Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File:                     zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier:          fGqpHu+MRuzph9hry/lKN/Lj5hGsa/WaT/yMmvokWxM=
Subject key identifier:   F1:C7:13:A0:19:97:F7:3E:49:86:A0:FA:38:1D:39:78:F4:6C:CE:C0
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer:       /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial:       018F8410CF09CA92AA944A53865BC0CED8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number:          01AD
Signing time:             Fri 17 May 2024 01:00:44 +0000
Manifest this update:     Fri 17 May 2024 01:00:44 +0000
Manifest next update:     Sat 18 May 2024 01:00:44 +0000
Files and hashes:         1: 4_HFlOqEQKj6veTYcwIAYMOjX90.roa (hash: 8nF9aNm7lMFqr7lEzzZagLqb+ZARittpALy3nAGg4w4=)
                          2: JitYuErrPrk5beI31a-vKbg9zGE.roa (hash: BrvYeRSwn5rRhuPTwElKClOqsvlKn9m77jKN4qLnHd4=)
                          3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: THMxK5CNm7YdnCFoo7teWZWMm+MEotyOlb/VpXUBOT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:cf:09:ca:92:aa:94:4a:53:86:5b:c0:ce:d8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
        Validity
            Not Before: May 17 01:00:44 2024 GMT
            Not After : May 18 01:00:44 2024 GMT
        Subject: CN=f1c713a01997f73e4986a0fa381d3978f46ccec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:33:38:45:87:ca:4e:eb:9e:20:07:22:39:
                    d7:43:ca:2f:4c:ef:d1:d2:6e:f0:a6:4a:9d:b3:1e:
                    59:bd:a2:58:27:9b:a7:c4:f4:70:86:3f:f0:2d:3b:
                    f3:4e:13:a5:72:f2:87:20:6b:42:c6:88:29:1f:86:
                    e0:84:3f:68:50:7d:f9:a9:ca:19:79:14:40:f8:d2:
                    63:e4:2f:d4:60:a0:ad:96:e5:d6:1d:73:c5:9e:06:
                    17:1f:79:63:17:48:ce:fd:fa:fc:31:c3:7d:a3:06:
                    c1:79:46:9c:aa:af:45:c6:56:c5:ec:76:45:d8:72:
                    4d:2b:34:45:63:d6:68:9c:ba:4d:a3:19:63:5c:60:
                    c5:24:60:73:85:80:e9:9d:30:f2:3b:9c:ce:c0:bc:
                    f0:70:44:53:1d:5e:20:ec:0f:7c:94:42:89:f2:56:
                    37:66:8c:0c:86:a3:ec:23:42:e0:64:18:a5:a2:f8:
                    68:fe:74:43:4c:50:a3:90:9d:64:3e:a8:80:3f:0a:
                    02:35:68:f7:76:bd:35:ac:e2:59:57:2f:97:7d:79:
                    74:21:2e:a2:de:62:eb:39:41:db:5c:13:27:07:db:
                    e4:b5:27:e3:54:12:f0:33:7f:a8:04:5a:eb:5e:b1:
                    12:6b:70:78:cf:39:fc:84:7e:66:37:df:98:c4:2e:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C7:13:A0:19:97:F7:3E:49:86:A0:FA:38:1D:39:78:F4:6C:CE:C0
            X509v3 Authority Key Identifier:
                keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:f6:8e:c9:29:a8:ee:88:90:41:36:72:53:51:b2:c8:25:
         bc:95:8f:8d:54:94:f7:50:00:21:25:09:d5:54:78:d0:b0:a1:
         c0:dc:9f:54:56:59:d5:4a:0b:18:64:91:54:1f:cf:a4:a0:9f:
         dd:63:ec:47:cf:39:11:fd:f6:91:14:cd:80:75:1c:9f:e8:b0:
         3b:8b:22:14:a2:0c:fd:e5:12:96:d7:26:69:79:fd:8b:1e:df:
         9c:c6:a0:2a:dd:56:85:27:89:61:72:e9:c7:2c:5d:4d:07:fa:
         21:e9:9a:b9:61:f0:8c:c6:3d:c9:27:b7:70:bb:3d:5a:f8:64:
         60:fc:41:13:40:3a:e7:59:52:84:ee:25:fe:5a:3d:de:52:7c:
         da:47:54:ac:64:0f:d0:af:a5:9b:dc:e8:78:61:4a:52:34:66:
         1c:21:12:e7:5e:e1:5b:73:4d:15:4e:60:d7:5d:53:b2:a4:f3:
         2d:2a:a3:20:59:bc:77:b3:12:af:f6:10:38:f5:cd:c4:d5:80:
         2c:d6:1a:93:48:82:9d:c7:cb:49:5e:75:27:21:41:ba:f5:8a:
         65:91:14:13:8c:ee:ed:73:2f:bc:28:5a:72:7d:29:fe:c8:f7:
         05:32:0c:f5:52:dc:f0:1c:4e:bd:bb:fb:af:29:ed:32:d4:07:
         09:f8:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:12:22 2024 by rpki-client on console-ams.rpki-client.org