Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File:                     ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier:          +G00iAE6YtqNykdUjwYBnh8hjlcNXP6kavGXIre2jas=
Subject key identifier:   7F:AD:53:AB:5B:FB:99:23:51:32:16:8B:7B:AC:D2:32:59:64:54:E1
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer:       /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial:       018F3F30A5B7937B955E4554873302728C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number:          0472
Signing time:             Fri 03 May 2024 16:01:43 +0000
Manifest this update:     Fri 03 May 2024 16:01:43 +0000
Manifest next update:     Sat 04 May 2024 16:01:43 +0000
Files and hashes:         1: 006DyEUQqXD-PHfsz286hHG4ZiY.roa (hash: GSqkR2pRPWW4E9Y8qO7upQuBjL4NfAokVsOkNSukSWY=)
                          2: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: TRKiNXnJGOe2NKg2BfYhfv1ncD3PZC2tqlTengwIkd4=)
                          3: nEXKvuH6wmS4L2fN26pIcjvR2HE.roa (hash: jGYmYh++GXz6k/wtlO+yNhTrhBxqRT4ZmZqIuweG91o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:30:a5:b7:93:7b:95:5e:45:54:87:33:02:72:8c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
        Validity
            Not Before: May  3 16:01:43 2024 GMT
            Not After : May  4 16:01:43 2024 GMT
        Subject: CN=7fad53ab5bfb99235132168b7bacd232596454e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:90:56:2c:0c:db:71:93:07:2a:cc:33:ee:
                    93:2b:3a:39:ff:8b:61:26:dd:12:b0:ae:f6:e4:44:
                    87:e2:27:93:a3:34:b9:ed:bc:a1:48:42:c1:a4:3e:
                    56:9c:34:5f:0c:e8:6b:b1:0a:02:d0:bf:f9:55:e6:
                    db:ac:fe:0a:7e:4a:07:f1:87:46:2b:7e:d6:e7:69:
                    b6:37:7f:f6:0e:8f:57:1d:e7:cd:56:e6:88:b0:1f:
                    4a:45:a2:f5:f3:fd:54:b2:1c:81:3f:64:c2:a3:f8:
                    4d:43:cc:5c:88:fd:e2:f4:af:a6:68:b6:73:7e:a4:
                    83:93:75:9b:5e:ec:a1:37:18:9e:85:e8:b7:ae:19:
                    80:14:23:d5:cc:b3:ce:97:e3:f9:64:05:75:dc:e3:
                    83:ea:7c:e5:48:76:0b:d2:3d:e6:e3:a0:44:7b:40:
                    54:be:16:43:8b:23:db:e5:09:a1:bc:68:bb:c5:e2:
                    aa:00:d6:fe:68:cd:b2:24:9e:e5:93:6e:6c:d3:0e:
                    42:b6:2c:80:2e:1f:c2:22:5f:27:8e:62:c3:ed:e6:
                    1d:41:9d:d8:81:6d:93:ce:90:e5:c4:2d:62:58:b9:
                    6e:8e:16:77:03:9d:92:40:5d:2e:b7:45:e6:c3:63:
                    6c:fd:cc:f9:dc:34:6a:c4:45:81:eb:e7:91:e7:1a:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AD:53:AB:5B:FB:99:23:51:32:16:8B:7B:AC:D2:32:59:64:54:E1
            X509v3 Authority Key Identifier:
                keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:d4:c8:0d:18:e4:98:41:1f:a5:89:43:72:8f:14:7a:76:
         16:ee:02:bb:cb:98:e4:db:68:a3:be:a7:14:64:6c:25:3a:8f:
         7c:06:fa:5f:f2:bf:ba:09:ae:87:84:ca:34:be:e8:e6:c0:b6:
         06:6e:26:c2:c8:16:4f:f0:a2:24:97:a8:5b:97:24:bd:38:57:
         fc:6a:5b:35:8e:21:d5:31:b9:d2:97:37:c6:96:05:ea:cb:be:
         90:fc:9b:09:d4:2c:52:28:82:5c:6b:06:3b:4e:f8:50:82:52:
         f7:24:8a:7f:9f:02:c4:b6:b2:23:ea:15:e4:97:66:45:4c:83:
         1e:55:fa:55:d0:d1:0a:70:36:eb:38:93:83:fa:6f:28:fb:b3:
         d0:bf:d5:a3:ba:c1:81:51:e2:3b:1a:6a:40:6e:e7:92:5c:a9:
         6e:1a:ee:11:ee:cd:9e:e7:38:d2:67:c7:ff:a9:fc:22:d7:4b:
         c4:34:d5:24:95:d6:37:de:e1:c8:e9:1a:61:52:4e:7a:ad:22:
         ff:7e:11:cb:29:a8:e8:7e:2f:ea:3a:9e:6d:be:90:cc:3b:59:
         23:2a:8f:fe:0d:63:97:d0:cb:32:68:6c:87:69:56:60:32:48:
         7b:33:65:91:0a:fe:72:fb:ec:e8:b9:87:e8:f1:66:8b:e4:fb:
         9a:10:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:09:36 2024 by rpki-client on console-ams.rpki-client.org