Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File:                     gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier:          qE2emLlyyXJzhx4+JxW00zYOCIAdX/SvPvM2BhiNnuI=
Subject key identifier:   7E:5C:0A:41:AC:53:74:D9:AC:87:0D:2C:A6:7F:66:29:21:E7:0C:11
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer:       /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial:       018F8E265AC4796EBC8061DD85ED8D67B2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number:          0BB9
Signing time:             Sun 19 May 2024 00:00:29 +0000
Manifest this update:     Sun 19 May 2024 00:00:29 +0000
Manifest next update:     Mon 20 May 2024 00:00:29 +0000
Files and hashes:         1: RG5ExuxEx_tOLs2Y6ZI8FuJWDgo.roa (hash: FRnmqq/jUkLdKdJneUJA81f0dQxUZXC/tMsEfBXr1I4=)
                          2: VVeQWeSDBWQzL3U0Pc0_yvKHzTk.roa (hash: 8Y5aRw1MYEEZvvPT7gswWRqRjZPZjCYgvxsW8jFSAaA=)
                          3: YpYXSsHz-IOhLpwBw1zNhPLvKsg.roa (hash: C1YW5NMW3MT2ttA3epFcu6MtwH402XpVWDeJnPuMAJQ=)
                          4: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: 86nmXEQvQYfojzTOU78JQyhPGsAvu9ave3w8u6LGOSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:5a:c4:79:6e:bc:80:61:dd:85:ed:8d:67:b2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
        Validity
            Not Before: May 19 00:00:29 2024 GMT
            Not After : May 20 00:00:29 2024 GMT
        Subject: CN=7e5c0a41ac5374d9ac870d2ca67f662921e70c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:6a:1b:01:21:1c:93:5c:33:b8:3b:72:2d:
                    25:cd:48:fd:4e:83:83:b7:f8:ef:b9:e7:18:df:36:
                    1d:ab:d0:4e:72:d9:f5:73:4a:8b:82:5d:d2:40:9f:
                    04:37:8f:18:88:b6:3e:a8:a6:59:ea:f6:4e:50:de:
                    b6:db:2f:d8:48:8a:db:52:4d:0a:64:ec:a1:bd:16:
                    e1:8e:0f:32:2c:82:2b:8e:ed:4a:d1:e5:3c:dd:26:
                    ca:97:da:a4:f8:13:f5:8c:85:9d:50:4e:55:fe:d1:
                    77:7a:da:c3:3b:a7:ee:5d:cf:6c:64:3e:56:f2:ae:
                    24:fd:2b:2a:72:68:2c:cc:36:79:2b:e5:3b:66:ed:
                    fa:bd:ee:f9:40:4e:1a:8d:3e:a5:b6:82:2d:3d:16:
                    25:6b:71:33:31:3e:f5:74:95:6a:3d:52:a1:8f:eb:
                    45:97:6f:56:01:b0:0d:90:11:95:95:6c:1b:42:18:
                    13:f5:85:03:5e:0e:36:35:65:a6:48:6b:eb:7a:48:
                    a9:b0:be:4f:35:db:9f:a4:8d:fe:c8:8a:05:1c:7e:
                    2e:2d:fc:a4:74:37:1e:30:39:cd:92:b1:2f:3e:b8:
                    24:11:1e:d8:66:e3:fd:6e:00:fd:87:fa:7a:b8:d7:
                    06:2e:e5:13:91:04:19:83:2a:ad:1a:7e:7f:9f:23:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:0A:41:AC:53:74:D9:AC:87:0D:2C:A6:7F:66:29:21:E7:0C:11
            X509v3 Authority Key Identifier:
                keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:a2:87:ab:ed:9a:b5:82:e4:d2:5d:7e:7c:3a:67:51:e4:
         7b:5f:3c:4e:3c:ba:82:da:2a:ee:9c:73:b9:06:e2:74:99:b5:
         03:5b:70:7e:57:58:10:5e:72:e3:e2:cb:0b:56:32:42:75:20:
         98:6d:d8:f5:7d:88:12:e9:e9:af:e3:05:62:30:32:fe:d4:3e:
         44:09:78:d7:5b:41:d2:7f:ad:af:7b:c7:7b:0a:f4:08:3d:0b:
         66:1c:f8:42:e3:81:94:e5:c5:b5:c3:b5:da:c5:69:40:63:1b:
         9a:8d:02:35:22:51:48:96:a8:bf:03:50:e0:3e:c3:f1:92:27:
         0c:b4:b4:1d:a6:13:80:14:34:72:b3:38:70:50:f9:d7:eb:31:
         16:ae:74:58:e4:63:0f:8f:a0:63:cd:52:9e:b8:01:94:f5:3a:
         d8:11:50:e9:05:0a:e6:a8:73:58:95:96:15:95:54:45:01:6f:
         42:4c:dd:d8:fa:ce:b1:44:d9:b0:e7:96:d2:49:c4:14:30:5f:
         46:ef:0a:5a:8a:9d:78:a7:ca:56:84:0e:9d:2e:d7:df:bd:ba:
         b9:f4:5d:47:ec:5b:79:a2:f2:8c:a4:70:5d:09:0b:ba:06:b5:
         a7:ee:37:7f:a9:12:fd:84:8c:fa:31:93:09:b3:a8:cb:92:07:
         3e:44:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:05:33 2024 by rpki-client on console-fra.rpki-client.org