Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File:                     bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier:          n3M3MIA7TFj3h5z3c19ok6ZM338o7e/Ycy6EDkdwJlo=
Subject key identifier:   3F:30:5D:D9:54:E0:6D:80:AB:D3:2B:C5:C5:B3:52:60:3C:8D:E1:47
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer:       /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial:       018F96BD41734DEF424C1594D33051A7C9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number:          118E
Signing time:             Mon 20 May 2024 16:02:16 +0000
Manifest this update:     Mon 20 May 2024 16:02:16 +0000
Manifest next update:     Tue 21 May 2024 16:02:16 +0000
Files and hashes:         1: 9mtWCsLgsWaCBYa0jR-8WmDyQs8.roa (hash: h6DWd4PjHd3e4v+1cmZPHnQ+KlDFvMv2Og49iyBYvI4=)
                          2: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: jg7wAQcHLLhYqPbCR/fIiQsjpxV575R6+bvyNPNSi8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:41:73:4d:ef:42:4c:15:94:d3:30:51:a7:c9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
        Validity
            Not Before: May 20 16:02:16 2024 GMT
            Not After : May 21 16:02:16 2024 GMT
        Subject: CN=3f305dd954e06d80abd32bc5c5b352603c8de147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:4c:29:d2:bc:16:9a:97:1c:8b:58:a2:1b:
                    7f:b9:5f:73:87:e9:de:53:5a:c3:df:9d:87:70:be:
                    7a:81:20:62:25:52:03:c5:dc:fb:1b:bf:51:41:8a:
                    bb:e6:ab:f7:db:aa:63:d0:0f:ba:77:6a:0f:91:5f:
                    7b:ca:22:fe:17:3f:dd:13:b0:c9:8f:1d:13:d3:27:
                    89:ea:5f:cc:b0:63:6c:11:c8:c1:a1:f0:16:d9:8c:
                    69:83:a9:e1:83:76:3d:56:d2:bc:18:76:9a:19:96:
                    b6:8e:79:a1:29:03:88:f8:28:c7:9b:b2:d9:4c:f4:
                    86:2c:bf:f9:1c:c7:13:95:1e:02:05:8d:0e:fe:a6:
                    20:b3:db:75:4c:d8:20:bf:12:9b:ea:23:d0:d0:c7:
                    45:8b:9f:c9:62:43:f4:74:05:9e:8e:c3:be:81:53:
                    90:1d:61:da:ad:ac:8e:23:a7:3f:d4:f2:49:db:d5:
                    16:fc:2a:14:f4:70:00:e9:c3:d4:39:6d:66:a9:dc:
                    33:91:be:73:80:f5:13:32:28:f0:9f:9c:99:dd:d7:
                    e1:41:f5:2e:fe:7a:a2:c0:65:49:21:34:5d:48:28:
                    2b:9b:92:ee:a9:54:3d:c5:71:67:9b:ef:5f:91:9b:
                    51:e8:56:11:9a:26:aa:6e:15:87:31:7b:03:2d:fe:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:5D:D9:54:E0:6D:80:AB:D3:2B:C5:C5:B3:52:60:3C:8D:E1:47
            X509v3 Authority Key Identifier:
                keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:c0:c5:17:3a:72:d8:67:7c:cf:10:18:b4:bf:11:53:81:
         bd:a0:f9:e7:f6:84:a4:37:05:7d:45:21:85:d9:f7:fb:82:1a:
         82:0b:be:2d:12:3f:67:b1:f1:d5:3f:1d:51:42:f7:58:d4:3d:
         e4:03:3d:ad:95:75:ef:bb:f7:06:96:ce:6e:16:80:83:12:5a:
         78:3d:6a:f9:8b:9c:d4:d9:7d:5e:64:fb:1d:b8:c9:80:b6:1a:
         b6:37:01:a0:53:2e:91:78:42:c7:1d:4e:29:11:ea:1e:96:bc:
         f2:33:4a:c7:0e:39:59:e8:ca:0f:52:1d:ae:32:e9:c7:2e:b4:
         c5:b5:98:db:c1:bb:6d:fa:da:ba:01:a5:42:b6:45:92:9c:0e:
         2e:cc:fe:61:d7:9f:1c:b6:88:fd:54:f1:db:a9:e5:1f:1d:ef:
         b4:6c:60:da:6c:3f:a3:d8:ad:5b:f0:d2:61:83:ff:68:f3:44:
         0d:b0:de:16:c8:79:4f:24:8f:78:0c:30:a1:59:35:b1:90:4b:
         e3:9b:30:9e:3c:c8:47:b1:de:d4:c7:b4:ce:f6:b0:60:0d:12:
         4f:45:b3:3e:62:b7:51:4c:11:27:71:93:a0:9f:ee:77:ef:28:
         57:3b:ec:13:e6:8d:94:ee:07:2e:7f:98:10:3c:b3:0d:41:2d:
         b4:c3:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:44:09 2024 by rpki-client on console-ams.rpki-client.org