Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          jCaQsv9994EAyX/Jpsy/Xv035TLiIvDh/lgFi4Xq7B4=
Subject key identifier:   85:F6:C4:AF:2C:45:8C:F4:7D:09:68:B7:81:C2:E4:51:2F:40:E5:4C
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       018F3663D9CF289D6DCB6A147368152E7D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          1158
Signing time:             Wed 01 May 2024 23:01:04 +0000
Manifest this update:     Wed 01 May 2024 23:01:04 +0000
Manifest next update:     Thu 02 May 2024 23:01:04 +0000
Files and hashes:         1: 90ulOIc6_N3fvotbnJhYR1la2zI.roa (hash: pwNm51MS/l8CaswFUStvhrXdmgyfK1AZNPrCdtNzVvs=)
                          2: GTrXimjZE01RlTAFB3bwCO5zAvQ.roa (hash: gH235ah1O5x+8eK9WY2NQ1dWAQzI9DQttUDavtwpjzA=)
                          3: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: aqUa4U+rv3McV4D9oEKbH1+dCgrmqNTXT8tWYR8p0ms=)
                          4: QOKUfuy-k0crcPI61alVmEC68fw.roa (hash: El3x0+IklPe1pf3DEgj28EoKgr9uRmXp3i8musC3ajg=)
                          5: R7FZxQDVznyOMhGi6DmLw7hrbAU.roa (hash: JU60Orx09Sq4V6csPQFcQiEpDYGqmgCwddcU4jpNcLU=)
                          6: rBoYPNptXPkpHUop-w-T1egOmWU.roa (hash: IolY6kdqBe31Xj3+SpfFO56cBhypKH7LjE69EFcQzF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:63:d9:cf:28:9d:6d:cb:6a:14:73:68:15:2e:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: May  1 23:01:04 2024 GMT
            Not After : May  2 23:01:04 2024 GMT
        Subject: CN=85f6c4af2c458cf47d0968b781c2e4512f40e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:e2:23:c1:d7:40:7e:c8:1e:30:bc:27:e8:
                    e4:e4:7f:57:c1:da:9f:62:7a:b7:2a:0d:41:85:56:
                    81:57:01:06:f8:df:fe:ec:85:fe:d0:bc:c0:72:d8:
                    3c:0c:72:36:a6:05:a1:26:55:03:38:df:23:89:f5:
                    4f:0d:c7:85:ff:09:e2:7b:02:fe:67:36:8c:6e:39:
                    e9:ca:48:1f:02:12:dc:50:b0:1e:2b:d6:93:c6:18:
                    f3:a4:11:61:10:20:51:ba:36:b2:b0:2d:e4:95:f6:
                    2b:a1:2e:9b:cc:84:a7:3b:bb:7e:73:54:86:38:49:
                    1c:87:e1:7e:58:35:53:cd:a1:02:ac:b8:14:d7:bd:
                    ea:e1:39:ad:58:54:d1:9e:31:63:b9:87:1b:3a:fe:
                    08:54:09:cf:83:42:86:96:5e:fd:8f:5e:4c:51:5c:
                    90:bd:6a:08:1c:30:6b:57:fa:48:b1:09:8c:1c:a8:
                    e4:43:5a:70:c0:80:b0:0d:b9:0a:39:7a:97:ca:ed:
                    ae:57:1e:70:82:b2:1c:a0:66:58:ae:08:60:43:aa:
                    03:12:97:2a:dc:40:6a:b8:74:43:2a:db:08:d1:0f:
                    80:84:02:0d:45:b6:bd:3f:53:5e:66:ca:57:a2:e5:
                    e2:e7:f8:9d:ef:65:81:54:5b:81:ac:b5:15:b0:24:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:C4:AF:2C:45:8C:F4:7D:09:68:B7:81:C2:E4:51:2F:40:E5:4C
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:05:a6:6b:2a:3a:87:fe:ab:6e:0d:ac:01:a7:4a:2d:74:
         1c:39:ae:0e:cd:c0:6a:79:ed:e2:4d:7b:2f:f5:69:2f:47:cc:
         2f:e9:a2:34:25:f8:fd:d3:cc:34:78:40:49:40:ce:7b:29:d6:
         e7:11:8c:0b:4f:f7:bd:0b:ef:41:77:84:fa:8f:45:ae:c9:a0:
         86:9d:01:5b:3a:23:fd:5d:65:ad:fd:54:0b:41:10:f7:6d:1c:
         66:53:7b:6a:53:ae:64:48:b9:99:92:f9:7f:04:5d:50:00:a5:
         f6:00:53:6f:06:01:78:aa:c6:97:3f:a2:3a:d6:01:bf:6a:eb:
         d7:9c:14:2a:e5:da:b6:aa:48:5e:9c:fc:54:81:5a:e5:79:f6:
         d0:db:c5:49:61:03:37:d7:c7:cf:90:ee:17:bc:bd:ac:fa:6e:
         b5:c7:cb:f1:83:1c:91:8e:06:0b:70:43:c3:d3:7a:75:07:8c:
         cf:bb:04:c5:54:fc:3c:77:b8:9a:52:2d:e1:07:b9:9d:b8:b1:
         6a:fc:d1:44:30:22:a4:11:e6:98:1a:f8:9d:21:7b:d7:33:e9:
         ff:16:c3:94:e2:e1:27:73:2e:a3:15:92:c6:9c:f7:e9:fc:a7:
         76:96:4d:ff:aa:e0:7f:61:3a:ce:cb:4b:e4:29:b3:fa:19:f9:
         cd:bc:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:18:45 2024 by rpki-client on console-ams.rpki-client.org