Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          5+1XWYGejLjAsXncBO4Ts2SRiLzUdqTe811PopA+IjQ=
Subject key identifier:   85:3A:A1:C9:1D:00:BA:55:7B:16:5A:BA:56:97:83:11:40:4F:B8:7F
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       018F877F427DC24B50C06C27F0E7499D371C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          1182
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: 02DN_gznIfsZZeYb_yKpVaus1eE.roa (hash: Al/TZ32Md4MRERGfAY4tWPc87qkpZMMqWoLz80OGwRs=)
                          2: 6OQzZJt7u3gCsY72ao4LXZ6dM6M.roa (hash: YXRhwFXWdyFfNgENFtY9MzLeNr4T7DyBYormpcWqCfc=)
                          3: 8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa (hash: 49i1/QcMCTIJEzlwd6DLNRsi3SVVb9KD9ZCLatWf+sM=)
                          4: DPQcTVe-zkzt3A3HRYS90D6Hi5I.roa (hash: w7EnG6chn3I455eutuiqSjSRcWEa/rOaEIdcXVD6zWs=)
                          5: GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa (hash: KgAZb4Hdapd15DDyIgPF+uYjKjMEZqgwb++U70wGsZE=)
                          6: MQCBTxmepaVQLz953ipFUmRFBbc.roa (hash: h6HMwF6NSuvkUGTfUySxeFqmBKiip+JwXi8u9MjeU6s=)
                          7: QHxAQ7aLzBCeTNpoj6-ZeWEPb2A.roa (hash: xiH0NYV5fvvdz5zx4nPeAo47qIyLklhsn0uRR2PYBi4=)
                          8: tYR2t6XLlJlrCnEBwgsb5sY7qYs.roa (hash: JHavKTgKXDxVz1X1PCoeu6d5p5Md9s5G/iy/pke0rGc=)
                          9: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: Km17EPMDyUlZP7TAgvZkAh3P23jYbM9/6/8Mmd4FJNg=)
                          10: ydqGz_AggX2cAcxmUfFYOgmGgcc.roa (hash: PAdVMMZntx4KJjSU+fOVGT9Ozs+GfJt/bo0kRwc7l34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:42:7d:c2:4b:50:c0:6c:27:f0:e7:49:9d:37:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=853aa1c91d00ba557b165aba56978311404fb87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:e7:f1:e7:01:11:1a:77:ce:c8:8b:ee:37:
                    cf:3d:09:10:aa:6b:96:bc:f4:23:b6:5e:71:33:f1:
                    62:7f:18:c6:c0:52:c5:7b:6a:12:d6:7a:a1:c4:be:
                    8e:6f:16:25:b3:9b:8a:b2:7f:c5:a0:82:a4:02:60:
                    68:71:69:e2:e9:61:54:dd:77:c4:09:34:7c:85:02:
                    e3:de:18:3f:79:07:5e:f6:c0:f4:9f:75:c8:c9:13:
                    81:76:71:10:e7:a9:df:87:40:db:16:9d:73:34:94:
                    7f:9d:cd:2e:3f:15:63:e8:80:5d:72:2f:a1:ec:3b:
                    3e:d9:9b:39:06:0d:e3:6e:49:2a:2f:c5:84:fc:dd:
                    81:59:f5:c4:ec:f3:9b:4e:44:54:12:d9:36:3f:84:
                    53:a9:c3:10:3a:42:04:f9:3a:93:5b:42:83:0f:1d:
                    9d:be:24:ed:5b:df:1f:90:ad:35:ea:ce:47:f8:9a:
                    5b:15:72:51:d4:b7:fe:38:18:83:26:6f:ab:19:f9:
                    9e:30:20:3d:4c:d7:5a:47:e7:6a:21:97:db:af:78:
                    c1:3b:01:50:92:cd:42:b2:5e:f8:68:30:b9:08:48:
                    af:03:e7:be:f4:13:c6:3b:dc:75:60:27:fe:b8:9e:
                    10:8d:8e:0f:7b:f1:a7:de:c6:1d:e3:3d:eb:52:a1:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:A1:C9:1D:00:BA:55:7B:16:5A:BA:56:97:83:11:40:4F:B8:7F
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:35:f3:b3:b1:87:36:ae:55:71:59:93:e5:f1:86:90:cd:
         1d:93:fb:05:c9:be:38:68:f2:c6:25:83:3e:50:ce:21:b9:d2:
         d1:c2:2c:d4:c0:86:bb:d1:a7:07:11:5a:09:41:da:9c:22:a4:
         a7:86:34:e8:68:10:34:10:0d:ed:90:f9:85:7a:7b:9e:a5:42:
         ff:29:46:76:e3:09:f5:5d:6a:88:bc:7b:de:01:c0:d6:86:2f:
         5e:af:79:52:86:35:0f:28:28:e6:05:d8:99:ff:1a:4a:20:5d:
         ba:e6:3e:02:cf:ca:59:68:d2:f0:65:44:fa:79:6e:38:4d:03:
         c4:3f:95:fa:86:91:ea:be:d0:a1:7f:7d:d7:4a:e5:91:98:af:
         9c:14:e0:39:19:ee:ba:42:38:bc:19:d8:0f:41:06:79:3d:06:
         0e:1a:33:4b:90:66:ee:4b:cf:3c:ba:15:eb:29:36:af:4b:c9:
         e7:21:6c:48:c9:cc:8c:28:db:07:a7:25:61:36:7a:0d:91:56:
         d1:77:46:58:97:f4:a9:1f:79:c9:da:71:5f:6e:37:68:ff:a6:
         a1:f8:ab:59:79:e1:5f:94:0d:40:b6:9e:43:5d:ce:aa:fa:5b:
         7e:2a:27:1a:48:96:d4:a6:5a:bf:95:c0:cb:59:9b:95:5e:1e:
         39:e3:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:49 2024 by rpki-client on console-ams.rpki-client.org