Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          VStSMNTzJOsX0DGoNzVhs8jlMVBBxhAYGymwQ1/G2nQ=
Subject key identifier:   5C:1B:5D:C5:5B:CF:03:6C:34:17:46:10:7D:A9:C9:43:76:DF:28:25
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       018F885B58E38358EEA6FBD40181BFA94141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: 0fghH1pnzo5TiEDr7u-2goYMMQs.roa (hash: NUy+a/UukpjCxrS8cKHIvfTMqDzyRlXc+zX6qRPwpl0=)
                          2: CRdMefau0Nzu03sXlCDAB5bHx2Q.roa (hash: yFhrAFAjriusSaX/EOrL/UB0PH+f//igLfyCzFCObsQ=)
                          3: VFWgGeYepa6-s5pJkn7SMMPZ6dY.roa (hash: TAFXu4K6YzcSZaCHhj8Hw+qdRdidooRetwSdikCUTPA=)
                          4: bLMSQuhnuWposuaiDw6hVWgOoy4.roa (hash: vCLSvKVK5SeeG6ICkktFeifrhzzEz12lXiEgYVG9tN0=)
                          5: eMMiBMqdgCYlfRvkR7C_5HyOkHQ.roa (hash: 4na3fuOKSWoZqcoqhaTGKlwQIKkdXhL7FH07+kD+KVI=)
                          6: hRc0ddDLe98M1qjCPr6WEBki_JM.roa (hash: Y32Ogwv3R1T1mmDuxcXlv//ase1/LcWP1/EtQFT+qyY=)
                          7: tU7e_uRjj5akzwAaHazoescmYVc.roa (hash: SKK+uAtzFBYq4NSKYYPs7mLlmNz9/CXlCFe+mTuSh6A=)
                          8: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: jzCfB9LriA0r+LhMVlgJ6mP3nOCsUsEq3OPNIxQlnjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:58:e3:83:58:ee:a6:fb:d4:01:81:bf:a9:41:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=5c1b5dc55bcf036c341746107da9c94376df2825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:33:67:f4:d7:c2:01:63:9a:60:4f:21:9a:
                    91:8d:ff:64:18:ee:4c:f5:55:71:09:0e:45:50:2f:
                    2c:15:3a:b3:bd:3f:52:69:5a:e7:76:8b:5e:55:0a:
                    a2:4a:fc:a5:91:cd:b8:c3:c4:1a:15:32:c6:29:d6:
                    a8:c3:93:7d:64:fe:b7:c2:84:90:f9:e9:2b:3b:bc:
                    d6:38:a0:23:25:88:33:0b:e2:d8:ea:ff:c9:36:75:
                    42:7d:6e:f8:9b:46:17:a5:a6:80:ff:aa:f8:2b:6d:
                    c2:bb:34:b8:bb:8a:a3:d2:f8:5f:3e:f3:3e:a1:bd:
                    9f:ad:34:c1:dd:11:4e:5c:a7:36:ca:c0:e0:b2:6e:
                    06:13:06:f3:74:d8:e9:22:a6:df:c1:9e:be:d9:cc:
                    d3:2e:db:dc:e8:31:a8:27:70:4f:3d:9b:10:32:50:
                    49:49:fb:93:eb:cf:83:a8:af:8e:82:34:ca:01:68:
                    f0:75:6c:c9:55:60:6a:19:8f:d4:12:2b:79:0a:24:
                    d2:97:54:40:5a:1d:0c:5f:55:32:8d:c5:de:8e:bf:
                    89:51:5e:4d:1d:06:dc:a5:22:4d:1a:36:52:78:a4:
                    fe:cc:3f:47:c7:d7:8e:06:0f:20:b4:09:1d:05:91:
                    bf:b7:68:0d:d4:5a:43:71:18:24:d3:e7:46:17:f1:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:5D:C5:5B:CF:03:6C:34:17:46:10:7D:A9:C9:43:76:DF:28:25
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:56:bf:0a:f3:11:1d:d7:73:3f:76:d9:94:66:d9:78:66:
         7f:2a:96:30:e1:f4:4f:a0:8f:c8:08:99:11:42:74:ad:26:23:
         d2:a6:24:a6:ab:04:88:e3:c8:a0:bf:83:1c:d4:eb:d8:50:ec:
         eb:71:65:8b:d3:3f:93:e4:ad:83:11:f7:75:96:64:25:90:df:
         b0:70:b0:ce:d8:e9:20:98:45:7a:59:7c:e8:8e:db:6f:f6:72:
         78:8a:ea:fe:10:7b:09:b6:a4:53:54:88:9f:6a:41:53:04:c2:
         34:7f:34:9b:c9:f4:92:ed:6e:43:8c:6d:bd:c8:b0:df:b0:5c:
         b1:2d:07:5a:83:dc:e0:51:db:f5:c0:2e:83:c8:0c:c4:cf:4f:
         23:79:3f:bd:b9:00:f4:62:e7:40:7a:35:5c:60:0a:05:54:58:
         18:38:40:5f:99:f8:38:50:54:5c:8c:bf:50:89:61:a4:16:22:
         c6:78:bf:2e:37:f9:8d:54:2c:41:2c:e6:a3:ad:05:ef:2c:bd:
         d8:d9:e6:56:cb:c5:d9:45:59:0b:5c:82:68:a0:2f:f7:e3:95:
         ce:c3:14:7d:75:3c:bf:d2:a3:06:9e:fa:3f:d9:82:66:38:5b:
         31:31:8b:6c:bd:22:b9:e4:1d:7e:9e:24:b7:2c:b3:a8:1c:33:
         61:1a:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:16:21 2024 by rpki-client on console-ams.rpki-client.org