Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          iE1EFZHCko3psW7/LqdYIfxfISrc9XlL+X+W2x6kv6c=
Subject key identifier:   39:10:60:9A:9F:3E:2F:70:92:BF:9D:DD:8E:53:79:E0:72:F2:57:BA
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       018EF4F19B0778F2E3F56D496B97F08827F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          0B16
Signing time:             Fri 19 Apr 2024 06:00:58 +0000
Manifest this update:     Fri 19 Apr 2024 06:00:58 +0000
Manifest next update:     Sat 20 Apr 2024 06:00:58 +0000
Files and hashes:         1: 3HSzF3HhF392WPSA1iJcUJqHeQM.roa (hash: gImlensZtWSRL9yARbQmaF/NJlCTNNGxx7z9/W0rb3g=)
                          2: ARo8Pc-KCLXYq2qJQov6e8zs1Qo.roa (hash: KxIwiibkkA+pG8J+PYYL2KwSQHkYKi/pkujJraq+Bsk=)
                          3: fIkseXS8ly6uCv_DCvB8DIt9-xo.roa (hash: aw/pAEswxQGry7UWA0QcrnSbb5mAQag+AN6jiesjEek=)
                          4: ggj52OiZ-Al4QIiDTqv_qCfNJrU.roa (hash: 5ohJGr3R0m3t2sABXRubgAiUj9wNkJOHr+ylPCfJvqA=)
                          5: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: MSMvNPxZxBnD/kxZKqB2HEkjhHlmEYeCItZWmH368CY=)
                          6: x8ES8-wuUnFMg9g5iPcWOxTlQKk.roa (hash: rDiqHaQekSo3O8264aihBX5gadc0PZC8QaOJqpyI3s4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f4:f1:9b:07:78:f2:e3:f5:6d:49:6b:97:f0:88:27:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Apr 19 06:00:58 2024 GMT
            Not After : Apr 20 06:00:58 2024 GMT
        Subject: CN=3910609a9f3e2f7092bf9ddd8e5379e072f257ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:99:d7:31:fb:8c:db:fe:57:75:78:31:b5:
                    10:25:34:f0:49:e7:72:e0:ad:e3:e2:cd:85:21:40:
                    21:a1:91:ca:96:be:13:13:c9:1c:3b:42:b6:25:e3:
                    92:8c:9b:97:59:ec:83:ae:49:18:0e:81:12:08:34:
                    58:52:ae:eb:46:b1:d1:99:29:07:0a:60:4c:44:78:
                    a7:5a:ae:62:39:59:ee:34:8f:ca:54:16:88:00:83:
                    b9:a6:c8:56:5c:2a:5e:7b:48:a5:08:36:a0:39:3d:
                    0d:b9:dd:e2:da:3a:5e:4f:e4:fd:70:08:2a:d7:c8:
                    35:b8:20:7c:08:bf:9a:3a:ab:77:b2:6e:6a:18:93:
                    0b:8b:79:29:e8:2e:fc:51:47:cd:ce:4d:a6:ca:05:
                    e9:9e:39:19:c5:cb:8d:1a:19:f3:1c:17:f5:6d:62:
                    e0:8a:15:3e:a6:ce:04:09:e9:d1:5c:28:a6:e7:9e:
                    4b:cd:0d:f9:5e:c7:19:c0:c4:b6:85:36:a9:76:32:
                    85:5f:ed:f2:b9:b7:08:22:99:b5:56:6c:88:77:26:
                    be:2a:c5:cd:82:ea:88:39:60:c6:b8:02:ab:21:5b:
                    0d:3c:f3:c1:81:e2:8e:0e:cd:8e:9c:58:dd:7a:cf:
                    9e:bd:c6:76:ee:b5:30:73:aa:66:1d:22:16:1d:7b:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:10:60:9A:9F:3E:2F:70:92:BF:9D:DD:8E:53:79:E0:72:F2:57:BA
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1f:bd:69:03:bc:3c:40:fc:68:69:cb:1e:d5:61:81:04:8a:
         73:b1:12:ad:5e:9f:b5:28:f4:12:9f:f6:c7:6b:94:8f:88:1f:
         37:3e:b2:64:41:e4:7a:d4:89:d5:9a:5b:2c:58:06:a3:bb:e5:
         85:e3:eb:9b:93:43:03:5e:ad:22:be:89:a7:2b:a9:70:9e:88:
         13:c3:27:1d:2b:28:9d:f2:f8:5f:b6:36:38:bc:f7:25:01:5d:
         b3:71:db:dd:5d:2a:5e:ca:e4:10:3c:6f:0d:d5:c1:6c:df:6a:
         bc:7b:0f:50:50:01:70:c4:37:0c:4e:18:87:c6:6a:a2:67:c9:
         6a:f7:4a:b8:18:45:99:8c:e9:61:74:d9:d8:f0:4a:0f:ed:e0:
         af:cf:67:63:3a:82:8a:45:d7:a3:b3:b6:ad:d4:3c:62:a9:04:
         0c:b1:0f:8b:d1:1e:79:0e:14:02:d1:52:10:22:dd:3a:33:95:
         23:58:44:f3:2e:8e:28:a0:0f:66:9a:37:0b:39:fb:6c:17:5f:
         f1:97:85:dd:bf:1a:66:6e:df:57:c3:cf:af:b2:cc:f4:19:6d:
         0b:d3:c4:d0:68:ca:44:ed:60:e7:c7:2c:88:1e:76:f1:60:fd:
         0f:22:b5:78:d0:b5:fb:35:5e:70:98:92:bb:9a:f0:95:f8:e4:
         a5:c4:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:57:12 2024 by rpki-client on console-ams.rpki-client.org