Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File:                     Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier:          oGOlFqdw63r2LCfJ0lQymIcEBIYVOmjVUweDd0CmnCc=
Subject key identifier:   A7:57:74:48:92:AE:EC:5C:36:4F:56:43:E3:B3:52:74:AF:E4:65:5C
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer:       /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial:       018F882440780456FD350328465CE4B501A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number:          0145
Signing time:             Fri 17 May 2024 20:00:28 +0000
Manifest this update:     Fri 17 May 2024 20:00:28 +0000
Manifest next update:     Sat 18 May 2024 20:00:28 +0000
Files and hashes:         1: Dyo6jL-lYaEwhfYy6ambhHT_SXE.roa (hash: av6YJQzepaOMEpX43TwN8tQZ2e0AmsFq3U4hrJndvgA=)
                          2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: DFDgr0Tdidn8F6L9q+JfNOkmQ1+VHAzP8xxwiIkWHP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:40:78:04:56:fd:35:03:28:46:5c:e4:b5:01:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
        Validity
            Not Before: May 17 20:00:28 2024 GMT
            Not After : May 18 20:00:28 2024 GMT
        Subject: CN=a757744892aeec5c364f5643e3b35274afe4655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:d4:d4:f1:72:98:71:31:e0:ff:88:b3:17:
                    10:29:7c:c5:30:d2:cc:46:63:2b:1d:0d:f6:d1:18:
                    56:9e:be:cd:47:f6:fa:f3:23:0b:b4:26:4d:e3:93:
                    7e:bf:e9:0b:f8:1b:b1:fc:a5:68:97:73:90:e4:a7:
                    2a:e5:5b:fc:22:17:4e:60:2c:c3:96:3b:07:c2:51:
                    bc:6f:d6:42:48:83:ab:05:75:ee:7e:f7:87:53:02:
                    bb:be:45:90:cc:c0:86:ae:7e:60:81:21:26:cb:53:
                    ad:d7:f6:4a:65:a6:9a:d2:9b:84:75:11:92:17:20:
                    be:1b:ee:c7:28:fe:75:89:4a:38:f1:27:7f:7f:f2:
                    49:8d:16:a0:a0:cc:5b:b1:ba:85:72:5d:d7:0f:be:
                    e4:6f:cf:03:82:0a:05:c1:3a:fc:eb:fb:1d:f1:d0:
                    af:ce:c6:0d:8b:d5:f6:9d:7d:6a:f1:45:38:8c:6d:
                    96:86:bd:3e:fc:dd:a7:a9:52:00:a9:8d:91:8c:1e:
                    2c:05:70:87:fe:76:e4:12:c3:4f:39:5d:c0:dd:3e:
                    ef:74:4b:64:6d:36:6c:5e:4c:a4:8f:3a:5e:26:71:
                    fa:a6:19:2e:ee:06:7a:00:ae:6e:23:8b:76:92:aa:
                    85:64:3c:3b:ed:94:0d:b9:a6:da:b2:6f:95:eb:3a:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:74:48:92:AE:EC:5C:36:4F:56:43:E3:B3:52:74:AF:E4:65:5C
            X509v3 Authority Key Identifier:
                keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:56:09:9d:9c:5f:33:be:57:e8:4f:8a:0d:96:6c:b8:84:
         e1:4a:4e:3a:e9:ea:23:b3:fe:4b:d2:4f:d0:ca:3a:34:da:1b:
         14:3b:37:2e:45:90:2a:7b:74:f6:f5:a9:12:b5:57:1f:4d:c8:
         4e:0f:eb:ef:37:da:f6:cf:aa:d8:43:b7:aa:86:ee:ca:d2:4a:
         04:b3:c6:79:ac:94:34:db:c9:5c:26:42:6f:00:42:44:ca:dc:
         bb:20:b9:c3:d2:40:2a:e3:b3:1d:f5:1a:81:bc:1f:d9:38:84:
         d9:06:2e:84:bd:dd:5d:f9:65:f3:0d:90:00:7f:2b:6b:24:7e:
         65:b6:1e:70:5d:4e:8b:e2:69:1c:58:24:1c:03:9d:5e:ab:f5:
         38:f2:0a:c8:05:d1:03:16:0a:d2:09:78:fe:98:12:86:16:69:
         1d:d1:c2:ef:40:0d:03:33:be:a2:23:f8:be:d8:82:cd:89:b3:
         fa:79:26:cf:00:e0:93:1e:5a:ea:0c:09:01:b2:f5:76:8e:d5:
         6a:4f:0e:dd:a3:19:de:20:ff:f8:fc:d4:ff:81:b4:55:61:a2:
         9b:c7:1a:40:75:ab:e5:2e:a9:9a:da:68:98:7b:e9:1d:7d:46:
         b1:ca:d3:5d:e2:56:ae:52:9a:a3:58:40:2c:7a:b6:36:67:d5:
         8d:a2:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:33 2024 by rpki-client on console-fra.rpki-client.org