Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File:                     xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier:          w9k5U/hjVN8Qf6kUdArCmWSeeYyzhEGDvEbgyoFQKAk=
Subject key identifier:   A3:D2:5B:6D:DC:C6:9A:A1:0C:4A:4F:1F:87:9E:88:48:D2:EA:66:56
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer:       /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial:       018F87B698B55BECD936BAFE45931C69ADD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number:          0C26
Signing time:             Fri 17 May 2024 18:00:41 +0000
Manifest this update:     Fri 17 May 2024 18:00:41 +0000
Manifest next update:     Sat 18 May 2024 18:00:41 +0000
Files and hashes:         1: h7045uZF9IEEie8vg5Wto8jmLtk.roa (hash: bnXzREZnHiUimj8s/Z0oucsK3Z7Uq9yrtdY9Fz/9cbI=)
                          2: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: p3CaXWAzRgrhCpp/hykFRb4v9mVgbtV6HJ1ZCjtoC40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:98:b5:5b:ec:d9:36:ba:fe:45:93:1c:69:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
        Validity
            Not Before: May 17 18:00:41 2024 GMT
            Not After : May 18 18:00:41 2024 GMT
        Subject: CN=a3d25b6ddcc69aa10c4a4f1f879e8848d2ea6656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:b1:fb:50:36:f6:b4:bf:7c:89:79:5e:b7:
                    89:cc:83:5d:2b:38:f3:c3:fe:37:7a:9c:1f:af:4e:
                    4e:36:a3:43:6f:ab:5e:28:a0:04:cf:32:eb:cf:d4:
                    0c:7d:34:09:cf:63:e8:4d:32:7b:32:e6:eb:2b:6f:
                    c4:76:fd:8f:9a:e6:fb:cf:61:63:10:b8:c8:1e:80:
                    d0:28:b0:dd:08:19:16:04:16:be:de:6b:d2:38:d3:
                    bb:70:1b:6f:4c:7d:83:bb:5c:e4:43:f0:07:a1:02:
                    a3:99:0d:36:c0:08:32:49:8b:85:d2:c9:40:98:40:
                    5f:a5:a5:54:33:a3:2d:cb:dc:36:90:4d:69:95:76:
                    4b:14:b4:61:38:5c:f7:b6:25:58:5a:e4:2e:1a:e1:
                    74:d2:ae:d3:f3:ab:b4:55:e3:13:20:44:f1:2d:50:
                    44:90:cd:f4:f5:de:97:95:5e:3f:6c:36:1d:c4:29:
                    08:72:c4:a3:a1:60:72:bb:eb:8f:f1:2f:e1:9c:b0:
                    c5:11:6b:6f:0a:93:42:45:31:d6:4d:b1:4f:b1:75:
                    61:aa:04:18:83:00:e9:eb:df:56:e2:4b:af:1e:ca:
                    a7:57:2c:7e:d8:ca:22:9b:a2:ed:d3:c5:17:fe:81:
                    ec:c6:43:c7:77:16:15:18:59:ff:52:09:d9:4f:0c:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:5B:6D:DC:C6:9A:A1:0C:4A:4F:1F:87:9E:88:48:D2:EA:66:56
            X509v3 Authority Key Identifier:
                keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:13:56:52:11:57:79:50:ae:51:68:ea:6a:10:0b:63:e7:5a:
         cd:32:96:0b:3a:3f:ba:41:37:5c:91:b8:c5:22:e3:fb:f8:ed:
         e2:0f:8c:a2:7a:34:bb:37:e7:e5:27:b6:c5:c9:b8:5e:6a:1a:
         e9:e0:57:05:c4:f4:18:a7:67:89:cf:9b:2d:b4:ed:e5:3c:6d:
         ba:1d:a5:08:ed:50:67:4c:26:ec:4d:0e:f2:fe:77:ee:d6:22:
         4c:f2:97:cb:c3:e9:21:1c:c6:4b:3d:30:00:d8:48:22:f8:d4:
         76:30:9f:fd:ff:52:d2:24:02:89:1b:a1:4c:96:98:6b:39:26:
         b7:98:49:90:39:8c:8d:bd:f2:6c:2d:aa:ee:24:b9:71:bc:cb:
         b1:25:1d:07:93:fc:ad:20:1b:d8:e6:e1:87:1c:7c:11:47:a5:
         4f:35:45:8a:fa:41:96:60:6f:c0:ae:19:f8:fd:ca:50:f9:c4:
         35:2c:f7:78:93:4d:c0:9d:c5:ff:9c:3d:41:e5:39:99:d7:9b:
         95:be:c1:4a:f4:4d:f4:41:ad:70:39:8d:3c:32:38:89:fb:6d:
         7b:bb:f8:bd:96:19:39:76:56:31:4d:21:d2:39:7d:5d:e8:0c:
         f8:c5:a3:66:83:15:30:60:56:e6:0b:c0:f6:8e:d2:5d:89:e9:
         2f:d4:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:08 2024 by rpki-client on console-ams.rpki-client.org