:a5:00:05:6e:06:
         39:5a:3e:88:4a:90:82:c1:cc:93:ea:4b:02:96:4f:08:8e:2a:
         5f:1b:d8:d8:b7:c1:2d:35:e8:9d:8f:3a:cd:0d:e0:67:87:54:
         94:ed:44:b8:6f:f8:0b:22:8e:da:23:6f:06:0c:cd:96:58:a1:
         32:7b:62:0d:be:5e:8a:3f:27:cc:36:a4:cb:34:13:d2:13:ad:
         f5:26:76:c7:f8:a7:e1:b3:7b:21:9a:0e:ad:23:fd:b7:c8:ea:
         7d:f2:b7:4d:ac:db:33:69:62:c3:da:cd:6a:8d:23:cf:77:d7:
         93:8f:12:be:60:9e:b7:a3:45:3a:1e:25:b0:34:a3:a4:55:b0:
         7f:70:89:7b:73:01:f1:fb:c3:d2:17:56:97:eb:56:cf:f1:d1:
         f5:46:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:14:43 2024 by rpki-client on console-ams.rpki-client.org