Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          7WD+xTb8FwQYvXpq3ZU0gFbRdTUZiNKo3lar+6M06zo=
Subject key identifier:   F7:8A:0C:22:7E:C5:86:2F:46:D6:CF:30:69:4D:55:D2:A2:B0:D9:06
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       018F885B01FE7AFE6A5AB5066E4770EFA2D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:16 +0000
Manifest this update:     Fri 17 May 2024 21:00:16 +0000
Manifest next update:     Sat 18 May 2024 21:00:16 +0000
Files and hashes:         1: 1-K4xMuq3Av_Pi1yAPf-ekvbrrpk.roa (hash: iMVRJlRMZidsgaF1bQIzWrl1Z8M1GOm7jo/InA9K6Co=)
                          2: 1Pt8zm6-CzG2_FNyv9KOcXabiB8.roa (hash: awpPIebDHCF6aMf4q3BIzzvVNJ6jaISbS8IPLxIkX/E=)
                          3: CDxDxtHr9ioQ01TaA4ao2l70Zn4.roa (hash: q0HC9E04HADt2tvFAQ44e2E1Vb7rQWf68W2gAfrBvmM=)
                          4: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: W1EiBb0gTQ3PGwSLvQuliYZ5QmgazBovzoNjNjSX/gs=)
                          5: uu6nu25ktOuWrq_y7Lf3cnbTSkU.roa (hash: NwzaGNFoBan0scf5/zZeH/FnfOhLQQDlZZKyn+67mAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:01:fe:7a:fe:6a:5a:b5:06:6e:47:70:ef:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: May 17 21:00:16 2024 GMT
            Not After : May 18 21:00:16 2024 GMT
        Subject: CN=f78a0c227ec5862f46d6cf30694d55d2a2b0d906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:7f:50:9f:1a:fe:af:ba:c9:70:40:cc:15:
                    db:76:97:56:97:e1:53:1f:65:be:76:47:06:9c:9c:
                    1f:8c:6a:00:dc:04:0d:b5:1f:f3:e5:10:21:fd:20:
                    1d:c2:85:92:42:ec:ac:68:b9:1d:7c:27:cc:bd:8d:
                    ab:2c:85:82:af:5c:aa:f8:b6:f6:b1:0c:f3:ec:63:
                    b7:ee:2c:9a:da:82:79:a5:fd:37:45:5d:75:7f:39:
                    c0:17:1e:ad:94:14:dc:02:bb:5d:4a:ea:cd:93:ff:
                    ff:83:60:28:98:9c:d2:fb:63:7b:5a:55:41:eb:3a:
                    78:e8:6b:ea:b7:b4:df:86:a9:72:c5:8d:a6:5b:67:
                    0b:80:c0:24:61:a0:4b:1d:a0:fa:18:12:fa:46:73:
                    53:67:af:94:9d:2b:3b:83:a9:d5:aa:1a:d3:16:90:
                    a4:e7:e0:1b:4e:d4:f8:c8:be:24:b9:02:d5:45:b1:
                    f3:64:a9:7b:05:fa:fc:00:92:76:df:c6:ca:1d:f8:
                    9f:a2:21:93:b2:60:9f:cb:c4:62:6d:1d:a2:32:36:
                    03:40:25:98:32:31:f0:69:b4:78:41:13:9c:40:a4:
                    92:21:55:fa:0e:8a:2b:46:17:4e:aa:9f:1f:12:0a:
                    2d:5c:97:cb:09:d0:c0:d5:6e:92:ec:3b:00:87:73:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8A:0C:22:7E:C5:86:2F:46:D6:CF:30:69:4D:55:D2:A2:B0:D9:06
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:cd:a4:d3:8c:61:dd:71:d5:e4:ea:30:bc:70:32:66:a4:
         b0:9d:2e:05:d6:2b:31:22:d4:72:a4:39:5d:fb:77:9f:8d:70:
         12:a3:91:e4:f5:66:37:f4:5c:12:f9:5a:34:5a:f6:8c:bb:be:
         43:7b:d8:0c:6a:f8:45:e8:37:03:55:6d:db:0d:4b:74:01:db:
         92:e9:92:d3:84:92:6c:77:f4:c1:1f:63:42:db:7c:78:34:57:
         0c:ef:63:23:64:0d:d5:d3:6f:d9:23:76:a5:fe:61:ea:cc:d7:
         77:c3:61:66:91:6d:73:54:06:62:2d:04:02:52:30:57:e8:5e:
         e3:78:33:14:b2:ec:e0:29:d6:b1:9f:c2:fa:04:86:be:1c:c3:
         fe:7e:f0:86:5c:d1:04:d4:79:6e:b3:0a:2a:83:01:4b:31:cb:
         4a:37:a0:f1:2d:e3:02:b6:1b:5e:5e:d0:d8:10:4d:de:c6:2c:
         89:f9:02:c2:12:97:1c:a8:55:8f:1f:55:a5:d9:48:bd:3a:6e:
         bc:12:0e:4c:de:b5:57:cd:04:63:d9:3a:98:fa:d7:11:58:22:
         58:6f:a0:18:e4:a5:d1:04:28:11:da:47:7a:6a:5c:29:f4:84:
         b0:b7:5a:af:15:e1:49:99:33:97:cf:22:33:1f:ac:6b:41:d5:
         55:92:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:02 2024 by rpki-client on console-ams.rpki-client.org