Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File:                     y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier:          2n3+F6AYC2o2WDhWtWMpg7GHmyuzPI1pozGugO8B7gk=
Subject key identifier:   3D:63:85:F1:31:47:1C:11:F6:16:8E:7A:DC:B1:1E:68:62:32:C3:BA
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer:       /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial:       018F87EDB4EAE1607FB61E9319BA664BE06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number:          1081
Signing time:             Fri 17 May 2024 19:00:53 +0000
Manifest this update:     Fri 17 May 2024 19:00:53 +0000
Manifest next update:     Sat 18 May 2024 19:00:53 +0000
Files and hashes:         1: 1-DQg-sN04KHNXbX_xEX3XTwL0rY.roa (hash: Bd3ayJ7YdjIjgfbD7/O9p8YZ6g+MJ7j+2m7Oxze4BR8=)
                          2: IQwNxnZCTzT07Us7C_mEII7OU2o.roa (hash: GPCl1qsF6BiOtAjAdQNoj+sLFt1tYMp2QfUI8bbP/dA=)
                          3: dsmUASdq9UQh17dwM1hOKZ8Z1kw.roa (hash: qtxEpgaH01BTJFEvl//R3WBQ1A8iiRqj6K0WYBE3eB0=)
                          4: sdjX38msvBoDpvweSyjVAU8GF4Y.roa (hash: U3OIuCUP/QMrapVCgXaz9C0WyubtbL2CX4jwbeD6EFA=)
                          5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: qUULxa30YypoTja31vBdj4TNsDxt/Wl17TCkjAyNZzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b4:ea:e1:60:7f:b6:1e:93:19:ba:66:4b:e0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
        Validity
            Not Before: May 17 19:00:53 2024 GMT
            Not After : May 18 19:00:53 2024 GMT
        Subject: CN=3d6385f131471c11f6168e7adcb11e686232c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:19:72:11:40:8e:c0:e4:3c:20:58:7c:7d:
                    2a:ec:2e:82:27:33:f2:bf:a7:2f:e8:66:b8:43:57:
                    67:2e:c5:3c:10:0b:5c:69:52:f3:c7:fc:89:11:3f:
                    30:96:1b:d8:38:b8:bf:de:34:ec:3c:ac:fa:1b:df:
                    6c:d8:5a:0d:2a:50:28:95:1f:eb:a7:c2:3c:e7:1b:
                    de:e7:f3:b6:e1:28:f1:3d:cd:b3:55:f0:da:57:b3:
                    bd:53:1d:a2:1b:7c:d2:11:61:f4:bf:8b:30:98:d1:
                    82:52:45:c9:77:9c:4c:99:11:d7:84:e6:6f:3d:f9:
                    ea:e3:7e:bf:74:f4:00:2a:18:ae:d4:a4:f3:45:5b:
                    17:b9:d0:14:d6:17:52:c4:ea:3e:60:0b:17:e0:9b:
                    ce:5d:d3:e3:f2:a7:f6:37:4a:75:eb:79:a3:c1:d3:
                    fe:73:89:3c:b3:8c:c4:88:31:06:a2:d3:a3:f8:3b:
                    61:f5:a1:19:59:f6:e5:1b:8a:b5:19:a6:65:8d:ff:
                    04:63:5e:31:79:e3:c7:1d:f5:7e:ff:bb:14:a5:b2:
                    f8:ad:6d:a5:f2:77:20:c5:a5:96:19:c8:f0:2b:f7:
                    6e:48:bc:02:ce:a2:30:17:11:c3:5b:aa:98:46:8b:
                    81:4e:c3:de:20:ce:61:7a:5d:5a:de:8d:9c:d9:bb:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:85:F1:31:47:1C:11:F6:16:8E:7A:DC:B1:1E:68:62:32:C3:BA
            X509v3 Authority Key Identifier:
                keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:bd:4c:17:54:e0:db:ed:ea:90:3f:88:c4:7e:10:b9:c7:
         e1:a9:57:09:e3:61:03:7e:a1:84:d0:8b:ad:30:3a:9b:c5:e0:
         01:b0:f5:b5:3d:b9:d4:bc:0b:d5:a4:e9:24:dc:87:68:af:11:
         ae:16:f5:4c:3d:15:17:ed:36:cb:5f:55:be:c8:ce:c4:f0:51:
         2c:59:97:de:98:ca:7b:92:0c:91:80:78:03:c5:a2:52:f7:7b:
         2d:bf:48:ad:d5:82:c4:c4:5b:6b:56:f1:ea:70:d3:38:39:d4:
         8b:dd:18:3b:51:29:a5:e6:65:b7:69:10:34:82:04:b0:5d:16:
         fe:7a:81:7e:62:5b:e2:a4:ab:5d:e2:00:65:76:2e:a3:6e:6d:
         d3:8f:56:e8:39:35:10:d2:fd:ec:06:4d:73:2c:11:fc:59:b2:
         7d:54:63:38:a8:47:9a:47:11:02:16:15:6a:88:7f:1e:be:88:
         1b:7c:61:0a:89:43:0f:b5:1c:3d:bd:49:49:9e:fa:0b:c6:bf:
         fb:a4:5f:1a:25:1b:08:97:b6:cc:d6:a2:47:d2:bb:56:0c:64:
         4c:cd:42:ee:ff:d1:de:1a:60:04:19:b4:03:b3:82:e2:c0:1e:
         58:e1:c2:bc:14:34:80:9c:0f:ec:2d:1d:e8:77:96:17:9e:54:
         63:4f:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:15 2024 by rpki-client on console-ams.rpki-client.org