Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          Vhrwy0C3yxoHMSbgQOP9FrMJPjzD6yMMxsPIXJ8Nz/A=
Subject key identifier:   41:C1:2B:C1:82:BA:B2:A4:67:CD:E9:8D:6E:D5:10:FE:C6:C4:34:0D
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       018F88249BEFEEB62EFEB75600B7D316C701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          04D2
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: hjBQjSjNlyE2NslsrT6MQftQsZw.roa (hash: K4kc1KSO3bLSGhh6XpmyhIIlmUgGLCsVXeNj6/tU9ak=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: gKmZOZSnJSXeiy6dtEgKBHtETY8r5UicBvLX/U0IYwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9b:ef:ee:b6:2e:fe:b7:56:00:b7:d3:16:c7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=41c12bc182bab2a467cde98d6ed510fec6c4340d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:8e:95:d0:bb:aa:18:f5:b3:cb:55:07:91:
                    cb:9a:27:0b:ff:93:12:4a:94:4a:5d:7e:bc:37:b7:
                    f9:f7:7c:38:d2:3d:6a:bc:41:87:57:9c:23:72:4b:
                    50:75:40:19:31:26:93:6f:7d:f2:c3:31:21:b6:20:
                    c4:d5:7b:96:62:54:6f:1f:ac:e5:1a:09:a7:73:f2:
                    c1:e3:62:8f:dc:59:b7:1c:cc:bc:f4:a4:82:3f:9e:
                    9e:2d:15:03:8f:42:bf:22:59:a8:6c:ce:4c:43:08:
                    e9:77:5e:61:c7:79:77:30:c2:cf:d6:92:48:07:d8:
                    e2:de:0d:fb:86:42:ea:58:da:c0:a4:93:bf:b2:eb:
                    af:3a:17:9d:04:5d:bc:fb:ca:01:56:0f:e1:30:30:
                    66:58:5b:82:33:d9:c6:15:f7:21:da:d1:fa:96:af:
                    7d:c1:40:61:86:0f:7a:ba:41:79:ec:a8:d1:76:37:
                    3e:dc:05:00:dc:f4:9d:ef:12:d4:e8:7e:c8:3a:79:
                    ed:e4:cb:dc:f2:fe:38:39:21:4d:fe:4e:b3:71:9d:
                    77:fe:2d:8f:98:6d:50:75:1d:b6:55:99:c0:9a:c4:
                    be:30:83:20:34:4c:54:50:22:52:11:b8:ac:2e:60:
                    ec:eb:3d:cd:24:c9:c0:8c:70:60:18:4f:10:21:88:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:2B:C1:82:BA:B2:A4:67:CD:E9:8D:6E:D5:10:FE:C6:C4:34:0D
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:2c:20:a3:50:cb:85:d0:d2:1b:7a:90:db:b2:b1:c7:c2:
         9a:fb:b8:00:f0:38:6b:4c:6b:1a:19:1e:2f:99:f8:c2:96:33:
         8d:90:52:9a:25:42:f2:5d:b2:50:76:75:9a:1f:a1:d8:b4:b2:
         0b:8b:22:6e:34:73:a0:88:bb:e7:68:82:ca:80:3d:ab:67:82:
         4e:3d:fb:5f:20:1c:dc:8e:c1:1b:b6:e9:1a:9b:46:2f:75:c9:
         80:11:06:8d:4e:b5:c0:d7:8b:94:3d:97:d8:4c:79:a4:42:3d:
         f6:11:c5:e0:3e:60:21:8c:0d:38:33:09:66:df:98:4b:0e:12:
         84:a5:ff:0f:58:cb:ce:bb:1d:c4:f0:23:9f:5d:cd:4c:16:d9:
         d1:85:2a:7a:31:e4:af:24:23:5e:36:b1:d5:23:38:b3:fa:86:
         d4:28:90:73:06:eb:c9:b9:7e:c0:c3:cb:b9:0f:e6:9b:fe:db:
         b8:82:0c:5c:99:00:dd:14:18:17:4d:a2:71:f9:bc:c0:32:0d:
         2d:2c:67:3f:32:a4:c1:55:c7:3a:dc:fc:f0:fe:4d:53:74:7c:
         f6:83:89:cc:4e:b1:4c:3b:e0:3d:11:6b:d9:7f:47:29:7d:06:
         d3:8f:a2:2d:af:b9:5c:af:3f:26:d4:75:7f:8a:b9:8b:23:19:
         76:cc:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:51 2024 by rpki-client on console-fra.rpki-client.org