Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          5qWI0e1ql2/uXH3EwbNzL5cRC7CnayVXahxxi+0gzpg=
Subject key identifier:   6D:6E:ED:25:0F:6B:89:97:17:15:FF:3C:FB:84:C8:AE:F7:62:40:2C
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       018F8892524EE35F5F078E3AE3BA68028EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          D8
Signing time:             Fri 17 May 2024 22:00:41 +0000
Manifest this update:     Fri 17 May 2024 22:00:41 +0000
Manifest next update:     Sat 18 May 2024 22:00:41 +0000
Files and hashes:         1: 2d34_feJs6CzpEUIbB1vrARfrwU.roa (hash: aqCOrnqqASOJ0g2pFHny+QB4cljsyD/QJY7CSQ+/N1A=)
                          2: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: w0UxkoKh0OjL1bw2vLdPMYOaVkJRLFkZhAenpgpVh1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:52:4e:e3:5f:5f:07:8e:3a:e3:ba:68:02:8e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: May 17 22:00:41 2024 GMT
            Not After : May 18 22:00:41 2024 GMT
        Subject: CN=6d6eed250f6b89971715ff3cfb84c8aef762402c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:93:4e:66:1f:97:7e:b6:b8:8e:8e:96:e1:
                    fc:57:2d:71:58:cd:1f:a8:67:c6:94:4f:a8:cd:2b:
                    7c:18:ae:73:62:90:7a:77:38:4d:60:ec:9b:64:c3:
                    53:78:6d:b7:f8:07:37:ba:cf:37:93:d6:d7:25:17:
                    13:40:d9:26:ce:c4:2b:b5:e0:37:cf:69:12:8a:8b:
                    7b:f4:22:70:6c:6c:7e:b8:58:8b:94:f1:0f:18:57:
                    d0:ae:55:b2:fe:27:0f:22:18:9c:c3:25:79:e6:1d:
                    5c:e8:3a:0d:bb:46:96:26:25:89:61:e4:3e:d5:76:
                    22:b0:61:ac:76:62:71:92:6b:3d:28:e9:57:f0:97:
                    03:57:24:1f:c5:eb:35:87:e7:3c:ad:6c:02:65:9d:
                    fe:8d:c4:87:a5:2f:a6:7e:8f:16:1a:b4:76:8f:74:
                    96:76:75:a0:3c:8d:5b:1b:a1:80:9b:4b:86:e7:96:
                    29:84:9c:a1:e9:35:c2:34:84:de:31:30:62:4f:da:
                    ed:98:1c:5b:af:58:c3:08:15:4f:d0:17:4f:88:ac:
                    84:e2:03:ef:b2:79:49:7f:2c:c6:a4:d9:cb:56:d5:
                    f6:2a:99:13:67:2a:e0:bb:36:de:de:cd:09:b3:85:
                    84:b2:86:39:ea:e1:c3:a9:15:82:a1:38:6c:4d:79:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:ED:25:0F:6B:89:97:17:15:FF:3C:FB:84:C8:AE:F7:62:40:2C
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:62:6e:c1:48:a3:4b:ac:14:ea:1f:29:50:46:68:a2:0b:
         9e:d1:1d:f5:9f:d8:c9:db:fe:e9:d1:e4:05:a5:b6:4e:7f:cd:
         70:86:7d:a1:95:b6:44:6d:f7:fa:db:73:93:ed:c3:06:ac:6a:
         02:af:93:b0:a6:63:86:95:e2:c9:a7:41:32:0b:b4:4b:8f:c6:
         87:8f:26:b4:47:af:ab:25:d7:e2:c6:fc:f0:76:25:39:cd:3a:
         e6:51:d9:a8:ed:ff:cf:30:c7:8a:72:19:6c:29:68:44:b7:ba:
         08:fb:83:12:49:a6:51:90:de:1d:e3:84:21:f7:0b:bc:4e:09:
         93:af:6c:f3:a7:a4:0e:13:cf:fd:f6:2d:fd:69:73:a6:a9:16:
         ab:7e:41:2f:11:60:4e:3c:2a:18:07:43:e8:38:a4:ca:c0:78:
         40:93:40:c5:7c:08:f2:4f:91:c0:7c:c7:e0:c6:c9:d2:05:1f:
         b9:f5:f2:4d:ec:ec:8c:af:7c:e8:d2:39:ba:e7:34:4d:77:bf:
         98:53:aa:3d:34:d3:b2:8f:a4:67:1b:b4:2a:da:f8:5c:f4:85:
         0f:cf:2a:48:54:7d:62:7f:c0:e4:1c:f7:c1:e9:ab:c1:c8:fb:
         a3:51:d4:6f:95:ff:61:54:14:c2:9c:9a:20:9a:d7:9b:2b:1b:
         28:55:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:04 2024 by rpki-client on console-ams.rpki-client.org