Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          IyABJHHBXXQP+vPsenOPrV/jIdxhe1FnrUeNGFHMnKo=
Subject key identifier:   39:AA:13:48:50:F7:14:C5:C4:A8:8A:73:C2:2C:61:25:F7:C2:59:A8
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       018F88FF9EDFB882A5E777EC2611E1C7F0CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0732
Signing time:             Sat 18 May 2024 00:00:04 +0000
Manifest this update:     Sat 18 May 2024 00:00:04 +0000
Manifest next update:     Sun 19 May 2024 00:00:04 +0000
Files and hashes:         1: Of55SB9MKsB9HBMm1LuhWTTuT_0.roa (hash: sF2+SjieiaMXb9Oi9MqiqtzI6BnaAS3pxmxl4O8p6H4=)
                          2: gb04iAkBQWPyw9Ibl4RyAfltzg0.roa (hash: AsuzD+N3eM4Dlm5CmiRFvsp1xCp+p3VXuMuetzYVR/0=)
                          3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: w0bvDRe1kujq+PVEpWtRTF7gtLMpSgA9fZN2cxknY8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:9e:df:b8:82:a5:e7:77:ec:26:11:e1:c7:f0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: May 18 00:00:04 2024 GMT
            Not After : May 19 00:00:04 2024 GMT
        Subject: CN=39aa134850f714c5c4a88a73c22c6125f7c259a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:ec:f5:50:81:60:f7:fd:1d:5f:62:f0:e0:
                    05:a3:4a:be:50:06:3d:d9:49:aa:ea:c7:7a:cd:56:
                    0e:a3:e1:d0:9a:eb:67:89:cc:8d:c9:e7:52:99:37:
                    a1:48:76:96:10:f2:40:26:f6:35:cb:6e:78:3a:66:
                    a1:14:00:74:73:66:31:10:56:bd:00:c5:67:3f:60:
                    c4:b9:a3:05:a3:f8:3b:ec:37:fc:0c:54:39:ae:40:
                    5a:45:f4:7f:89:3d:0c:0e:a3:1a:6a:4c:4f:b0:6f:
                    7f:e5:e8:38:58:3b:6b:57:05:e9:d3:c4:eb:2c:89:
                    d3:a9:4b:bb:c4:17:b9:b0:b0:93:9a:b5:32:a3:23:
                    e8:39:36:ac:f6:1a:dd:9c:6d:da:0e:69:b1:cd:8d:
                    82:80:d7:0a:ad:db:63:cf:bd:21:1d:0b:6a:a7:c9:
                    8f:7f:b8:ec:8c:31:50:ae:9a:b4:76:b6:29:5f:bf:
                    ec:79:b8:0d:45:20:95:45:41:28:d1:93:aa:b4:db:
                    ac:a9:0d:54:b1:c1:56:ff:d4:83:c3:aa:d3:32:23:
                    3d:01:2e:09:41:df:25:51:54:2b:13:ec:f6:ed:b3:
                    3e:47:1e:cd:a2:c8:23:1f:cc:c1:dc:ba:7d:59:62:
                    ac:1a:93:26:42:e4:5c:36:d7:8f:f2:be:da:62:92:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:13:48:50:F7:14:C5:C4:A8:8A:73:C2:2C:61:25:F7:C2:59:A8
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:1a:b1:8e:d0:89:00:c5:cc:6f:ce:40:d7:ca:e3:87:be:
         da:cf:15:16:e2:d2:e3:08:2c:71:78:07:2c:b5:cd:aa:1f:64:
         7c:7e:da:77:b6:00:ba:04:07:de:06:5e:61:e5:a8:6d:8e:3e:
         d3:0a:5c:e4:59:17:83:8b:8f:c0:04:cb:0e:2b:eb:f1:4e:e7:
         c1:96:49:7d:ce:c6:1f:32:3d:d9:5d:f4:5b:56:75:a2:81:f9:
         44:81:88:65:80:34:2c:3c:ce:51:73:88:b7:1f:5c:35:e9:03:
         be:2c:ed:bf:98:56:25:0a:3a:a2:55:f9:09:df:ab:27:d2:4a:
         84:c8:b9:67:c7:5f:06:b6:5d:19:f5:ab:26:20:c1:ff:16:b2:
         53:15:f1:cc:fa:cd:06:a4:08:e7:35:9b:e2:76:d4:8e:7d:94:
         a7:da:6f:c4:86:41:f7:c5:08:33:74:ca:f0:4a:c8:90:4d:57:
         c1:0c:63:fa:aa:d2:b6:78:e8:68:68:46:28:bd:8c:d5:72:bc:
         f1:d1:8f:b5:ef:b5:41:64:e4:c9:ea:ed:8b:fa:5a:a9:ba:a6:
         e5:40:eb:83:3e:2e:73:c8:14:21:bd:d9:03:a1:22:68:04:c5:
         e8:5f:19:21:23:3b:27:37:61:9f:d1:7a:41:d0:f0:81:5f:11:
         ac:e8:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:47:02 2024 by rpki-client on console-fra.rpki-client.org