Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          dSokyUn8+e6nFW6w+HvVedZ7XCplO/Kqg9JPtdx6JJQ=
Subject key identifier:   64:C6:72:C9:9D:C4:CD:F7:4D:89:82:EB:15:DC:4E:6A:E6:AC:B1:6B
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       018F4E352F6AFCE3D3BE053A1613C37C54D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          1169
Signing time:             Mon 06 May 2024 14:00:59 +0000
Manifest this update:     Mon 06 May 2024 14:00:59 +0000
Manifest next update:     Tue 07 May 2024 14:00:59 +0000
Files and hashes:         1: A0Vw5DC6UPS3qvlSKRPPoaFocZ4.roa (hash: RSpTE0OAk+/6QYgrteQ8m51/OjxoOzqWd3JFbA5yB6I=)
                          2: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: XTIgP69YqqiZpzM3o4nXFMtOcMo7SgQLY7rVS3msVb0=)
                          3: FSlQLahZIUcuzgfLWweneFBuRF0.roa (hash: UQTvlL6E7UkmCVbKAVfYLkHYJwfMT21H4uds3QqTsus=)
                          4: KGL5MZl-XHrIcVHMvjbOXRMSAMA.roa (hash: YNg9/pDGej4Qr4ajEQW9CM8Xe0Sn+SaC8Bd051+HRbA=)
                          5: VxmP00b1oRJZXSSegpCFBrFka8g.roa (hash: bymHPsRoD8McmkbdzovcUnlLsDFe2kagU8Dww+amp0o=)
                          6: s6hNwRqpL9Uhlh--ZaOV4ytu5Yo.roa (hash: TbVl78hZ1Mfi2HamNZgZNDJAnJ6vJd54tXBvYDxtXD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:2f:6a:fc:e3:d3:be:05:3a:16:13:c3:7c:54:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: May  6 14:00:59 2024 GMT
            Not After : May  7 14:00:59 2024 GMT
        Subject: CN=64c672c99dc4cdf74d8982eb15dc4e6ae6acb16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:00:a9:cd:43:d8:66:21:ab:23:55:21:5f:
                    b5:1e:fd:b6:5f:37:12:88:f9:39:f6:0e:9a:92:4e:
                    60:a3:0c:d5:46:ea:98:57:06:78:e1:4b:51:0a:1a:
                    3f:d0:c0:29:d3:03:f2:f5:47:f5:a2:8b:59:32:b0:
                    6a:ec:59:3f:4e:23:85:00:7b:ba:f5:ba:1f:8e:ff:
                    32:e5:42:db:20:52:3c:64:26:54:ef:2d:68:b9:8e:
                    b2:57:27:61:cd:76:93:ac:ae:9a:06:8e:f5:10:6e:
                    a5:52:48:f8:70:4c:f8:59:9c:dc:9a:a1:a5:12:cc:
                    c1:18:05:3c:5c:59:fe:02:14:97:4d:ea:24:b6:7a:
                    ee:1e:c2:0c:95:e1:ca:9d:08:34:2d:d7:a8:9f:4f:
                    b2:4e:54:3a:4b:33:9c:cc:46:4f:56:30:95:fa:ee:
                    fd:3d:73:ba:1a:e3:98:9b:cd:5c:34:0e:f2:ca:8c:
                    c5:52:3e:b6:b4:8f:1d:68:02:ce:68:b7:85:d7:c0:
                    16:78:70:35:57:1e:21:47:33:e9:6e:e7:c7:19:c1:
                    25:e0:f0:1f:c9:f3:f8:d5:c4:1f:68:18:50:d9:59:
                    24:4a:d0:f7:b9:36:33:ce:6a:6c:d2:fa:25:10:d3:
                    9f:48:fc:30:0b:d1:66:f0:38:46:99:ea:3b:6e:86:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:72:C9:9D:C4:CD:F7:4D:89:82:EB:15:DC:4E:6A:E6:AC:B1:6B
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:2b:82:be:54:e2:76:6d:b4:f9:ca:6e:89:46:55:3d:e6:
         db:d2:8e:57:ab:03:15:27:9d:33:1e:27:08:79:94:9d:3e:a4:
         5f:f1:5c:f9:7a:b2:67:7f:5a:40:ef:44:02:cf:69:e1:59:f3:
         9d:c7:37:ea:27:db:90:06:14:0b:1d:55:1d:69:d6:a3:bb:a5:
         dd:15:d2:40:32:da:1f:02:ab:5b:f8:8a:6c:08:55:56:84:1c:
         53:1f:2a:34:61:8c:d3:f0:84:73:84:de:91:5e:7f:2e:1c:98:
         33:37:44:c4:2b:1a:b5:32:c8:ac:98:25:c1:d4:94:1e:ab:bc:
         46:fc:3b:d0:1f:ed:10:e1:ee:c8:96:aa:c0:68:44:d4:3c:20:
         f9:ca:6c:98:91:60:40:f9:3a:9b:5a:1e:7a:14:82:20:5f:b9:
         6c:62:84:b9:7b:dc:0d:8c:d6:79:a2:c9:84:6f:3b:bf:f8:08:
         54:0f:36:85:e4:64:c4:05:c9:ab:7d:2c:86:71:2b:83:d0:e1:
         70:45:80:55:e8:71:bd:5c:21:0c:bd:95:da:e2:4e:04:27:a8:
         98:63:37:0d:59:8b:45:a0:37:cc:b4:8d:ec:a9:01:e7:30:92:
         27:65:9a:05:56:a4:39:fe:94:00:74:09:be:70:4b:e8:41:eb:
         c5:f5:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:56:41 2024 by rpki-client on console-ams.rpki-client.org