Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File:                     25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier:          2qcZauZzBFDGtP4UxYzIoBfRJLI69DyydYoWGKDyiBs=
Subject key identifier:   D8:86:80:D5:B0:58:4A:D5:35:29:25:7F:DA:52:EB:DB:CC:61:81:55
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer:       /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial:       018F39D2B9A45810E96F0E451A62C86F1344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 15:01:02 +0000
Manifest this update:     Thu 02 May 2024 15:01:02 +0000
Manifest next update:     Fri 03 May 2024 15:01:02 +0000
Files and hashes:         1: 1JP1rokpKkqaQcHVfhiBfd2SRyM.roa (hash: OpRDJf4i91wvkdLaibPYwSMqJO0y9Ro0a+CH8CL/4ig=)
                          2: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 3TV3xWxqaZ11YA2Zgb5wIFVks4wKvepUkrQ9j9xle8I=)
                          3: bPYTVvgxPz3yoWW8JLnI4V3s3eY.roa (hash: cbKtMC2L0rpI+o3ES8zXUlwydPQtMEBO4zQyMigNamo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:d2:b9:a4:58:10:e9:6f:0e:45:1a:62:c8:6f:13:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
        Validity
            Not Before: May  2 15:01:02 2024 GMT
            Not After : May  3 15:01:02 2024 GMT
        Subject: CN=d88680d5b0584ad53529257fda52ebdbcc618155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:33:87:3e:ea:21:34:32:b0:90:8d:6c:31:
                    f2:d7:39:1b:b5:16:98:96:3c:3d:5c:de:f8:70:dd:
                    c0:6b:54:11:80:80:3e:9a:99:02:50:75:ae:84:07:
                    89:5d:83:1b:98:3f:0b:da:d8:90:75:86:07:01:95:
                    aa:cc:2d:4f:62:31:60:7e:b0:1a:b9:fb:8e:3f:8e:
                    76:ed:2c:35:5d:ec:d8:21:4f:f6:6f:8c:c5:28:5a:
                    10:df:02:a7:c1:3b:fe:54:4a:c3:ed:8a:24:fc:30:
                    cc:85:d4:32:40:f6:e4:c7:30:47:44:3c:b9:ee:9a:
                    17:90:5a:c7:a9:e1:95:69:bd:39:78:18:57:88:b9:
                    b3:7a:25:89:40:77:77:5b:d9:3b:31:cb:54:16:23:
                    8e:fe:1e:a3:a6:4d:e1:71:c7:cf:e0:d9:a4:68:08:
                    f5:d7:54:ab:1c:5e:37:41:7a:83:8b:a4:d9:e8:37:
                    38:14:15:c8:e2:55:50:f4:68:03:bb:10:9e:35:8b:
                    6b:cf:78:8c:3b:28:60:af:d5:c8:65:8c:52:02:1f:
                    7e:cc:a8:55:21:19:43:ca:a7:16:aa:18:e6:8f:cf:
                    7d:c7:57:50:68:e7:b4:74:9e:e7:55:63:08:b0:ad:
                    78:e1:8c:4e:88:71:47:18:86:1c:37:ba:8a:8e:1d:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:80:D5:B0:58:4A:D5:35:29:25:7F:DA:52:EB:DB:CC:61:81:55
            X509v3 Authority Key Identifier:
                keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:58:b4:65:7e:08:50:2c:5b:7e:59:ba:a8:68:ea:08:a0:
         ed:1d:46:07:23:3d:c8:64:8c:f0:66:9f:ec:6b:c1:5d:9a:ec:
         af:d7:34:50:61:0a:bd:64:f2:b4:82:b7:b3:65:7d:bb:07:2e:
         08:a0:90:cb:e3:b6:86:39:3e:b8:63:67:cb:33:49:f2:bb:d5:
         b6:ad:05:bc:41:73:79:d5:9d:0e:95:95:dc:40:8f:ac:b3:44:
         92:8e:f9:d7:91:96:22:d1:0a:20:7e:31:f7:82:e2:6d:89:67:
         54:6a:39:aa:76:8a:0b:1f:93:49:2b:0a:b5:aa:e9:a8:e7:5b:
         95:6a:7c:61:88:6c:f7:8e:1b:3e:f3:a2:b2:b2:eb:6d:12:c4:
         43:dd:b9:78:0a:13:dd:80:d7:70:1e:1e:63:5b:50:79:5c:19:
         54:a6:10:07:f6:bb:7c:2d:7a:a6:e6:8e:b3:6d:65:73:f8:02:
         8f:de:bd:7b:11:20:1f:56:ed:e4:a9:3e:f5:a5:ea:d7:c1:73:
         3d:b2:2e:d0:41:e8:61:2f:cc:45:ed:1f:21:70:55:b4:9e:7d:
         bf:d8:e7:13:63:2f:e6:19:e1:3f:53:dc:44:ac:03:35:11:eb:
         6a:e6:2d:7c:8f:a7:1c:ed:c9:65:60:ec:9f:dd:c5:65:aa:11:
         af:86:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:31:45 2024 by rpki-client on console-ams.rpki-client.org