Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File:                     snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier:          xlpuSLwj9XeovoIFZ/uHkcl/N9G4cZquQRa8EpY9ohE=
Subject key identifier:   C9:69:48:EA:77:57:E3:39:25:C9:3E:3B:3D:78:AA:94:22:4D:97:79
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer:       /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial:       018F87B66D9453FA17C320CD5FDC09FB59B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number:          0D0E
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: dFFXumtF2r_HB8QA8xvqjE-_9kk.roa (hash: UfkgkLpGMGeN6EFxXCcKTJc5jVJ3gaEj8rnr7G8hE50=)
                          2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: wC4fGI55x0oIFJjnybpQnRkGI4CK5ggofAy3K52w6OE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6d:94:53:fa:17:c3:20:cd:5f:dc:09:fb:59:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=c96948ea7757e33925c93e3b3d78aa94224d9779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:f1:9f:e0:5b:1a:b5:b6:56:28:56:37:90:
                    e1:b2:3d:2f:18:c0:14:ce:06:be:9b:bb:56:e9:6a:
                    55:be:99:a1:85:6a:7f:6e:22:67:40:20:49:6c:05:
                    28:5d:77:3d:a4:fb:17:1c:b5:81:44:83:97:bb:de:
                    24:2d:cd:59:64:de:89:3c:fe:af:55:99:fb:5a:d0:
                    7c:9e:6b:a0:02:96:ad:ba:a9:63:76:35:94:3c:9c:
                    98:3d:d7:fa:9f:04:9c:3e:b2:28:42:67:19:e9:a9:
                    09:f0:1a:44:0a:53:0b:34:2c:bb:47:fc:a8:7f:4a:
                    97:10:3c:7b:5a:a1:b9:61:6a:73:e7:72:12:a8:83:
                    49:2c:99:16:ed:7c:90:03:62:82:e1:a7:a7:94:dc:
                    92:83:92:cc:96:ca:28:da:48:58:15:ef:16:54:f8:
                    27:00:20:5b:db:80:b6:5c:de:03:62:08:b2:f8:f8:
                    ae:c3:70:41:9d:2c:22:02:a6:5b:58:c5:9a:09:0b:
                    a5:43:df:6d:92:0e:45:b5:30:9f:47:1e:2f:dc:29:
                    85:8c:ba:f0:bc:f9:a8:0d:a5:0f:c9:d6:df:e7:e6:
                    dd:78:c3:5c:d5:08:03:a3:fb:5c:47:25:0f:44:b1:
                    46:27:c4:83:88:c7:3c:35:a2:04:6b:22:8e:3a:55:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:48:EA:77:57:E3:39:25:C9:3E:3B:3D:78:AA:94:22:4D:97:79
            X509v3 Authority Key Identifier:
                keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:1f:de:de:65:fa:50:f7:73:87:59:4d:8e:d2:03:6e:ec:
         8f:29:29:90:80:46:a1:a5:4c:d2:2f:f9:09:5c:14:a9:3b:f7:
         c4:14:8d:09:14:f7:04:26:7c:5d:ba:31:fd:8d:5e:6f:a0:fb:
         ae:da:cb:f9:aa:9d:d3:21:08:07:cc:38:ba:04:5b:86:33:65:
         39:d8:d7:cd:da:37:38:2a:e3:f7:ab:5b:95:64:95:d2:a3:d7:
         be:61:76:58:70:87:90:00:0f:36:3d:be:fd:22:7e:ae:fe:db:
         af:49:57:32:50:76:4d:3d:fa:ca:1b:34:13:29:9e:bc:12:93:
         9f:4c:6b:10:bd:c9:78:44:9b:4f:e4:69:68:8b:7b:ba:71:15:
         87:c0:ef:80:46:29:0c:65:f0:1c:dc:10:a1:9c:e3:d1:0b:34:
         ea:b1:1b:33:85:7e:0f:36:87:d0:ac:0a:b3:aa:0a:28:46:ff:
         eb:f5:24:b5:74:26:7e:06:4d:eb:1b:09:13:66:ca:09:45:7a:
         3f:2a:37:e4:69:39:10:e6:c7:6c:05:d1:a8:7a:38:cc:fa:a2:
         0f:6f:a1:9e:9a:a9:dd:cd:dd:07:b9:e8:37:65:19:3b:f8:dd:
         03:4d:11:57:ff:1f:56:5b:e7:ac:78:e0:53:5a:22:cb:51:5e:
         c0:8f:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:52 2024 by rpki-client on console-ams.rpki-client.org