Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          6jqrOTvrx5W8er/wBSx2it+/YacmKOoGZ/Cv/2kSdco=
Subject key identifier:   5A:1F:D7:8F:42:AE:50:AE:82:9A:E7:1F:AD:38:E5:66:52:CE:37:EF
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       018F441FA41B028C16DC97B80BFEA71FA747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          117B
Signing time:             Sat 04 May 2024 15:01:15 +0000
Manifest this update:     Sat 04 May 2024 15:01:15 +0000
Manifest next update:     Sun 05 May 2024 15:01:15 +0000
Files and hashes:         1: 00pcX1DYb8uAnnqcL2bx-av5Eqs.roa (hash: aGBS6LIO/k2omPkuKlJkYAy2Knpk3+rk2NuxUYcx0aI=)
                          2: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: MJ1/EgrYPhns79Ntp2bWPzACzThJnj8nuHFJ9/artRE=)
                          3: LnEWAWj4Yy9N55JR0PrHPHtohI0.roa (hash: uQel0tuF0dJaXAR1VdM4KKeAu8Lltat4RXh/DVARb6c=)
                          4: M2MUzsuWErKj9RrfITLUyscSHVI.roa (hash: cEO4RkPPXgbfjhQTeL9hnoEFs/L0sdAEDfL79cUck6I=)
                          5: mXPWsrifenmqhKJYiYkhTfSUhcw.roa (hash: HpWzyAfhOIsOGWHWZ0t/URjOW+GBLzCuzq8cRsMRXQM=)
                          6: oosNVQLwAqIVfmWTy8jULh11rQs.roa (hash: wFWcOmXZYyb0gjl3mXkq/zqvTZ9yI8lxvmOPx+6QnP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:a4:1b:02:8c:16:dc:97:b8:0b:fe:a7:1f:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: May  4 15:01:15 2024 GMT
            Not After : May  5 15:01:15 2024 GMT
        Subject: CN=5a1fd78f42ae50ae829ae71fad38e56652ce37ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:a9:5d:54:e0:f7:5e:8c:60:da:8a:03:5c:
                    03:20:dd:ba:13:49:5d:9d:8b:f5:6c:09:6b:9c:d1:
                    90:67:6c:94:62:e6:7e:69:e5:99:47:ea:6f:fb:fb:
                    ec:80:c0:44:25:99:2b:9e:1c:a8:d9:20:1e:59:59:
                    03:7d:e3:0d:c6:cc:fa:b0:22:05:69:d9:bf:b4:8e:
                    8f:c8:b7:78:68:90:e5:16:5e:ea:54:32:a2:72:a4:
                    e4:99:c0:ac:41:c0:f9:c4:ae:65:72:b5:19:85:ce:
                    b7:6c:4c:88:5d:2d:a9:90:84:c7:94:fb:7f:20:74:
                    f7:5b:c3:fc:ea:85:cf:c4:3d:0e:22:6f:24:2c:ab:
                    30:b2:e0:1e:3b:ce:30:64:99:6e:eb:e9:ea:a9:63:
                    53:3f:ee:e1:b1:0e:c1:21:98:30:ec:eb:1b:bb:8d:
                    4b:f8:a4:2d:5d:ae:3e:f8:f8:2c:d0:10:5b:8f:a7:
                    8b:fe:9f:93:7a:a0:90:15:25:af:20:4d:b4:78:e9:
                    18:bc:c4:31:cf:99:1f:2b:c9:2e:e8:7e:96:6d:f1:
                    e8:dd:88:c5:a6:48:98:ef:5f:8a:4c:20:a3:14:43:
                    db:9b:22:19:66:b2:a9:11:d9:6f:91:67:68:e2:ef:
                    7b:09:46:46:83:28:61:fe:d2:50:50:05:20:58:aa:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:D7:8F:42:AE:50:AE:82:9A:E7:1F:AD:38:E5:66:52:CE:37:EF
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:88:4e:51:6c:da:f0:13:10:d9:c3:b7:58:0f:c7:9f:02:
         35:1c:f1:e8:e9:ab:d7:ac:a7:9e:cd:92:db:37:ed:9e:b6:23:
         50:ac:e6:60:0a:f6:54:ae:c1:9f:89:b5:5f:ad:9f:ac:77:49:
         e2:6b:9e:48:63:ce:33:1a:16:1f:32:0f:fc:86:c8:89:d7:76:
         b4:e7:e9:c5:62:8e:c3:b6:bd:e0:42:75:c3:a5:fd:01:d7:b3:
         9f:07:70:98:13:38:0e:e6:0f:e4:d7:94:73:e8:d7:55:8b:35:
         49:77:7e:6e:49:94:a2:a7:53:c2:45:2c:4f:07:ae:61:d4:b2:
         4b:98:b7:82:83:a1:5e:20:bd:95:1c:a7:e2:b3:28:ab:a9:0a:
         a7:f3:c9:c5:77:8a:4f:00:b6:80:94:5a:f9:28:6b:30:d9:64:
         e9:a7:c6:ab:65:cd:1c:af:8e:c4:b5:67:f2:97:85:ba:c1:9e:
         bb:01:2f:44:65:50:7d:ee:04:d7:eb:85:64:35:8b:68:42:1b:
         56:de:22:02:d3:9c:2d:30:e4:73:99:b9:ef:fe:61:b0:b4:c8:
         a9:50:b5:42:2b:80:4b:fa:32:84:80:19:c5:b2:8c:74:94:56:
         b9:cd:4f:f6:ef:0f:ea:4a:ab:af:b2:5c:9f:4e:e5:e8:f8:b7:
         5f:15:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:47:35 2024 by rpki-client on console-ams.rpki-client.org