Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          3Xn6DWU9CfGN5giWClrAqQ+M3mBRsgutWtfFIjESRlI=
Subject key identifier:   28:39:F2:2B:FC:50:3C:3F:38:56:73:53:C1:DC:8B:B5:8E:C6:DD:A3
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       018F4C7E225E5C17BF0D6A1A6D6A024A7938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 06:01:25 +0000
Manifest this update:     Mon 06 May 2024 06:01:25 +0000
Manifest next update:     Tue 07 May 2024 06:01:25 +0000
Files and hashes:         1: 0pLjt_iGUwCy8lUMaCxayungHX0.roa (hash: iM0m4tIeBHJdvQkFR49m8a9ab5wm/IP7Ptbht7zfuzg=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: kTAK33AcKsvNp1dEhiFA6MF81urGj2pWdrbQUXhpbjA=)
                          3: NODr96TvuCcJqZWPS4HJSQXTy0g.roa (hash: lIdqWDAbvbQqXdp6OEMAtYVb/8XHSZUDKB8kO1lDgKw=)
                          4: YoiPJV6CzqYWvs6KOyKW24dpnaA.roa (hash: mupBGT0/dWEcWKL6lX1DGq82PAP0H6WwufZO3z3yHD0=)
                          5: nl5AOfRkEF4PyUiU0YmlWWnjzjk.roa (hash: tNhQHspfLzXLniS8HQyZg52UMJsZCDpT8WYm1zGE1xU=)
                          6: rdGBxshekYdJ94UJZZAOQKvYZmQ.roa (hash: LN5dmtQ+xMFR9NxLEpnZouuxPUwrPbzIMD0cmxVCLwo=)
                          7: tfuwWUjlWn7cD7cH36ICzrXnkCk.roa (hash: vQQ5R5UkXvK3ki8gCd2Anp3Xe4FXhnqFSTdYvtaDHCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7e:22:5e:5c:17:bf:0d:6a:1a:6d:6a:02:4a:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: May  6 06:01:25 2024 GMT
            Not After : May  7 06:01:25 2024 GMT
        Subject: CN=2839f22bfc503c3f38567353c1dc8bb58ec6dda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:db:f2:ec:40:8c:90:03:e6:55:48:a7:76:
                    5f:29:e0:5e:eb:44:65:d4:00:94:63:a5:44:48:3c:
                    c7:5d:58:86:1c:a4:34:de:df:91:90:d6:c5:aa:67:
                    b4:b8:f5:3d:23:2e:48:41:90:f0:3e:03:95:3f:fc:
                    d0:38:9b:6d:e6:74:68:83:95:98:91:73:e1:df:f1:
                    c7:cc:19:3e:57:df:30:3f:d6:1d:e7:24:3c:ae:44:
                    18:ca:10:83:0b:47:b1:6a:16:0f:38:59:e1:c9:d5:
                    5c:bc:25:84:13:1f:ac:fd:ec:d5:87:ea:61:3e:a5:
                    7f:55:66:dd:70:a5:ad:c5:94:03:82:38:b4:9b:bb:
                    b1:06:d8:c9:13:aa:72:5f:f7:ca:a1:22:ad:34:78:
                    d6:6b:db:4b:07:00:e0:82:13:9b:25:53:02:24:ee:
                    93:29:33:4d:5d:de:7d:ce:9f:24:a5:25:7a:27:45:
                    b2:8c:4b:c5:08:e1:46:12:1b:80:af:a9:fa:b2:4d:
                    bc:ad:93:4d:a6:99:b9:a3:0a:29:9f:29:65:e5:f7:
                    11:52:be:33:b8:d1:48:8c:21:e3:46:00:b1:7b:0a:
                    a9:01:02:40:b1:e6:ca:c5:ad:14:4a:c8:16:e6:12:
                    0d:3a:4c:51:f3:b0:a9:1f:3b:70:16:e4:41:95:58:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:39:F2:2B:FC:50:3C:3F:38:56:73:53:C1:DC:8B:B5:8E:C6:DD:A3
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:54:cc:7c:5e:30:5d:fb:51:be:57:9d:cb:c7:eb:62:fc:36:
         74:04:c8:e2:07:db:6b:d5:1f:ce:f3:91:ff:78:f3:74:2b:64:
         1f:84:01:fb:04:0f:46:00:c5:42:04:bd:87:a1:e8:a8:a5:0e:
         8a:fe:be:8a:f7:69:53:66:f6:08:16:d2:4a:86:a0:d8:51:20:
         bc:7f:c7:52:44:1c:4a:d9:f7:04:0c:7e:c4:9e:d9:10:c4:d6:
         5d:55:62:ec:ed:3c:47:70:b2:e5:17:06:79:0e:5d:a9:4e:b3:
         f2:5e:72:96:ba:33:d6:d5:e9:b0:0b:bd:8f:b8:f2:4e:ba:32:
         cc:53:fc:4a:ef:5e:92:6e:03:01:88:75:20:2d:cc:7b:95:63:
         db:1c:c8:8a:69:55:66:d6:e7:05:73:21:24:cc:41:62:12:d6:
         ba:20:31:52:9e:a2:bf:f3:b1:4c:a4:33:93:45:34:39:2a:0e:
         be:8a:14:c9:41:a8:23:c1:91:47:75:c9:b6:b2:c6:b6:a4:46:
         f6:82:ed:cc:32:49:55:b8:2b:9b:0a:5b:14:29:9f:ae:7a:6b:
         e6:6f:20:53:c4:78:f3:95:1a:2c:de:b8:f7:d3:74:0c:51:58:
         ce:c0:5f:91:54:88:27:a6:81:0b:16:90:53:c4:42:d3:e2:14:
         17:ee:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:03:52 2024 by rpki-client on console-ams.rpki-client.org