Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
File:                     lIRnQROSYziNmE2x6X4DFmnGSG4.mft (raw, json)
Hash identifier:          +BkbdQb3JI0uML6w9dMTCo4tbKwUo7OLKUy7pYzhmww=
Subject key identifier:   CE:3C:38:86:36:8B:E4:9C:E8:B8:28:D6:64:8C:F5:5B:E1:CF:7E:F9
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Certificate issuer:       /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial:       018F889255D9B71F31382FC8A3E867DB92E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
Manifest number:          0C10
Signing time:             Fri 17 May 2024 22:00:42 +0000
Manifest this update:     Fri 17 May 2024 22:00:42 +0000
Manifest next update:     Sat 18 May 2024 22:00:42 +0000
Files and hashes:         1: M71rkgVhZDqP4B_t5dC8Miuy3ms.roa (hash: 4yplD7zVgbgGhdfxRWUK6ZvF6wE7uluJDS5UUI+VQFw=)
                          2: QnODhT9eNhB0YOkyvmj61a9KloY.roa (hash: QjtWMgHCyH4cieW6W8La3LPYZyI3/MIeH/83jjajXyE=)
                          3: VbQQa9BmYmmc9tK1wIk1YkInDOo.roa (hash: tcksiPhjGVBRVyB7AImsrurMvDO/h1dP7ACCchnHHOA=)
                          4: lIRnQROSYziNmE2x6X4DFmnGSG4.crl (hash: J/WtgcHh0nFeoTFceFYxVRaKnbwz637N6StV17PZUqU=)
                          5: yI6GMx58WuwCfhJNJEH9X2occtc.roa (hash: 2hRWpltL4WGA/X/ZBEwIPsbLeazgbJQwW5+UTnrrOxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:55:d9:b7:1f:31:38:2f:c8:a3:e8:67:db:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94846741139263388d984db1e97e031669c6486e
        Validity
            Not Before: May 17 22:00:42 2024 GMT
            Not After : May 18 22:00:42 2024 GMT
        Subject: CN=ce3c3886368be49ce8b828d6648cf55be1cf7ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:44:06:57:31:b1:95:9a:91:8f:0c:fe:51:
                    79:f6:49:0f:3c:f8:07:f8:6e:82:74:c2:2d:1a:e8:
                    15:4d:de:72:37:80:d4:7a:de:4c:71:70:14:5a:b4:
                    50:6d:73:6e:db:e4:23:3c:19:38:27:4d:d0:89:ec:
                    55:de:a0:bc:13:1d:70:91:7e:00:d7:32:a5:ea:38:
                    0c:e2:4c:0a:b9:90:37:63:21:8b:5c:12:63:e2:89:
                    b3:2d:52:b4:7c:e7:73:ec:d2:02:f3:0f:c8:22:cd:
                    70:aa:ba:94:3c:54:98:3b:c1:62:f5:4f:fe:ac:67:
                    9d:a9:bf:14:ea:1d:d1:ff:52:76:84:8b:0e:0a:41:
                    48:4a:28:6a:57:ba:bb:53:2c:d9:ca:48:df:fe:15:
                    9c:59:d7:8b:d7:02:ae:fd:30:7b:1f:ea:ba:7e:b5:
                    05:19:b8:23:cb:d5:98:d3:33:24:d8:6c:91:dc:e8:
                    f7:5f:55:e6:8f:9d:68:49:04:d3:2f:9a:db:7a:a9:
                    63:23:0c:0d:ff:ec:05:de:08:9d:12:63:1f:e5:00:
                    92:74:b2:42:7b:4a:3d:50:ab:91:34:36:49:89:1c:
                    b0:07:8e:0a:80:f2:29:5c:89:48:4a:45:03:99:db:
                    98:76:fe:aa:f4:d0:b6:90:c1:bd:b4:6b:d4:8f:d1:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:38:86:36:8B:E4:9C:E8:B8:28:D6:64:8C:F5:5B:E1:CF:7E:F9
            X509v3 Authority Key Identifier:
                keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:99:31:97:bb:8d:61:67:be:59:08:c7:44:56:22:25:50:
         ac:f1:25:21:af:09:ba:f0:e6:96:68:af:c6:92:92:fd:2e:36:
         5d:f9:a1:d9:a3:6a:b1:cd:9a:63:11:3d:d1:16:32:87:f1:23:
         01:a8:48:ce:9f:b1:78:f6:5b:7b:5e:db:d8:d6:22:b8:99:a1:
         40:85:34:15:2f:db:9f:ba:e7:aa:dd:04:1b:1b:05:1a:7a:a7:
         03:ea:29:0d:d4:10:08:37:29:b8:23:37:2d:bf:78:75:ba:a3:
         90:50:a5:b1:17:c6:51:a9:43:9d:17:29:dd:03:6a:90:fa:49:
         07:d8:e1:c4:db:b2:f8:50:12:fc:f0:04:07:66:36:eb:15:5d:
         63:b2:0e:0a:3c:07:3c:7a:ad:90:d2:be:42:65:21:aa:75:b8:
         47:06:f9:30:a3:17:4f:09:d8:e4:89:ae:6d:96:aa:30:8a:77:
         bb:a2:8b:b4:da:08:55:e1:89:9a:7d:4d:87:7f:98:3a:34:00:
         3e:86:70:89:d6:b6:06:5f:df:d9:6b:dc:56:25:ff:d2:c4:6e:
         a8:bb:d9:a7:c8:b0:4e:ef:a6:78:5c:a3:5d:eb:6c:98:c4:7a:
         8f:ee:06:24:13:3d:7b:0f:1c:f4:1f:b5:72:16:af:51:ec:47:
         6d:56:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:37 2024 by rpki-client on console-fra.rpki-client.org