Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File:                     0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier:          bQXDy1KrXEMO4Xh881ft7Lha2e/lxR7mYSeKSOvMxiw=
Subject key identifier:   85:34:7C:D5:C6:FC:2F:F1:2D:63:01:41:6D:5B:91:CF:A2:C2:DF:91
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer:       /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial:       018F234AE47DCF2F6CB611628AA2DE09EC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number:          1146
Signing time:             Sun 28 Apr 2024 06:01:01 +0000
Manifest this update:     Sun 28 Apr 2024 06:01:01 +0000
Manifest next update:     Mon 29 Apr 2024 06:01:01 +0000
Files and hashes:         1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: 654FrdeYscOOHwd5No3ExVtuh4AAwXVloEc11CUELBg=)
                          2: U1PSqWUMnsIi6Z6KyLtNfkSmzXE.roa (hash: uIxW96EOBiPQuW8osJUFESeMrt8Hy0vfHJsHBn+DQSs=)
                          3: UxtAYwkdCkjRLIdYVTn0iG5OfDQ.roa (hash: s6mpj78dSqriRUK0x90zjM27DBHYAyeRi21dkA+wDD8=)
                          4: pAfqBqaLfcRNvY7WGbVqlrnR8qE.roa (hash: MGI06794FZLjDsqVRJ6IkU7TLmlh0QkNmHCIrNJjjhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:4a:e4:7d:cf:2f:6c:b6:11:62:8a:a2:de:09:ec:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
        Validity
            Not Before: Apr 28 06:01:01 2024 GMT
            Not After : Apr 29 06:01:01 2024 GMT
        Subject: CN=85347cd5c6fc2ff12d6301416d5b91cfa2c2df91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:e0:0d:35:d0:55:06:2c:f3:71:cd:e0:f7:
                    e1:0c:86:3f:b9:23:4f:6f:45:2b:25:38:d8:90:b4:
                    87:f6:7a:90:e5:db:28:67:aa:5d:30:1c:5a:85:04:
                    32:17:cf:98:6e:72:36:90:24:2e:7f:8c:ab:e8:cb:
                    63:62:68:28:6b:d1:e3:d4:af:e1:b9:c5:a5:0e:ce:
                    c2:2c:9a:71:e1:d7:d7:05:a2:b7:48:3c:c0:67:aa:
                    5f:4e:47:7c:39:80:bc:e8:fd:45:d1:f6:33:c0:d3:
                    05:46:82:d7:72:26:45:11:b4:91:7f:5f:64:3a:1e:
                    55:b4:6e:b8:ea:e4:37:a7:f4:6b:24:ec:c6:d2:4f:
                    7a:69:b3:13:36:98:45:1f:62:ca:36:0f:dd:9e:b9:
                    50:57:8e:2d:18:57:84:5f:df:2c:e7:e4:f5:88:61:
                    57:34:a8:6e:7b:21:c8:f2:4b:2c:c5:55:2b:42:2f:
                    55:03:0d:58:91:37:cc:26:9f:46:76:40:e3:1b:0c:
                    7c:a0:87:d0:ed:bf:70:be:de:5a:14:91:1a:a6:02:
                    5e:5b:fd:ba:3a:ef:85:32:09:5c:84:bc:bb:0c:67:
                    6a:fa:4b:37:8c:23:e5:8c:d2:bc:53:e6:4a:31:6e:
                    46:ad:e9:61:cd:9c:2f:91:0d:82:a6:4f:53:aa:23:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:7C:D5:C6:FC:2F:F1:2D:63:01:41:6D:5B:91:CF:A2:C2:DF:91
            X509v3 Authority Key Identifier:
                keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:80:af:29:60:f6:f0:f3:85:c4:5a:3b:f6:95:15:59:a8:62:
         4f:87:a1:ad:13:a1:56:c2:eb:3f:cb:da:04:e9:7b:a6:c6:ea:
         fd:12:f1:5c:30:2c:fb:d7:d8:ec:2f:ea:47:b4:a2:b9:41:b1:
         a4:3e:78:f6:f4:1d:3b:70:8c:81:20:da:23:43:7e:1c:0a:e1:
         6d:e7:e7:96:77:34:ca:0b:46:d9:92:0c:10:76:76:81:1d:5f:
         b5:c9:5a:d6:19:b6:36:64:2a:97:21:44:75:38:94:b9:f2:40:
         95:c3:26:6b:1a:73:17:b5:d3:72:3d:6f:c2:08:6a:5f:55:d1:
         7d:3c:f7:99:b2:e2:5c:08:41:a0:76:c6:b5:19:98:60:c7:81:
         45:a6:96:3c:75:6e:c4:9f:2b:a2:16:b2:ba:6a:da:28:17:7b:
         3f:de:9a:d6:6f:70:37:b9:44:96:bb:ec:9f:c7:da:20:23:89:
         79:04:31:88:01:89:ca:b2:a8:16:2b:4b:30:57:6e:4a:7e:1e:
         9e:f7:4c:52:0f:2f:b3:15:0c:df:d6:c6:20:cd:00:6e:62:dd:
         f2:41:26:74:20:60:fb:52:81:92:f8:35:a2:ea:77:62:6c:79:
         e6:d6:d7:92:4f:5e:6d:52:d0:0f:da:22:0c:fa:2d:50:0d:f1:
         22:f9:ba:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:14:03 2024 by rpki-client on console-ams.rpki-client.org