Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          TUW0UKB3PwZg1+ul46pDpbyakmZLrI/BdCxnFCG5q3o=
Subject key identifier:   6C:56:65:85:3A:2F:BF:DF:6D:B5:11:22:D1:D9:2E:45:D6:54:2F:2A
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       018F497F70A9E805E8D6C07929D55681B9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          10EC
Signing time:             Sun 05 May 2024 16:03:59 +0000
Manifest this update:     Sun 05 May 2024 16:03:59 +0000
Manifest next update:     Mon 06 May 2024 16:03:59 +0000
Files and hashes:         1: 3H6DwdNsZkPF08rp7cbidy8OIMY.roa (hash: Dn/HEMzLwfdLQPZQ9pC6Jl/7ErMajOiEnr7SDzRLeTk=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: VVOKzW1EwSh981X+mFskU9Wsib0xa5l2clNXtp3wzVQ=)
                          3: bH7QHxgfVXkNYynYRNLGBW8UKvI.roa (hash: 7H8dqxwHsMwSAZchyvStlp+rBxKaSWauK6KVj//4Geg=)
                          4: j-g4oaQrf8HoLEBtDAq3H6O9_aM.roa (hash: wvYam7dr2/0ZU9xTHH4mCDX7xDfq/N9xfBjIYgx1aWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:70:a9:e8:05:e8:d6:c0:79:29:d5:56:81:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: May  5 16:03:59 2024 GMT
            Not After : May  6 16:03:59 2024 GMT
        Subject: CN=6c5665853a2fbfdf6db51122d1d92e45d6542f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:98:e3:59:df:e7:be:1e:04:60:d1:58:41:
                    28:26:88:0f:d8:5f:69:ce:7d:bb:b0:56:da:93:99:
                    89:27:0a:89:ea:f0:18:6b:2c:07:e9:92:80:a6:51:
                    34:26:ce:fc:8f:db:aa:ce:0d:ad:e9:59:b5:a2:ff:
                    56:90:8f:f4:b7:62:32:f0:8d:ae:7b:0c:c0:98:e6:
                    5f:10:9b:eb:a8:af:6b:a1:f8:39:10:8e:97:a9:db:
                    31:24:f8:2d:09:0c:f8:80:55:9e:35:5d:d2:02:df:
                    f2:c1:04:54:dd:37:3f:9f:ea:aa:9b:3a:75:fe:2e:
                    7e:20:25:ea:32:62:86:7b:71:34:c1:4a:06:76:86:
                    fe:82:12:13:39:0e:a2:5f:a4:be:2a:0b:4d:c7:14:
                    33:f9:a2:5a:a7:8f:dd:7c:dc:c7:d0:3c:48:80:14:
                    ad:d3:41:0e:e6:76:f4:84:6d:b5:7e:ff:00:49:71:
                    1b:10:5b:23:9b:ae:4f:be:0d:a7:b5:6b:63:c0:d6:
                    44:e8:53:b0:10:b1:65:14:e9:82:71:67:7b:4a:8f:
                    b0:15:2c:dd:10:89:7a:74:f8:f4:2b:f6:dc:71:d1:
                    c6:f1:f7:7f:f0:79:97:fd:f1:da:52:34:a7:12:44:
                    dd:31:df:fc:c5:96:be:30:a4:ec:1b:13:cb:3f:7e:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:56:65:85:3A:2F:BF:DF:6D:B5:11:22:D1:D9:2E:45:D6:54:2F:2A
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:c1:41:e1:33:3c:5f:c4:6a:80:17:4b:df:44:7d:0b:38:
         16:d9:f2:19:d6:f1:b4:86:49:e2:4b:5b:35:d6:7c:5a:3a:29:
         89:54:93:ed:0a:fe:d8:1d:df:ee:cc:9c:cc:30:1f:b8:83:80:
         d2:4d:d5:56:6b:4c:5a:b4:f9:f1:58:65:46:0d:bc:ea:bf:52:
         c7:b9:33:34:da:cb:87:5a:a2:e4:04:1e:bb:32:41:e9:e2:a7:
         68:08:54:bc:1c:0c:ae:4f:0b:e0:f6:e3:ad:d3:3f:bb:dd:de:
         6b:73:43:e0:1e:08:95:55:72:5a:b9:00:8a:79:63:aa:9e:80:
         67:26:e9:63:21:df:0d:45:dd:ed:6c:67:96:1f:9e:6f:41:b7:
         16:76:cb:9d:6c:37:3f:5c:98:f5:2a:1a:c9:b7:36:c9:6e:2d:
         f1:f2:d8:96:6d:8d:ee:b1:d5:fa:50:79:36:9e:69:01:77:33:
         df:76:51:32:87:54:54:65:4e:0d:53:dc:b5:05:22:36:bb:75:
         6b:f4:63:06:e3:13:06:5d:c2:2f:ef:13:c8:9a:f3:a6:a9:b6:
         63:62:1d:8d:51:f5:1d:b9:4a:54:08:51:76:c9:15:e5:1d:19:
         16:8d:97:96:10:38:4a:de:2d:b7:b1:75:14:b7:6c:ba:5a:1b:
         75:30:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:12:35 2024 by rpki-client on console-ams.rpki-client.org