Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          1yROopgbcg7R8gFWOIkvLMly1Fwe9jHrgSfhJe7Vieo=
Subject key identifier:   73:04:DE:98:4B:89:38:6C:93:83:4C:A5:73:43:CB:DD:C6:D4:E3:87
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       018F3C9CD501D13842ED48EA67469DB740DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          0B9E
Signing time:             Fri 03 May 2024 04:01:02 +0000
Manifest this update:     Fri 03 May 2024 04:01:02 +0000
Manifest next update:     Sat 04 May 2024 04:01:02 +0000
Files and hashes:         1: 5avQS7V5KoFK9wPCZWf1mKbef0o.roa (hash: CWVr1CMjh4VQHe4otjBIpGvVv9NFPYi8ufRKDrz+0Fs=)
                          2: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: YiK58tuWGLGJHEgr7VIr9D4jwKIv/kzZr+TPl24zpf8=)
                          3: ceiv-yK55ZBJpENanL2We7fh9_M.roa (hash: nVK/YlSOgIbuKJOXQFhzscgKoFi9ctEllt27LahjPn4=)
                          4: oo5ltmmV0uIm2wKAh-MFKzDWTu4.roa (hash: tGCrhFAx/wL1WaSFFfjkD5ckM1COwn4coGsbqac1n9o=)
                          5: wNk9_cabnJrFiVfxAdp3CA07Vfc.roa (hash: QtQ843WGPzheI4idwDRpo8mguDKwMaPlhOA7uHzrmNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9c:d5:01:d1:38:42:ed:48:ea:67:46:9d:b7:40:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: May  3 04:01:02 2024 GMT
            Not After : May  4 04:01:02 2024 GMT
        Subject: CN=7304de984b89386c93834ca57343cbddc6d4e387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:c2:cb:62:29:3d:29:cc:62:e9:8a:0f:c4:
                    f6:0e:12:dc:a9:a8:3f:aa:d7:7b:ee:72:b9:e6:7b:
                    0a:98:42:1f:8e:4a:74:a0:0e:db:8e:25:f3:c6:b0:
                    83:bb:70:02:3a:71:9c:77:23:c1:bf:fb:00:49:ce:
                    f7:65:19:11:1f:7e:ab:26:ee:55:7e:56:bc:ff:73:
                    50:41:6c:e0:99:62:f7:f5:51:3f:a6:52:3f:3e:3f:
                    0b:71:18:c3:fe:70:69:d8:6f:d3:5e:ca:58:c9:33:
                    51:04:22:b3:01:8f:ba:0a:bd:2f:eb:ec:b8:bf:3d:
                    ed:56:bf:9e:cc:92:9c:76:bf:5e:b5:7a:d9:5e:af:
                    b3:f1:cd:81:dd:e7:31:9c:49:1a:aa:09:9d:a8:60:
                    7c:9a:76:b2:c4:21:7c:fc:51:06:c2:0a:80:fe:78:
                    cf:bd:7b:6e:85:de:ff:07:7d:a3:e7:b6:89:c6:ce:
                    36:2b:f6:a3:02:40:93:fa:22:03:5e:d2:d0:80:42:
                    9a:3f:3a:7d:a8:21:3e:25:0b:78:fa:ea:ff:9c:a2:
                    6d:af:c3:9c:0f:16:b4:d9:28:a4:5a:d4:5b:76:fb:
                    08:c9:58:0e:2d:70:54:f1:4b:b0:c6:55:4b:2f:84:
                    9f:d8:40:5d:e7:0e:45:1d:e9:0a:cf:f8:3a:72:f7:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:DE:98:4B:89:38:6C:93:83:4C:A5:73:43:CB:DD:C6:D4:E3:87
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5a:ab:17:59:48:13:10:0e:d3:5f:aa:97:c3:7c:e9:89:71:
         5e:0f:c8:0e:c0:5f:4f:40:32:f4:96:34:b8:27:04:4d:68:75:
         47:27:47:b0:3a:a9:9a:4e:fc:d2:fa:9c:3f:d4:74:10:ff:69:
         db:69:4a:92:f6:6a:32:1b:87:21:d0:3c:0e:da:96:71:6f:9d:
         86:b0:da:12:20:3a:c4:f4:49:7a:4a:52:03:61:e0:02:11:3b:
         f1:be:f7:26:dc:be:ca:6d:a6:c1:53:34:58:6c:79:94:c7:5a:
         34:9f:85:f1:94:b5:86:31:36:27:e1:75:69:fa:7a:10:af:27:
         3f:fd:61:7a:1e:7c:6b:0d:ad:14:35:93:64:0d:f6:8f:90:42:
         e1:d0:9a:8a:7a:09:1a:2b:97:7e:db:82:6a:59:ed:ad:61:9c:
         df:ec:7e:c2:26:dc:21:6e:ba:e8:90:c9:6b:a9:b9:d8:8b:03:
         da:28:4b:32:64:a9:d8:34:22:d4:ad:44:c2:1b:bd:27:34:3d:
         e4:12:db:02:f2:93:b3:c4:a0:68:26:c7:05:17:76:ef:fd:b0:
         91:7c:7b:c9:85:35:14:44:50:5d:05:f8:6b:22:5b:48:02:cc:
         71:c1:40:24:5b:aa:a2:75:c7:07:5e:69:ab:1c:a5:b3:16:f6:
         04:d4:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:33:58 2024 by rpki-client on console-ams.rpki-client.org