Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          I73MPF5osqp7cGuTuj89LGZiN/Xu4XdfGz2/q+0Zny0=
Subject key identifier:   D0:52:B2:1E:0E:73:1D:AC:79:BD:F8:E6:12:D3:8F:46:73:33:C0:6F
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       018F87495638E40257CD467E6E25B4117DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          0BA9
Signing time:             Fri 17 May 2024 16:01:21 +0000
Manifest this update:     Fri 17 May 2024 16:01:21 +0000
Manifest next update:     Sat 18 May 2024 16:01:21 +0000
Files and hashes:         1: 5o7FBj9yC-G9HKVW34zwkDPlwSo.roa (hash: AAQ4Fv9mPYmSP1ub/2yep3nOS8rnK4PAo4f1nIe4kqE=)
                          2: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: zgqUVqU1W1+qNFftSuD4FFFzm3oThXhmg5U4fD68Igc=)
                          3: h12BJbMxNpueZAGv5Qe2Ly9ubb8.roa (hash: ifFPnksttQakAgY9dYOp4J+Wqzsui7+GS/4XbMNk5PA=)
                          4: pdS3dsTfvJroC3bJydOxa6e3Nlo.roa (hash: ISqwIuqh0vZj5CyzGV1KGtDMfH4xXhfw2WOT1Q1ra/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:56:38:e4:02:57:cd:46:7e:6e:25:b4:11:7d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: May 17 16:01:21 2024 GMT
            Not After : May 18 16:01:21 2024 GMT
        Subject: CN=d052b21e0e731dac79bdf8e612d38f467333c06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8f:f7:c3:a3:ae:63:6e:7b:cd:e5:5c:a2:96:
                    49:6f:b1:2e:a3:b1:34:c7:0f:6b:60:1d:fe:b9:fe:
                    11:87:b8:a9:79:53:6d:e1:62:14:5f:30:ef:a1:79:
                    90:20:f3:59:10:83:6f:f5:ed:b4:0d:39:c2:df:7e:
                    f8:b4:db:e6:aa:d1:26:5e:55:30:1b:ba:22:52:a9:
                    3b:2e:a6:33:6f:2d:c7:e3:43:2f:b7:63:7c:c6:77:
                    0b:02:64:ba:b0:8f:0f:cd:ef:ad:4a:f7:8a:03:f1:
                    79:bc:d1:bd:8d:93:a7:2d:02:fa:75:7c:fb:a7:16:
                    2b:21:a4:80:1b:9e:80:51:29:a2:f7:5f:b3:4e:93:
                    01:ea:49:13:e7:09:cd:5c:e7:6f:95:79:21:bd:9f:
                    3f:0f:c2:69:0c:91:c9:7f:ab:5f:2a:96:8c:ff:b4:
                    99:ed:85:cb:84:6b:09:27:45:c0:e2:8f:e6:63:96:
                    5f:3b:29:5c:49:39:c1:20:3c:d7:5d:8e:18:09:2c:
                    50:b4:ad:dd:c1:af:77:99:ed:2e:e9:83:0a:10:88:
                    9c:eb:03:19:39:48:6e:e7:77:f1:8e:a2:53:6b:e2:
                    a6:15:f9:1e:74:55:88:a5:58:3d:cf:cf:8a:c7:f0:
                    db:43:d8:e2:aa:d5:3c:55:8a:15:3e:3b:a5:95:42:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:B2:1E:0E:73:1D:AC:79:BD:F8:E6:12:D3:8F:46:73:33:C0:6F
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:6b:f7:b9:32:04:5c:d2:9d:00:71:a4:77:62:fe:68:bd:
         9d:4b:5a:eb:2f:bd:7e:d6:35:dd:2c:84:63:eb:71:99:41:9c:
         99:05:d3:b1:b0:76:44:0b:df:e3:8f:a2:b3:14:5d:6b:bd:5c:
         6a:27:70:b8:83:fd:59:09:19:25:de:79:f0:09:1b:df:d6:ae:
         20:4b:6d:44:2e:f6:94:08:56:04:f3:2a:9b:5b:1e:41:44:3d:
         fe:b6:98:f9:1f:86:f7:95:17:de:d9:fa:02:ed:ca:9a:ec:f7:
         53:61:f4:c4:70:43:b5:69:04:cd:73:0a:2b:56:7c:c4:f1:79:
         58:dc:54:eb:85:a9:7e:52:0e:33:28:75:f1:e7:4a:99:f5:41:
         5d:80:b9:57:40:a7:b2:e0:cc:93:00:38:0a:b2:4f:a6:0c:1a:
         8c:d5:ea:f2:96:06:73:7b:e8:8d:f8:8a:62:2c:2f:7e:b4:b1:
         1b:fb:11:99:ad:ff:12:9e:5f:7c:3a:d7:6a:a7:30:8d:65:54:
         05:d1:b1:8a:f5:1c:66:db:8c:db:3b:e1:68:d0:0b:d8:8e:90:
         b8:4f:8d:b6:d7:ac:a7:37:82:47:bb:03:84:8f:4d:be:fc:f3:
         0d:75:1b:84:23:70:29:84:da:68:77:d9:9d:c8:38:38:79:c1:
         ee:29:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:03 2024 by rpki-client on console-fra.rpki-client.org