Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File:                     gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier:          O9i6gUNSygirO2lZieGj7tQMPJfnK+DXjuQpecoI8mc=
Subject key identifier:   31:E6:9B:64:C5:EB:16:7B:A4:4C:E1:DD:04:C4:27:AC:B8:BF:3F:A3
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer:       /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial:       018F874868038552234FBA7BE8BF37DE5C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number:          07CE
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: WkOXk29GIGxV1mXN1SmmMdmARWs.roa (hash: TFHgetHnoc1O/OLhpxzHup39TTrZ7ezRt/JcI0r7+rI=)
                          2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: M46SdGwW9/z0co4YnzQkthXEWlT/X96ndHuKs2INJfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:68:03:85:52:23:4f:ba:7b:e8:bf:37:de:5c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=31e69b64c5eb167ba44ce1dd04c427acb8bf3fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:4a:7a:d4:68:7d:4d:f1:9c:2a:fe:62:aa:
                    7d:2e:e0:97:4d:aa:48:49:99:43:55:80:9d:30:45:
                    25:0b:f1:4b:a8:fe:31:2a:6f:22:bf:43:a8:9f:16:
                    76:ba:b2:e1:49:11:68:59:8e:26:21:4e:0d:31:5b:
                    36:50:fb:5e:0e:ef:37:da:b7:13:32:65:47:18:62:
                    d3:7b:d6:d4:3c:f9:c1:1b:4e:66:11:07:36:7a:51:
                    d7:2f:b7:ce:b0:c8:cc:79:e1:2e:ef:e5:b1:db:d5:
                    5c:bc:fe:0f:f9:c3:03:4e:9b:87:60:83:b7:4b:1f:
                    e5:75:01:71:a5:6e:04:7f:cb:4f:ad:c4:07:02:79:
                    52:aa:6a:ec:ac:93:32:3c:71:57:c0:07:ac:03:8a:
                    2b:5c:04:40:47:a6:06:56:ec:ac:99:a2:4f:9c:41:
                    fd:41:03:ec:af:3d:f9:b0:73:1b:23:a8:45:21:ab:
                    81:de:d1:e1:d1:84:ed:c3:ff:b2:2b:95:d1:89:43:
                    07:e9:78:98:60:6c:2d:8a:6b:59:32:02:5f:41:2d:
                    78:da:23:ee:cf:bb:8e:c7:65:9d:41:80:3a:c3:19:
                    11:45:3f:d6:2c:09:42:88:15:00:c4:2c:a8:51:3c:
                    be:84:63:92:50:5c:5f:1d:58:7a:6e:ac:4f:2d:98:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E6:9B:64:C5:EB:16:7B:A4:4C:E1:DD:04:C4:27:AC:B8:BF:3F:A3
            X509v3 Authority Key Identifier:
                keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:55:4c:6a:85:34:18:cc:03:52:9b:54:0a:f7:22:ab:36:
         fd:fc:e4:36:1d:76:e5:c2:0e:ee:92:04:3a:30:0a:a7:51:b3:
         6c:59:58:99:36:0c:77:a7:8c:f8:a3:dc:ca:3f:53:b5:98:a0:
         a7:9f:4a:c8:9c:03:82:03:3f:73:d4:01:36:6a:95:9c:df:c5:
         48:40:02:f4:6e:6d:d5:3a:c7:c2:fa:93:8f:da:e7:7e:ca:81:
         a8:33:65:6f:0b:7c:ec:6a:be:b3:cd:ef:ef:61:f3:ba:19:83:
         35:46:85:35:83:f6:43:a1:4f:91:f9:0a:10:34:1b:56:2f:74:
         01:bb:84:4a:87:3b:43:6e:cb:c6:7f:56:5a:5b:80:18:f4:09:
         9e:b8:76:8c:d8:ff:75:87:b5:4d:43:1b:2b:bc:fb:76:a4:62:
         9a:b8:4f:56:6d:0c:a6:31:16:99:b2:59:bc:ff:d3:d1:11:ee:
         18:96:6c:20:cf:b5:05:98:0e:ff:0a:86:6c:63:35:15:c3:05:
         a8:e3:91:2d:38:31:45:43:67:87:b0:b8:22:f0:30:ce:2d:73:
         f3:e9:54:d6:bd:85:02:93:25:58:08:36:70:6c:ba:5e:47:ae:
         11:7d:08:31:24:28:af:89:ff:e7:d1:97:36:1f:50:92:8a:45:
         de:f8:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:43 2024 by rpki-client on console-ams.rpki-client.org