Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File:                     G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier:          zE5AoriP2B995nMvD64dYgHQrAlbbxJpexznxVleYRE=
Subject key identifier:   D9:67:C8:A8:8B:B2:0D:DE:49:5A:77:76:0A:9D:A6:83:48:90:9A:37
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer:       /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial:       018F3A0B650037BA140631D92718635AB3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number:          0446
Signing time:             Thu 02 May 2024 16:02:56 +0000
Manifest this update:     Thu 02 May 2024 16:02:56 +0000
Manifest next update:     Fri 03 May 2024 16:02:56 +0000
Files and hashes:         1: 6KRcvy83p1o5hI3VnT1dbg-Ut14.roa (hash: jIHDqwgAP1TIYTFsRkuy1mcyAQ7ACD7Yr6iMWREYOPk=)
                          2: 7IuFK43dzNHhG-sX-1M852Avvg0.roa (hash: TBcHbkabOpe4NlRMGruO13RhWl6zUZoN/b9WD2xI5m0=)
                          3: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: N05NX3r+GJz2fcCVWdzB2aRiMIhi6u14z8U8AsYfmAY=)
                          4: cfuLvGeWG3K1aQR5SszJ70pKXqY.roa (hash: Zgor1RI90GC5puDqKRTuPkFkX22Jobw/C6c+NR6V5Kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:65:00:37:ba:14:06:31:d9:27:18:63:5a:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
        Validity
            Not Before: May  2 16:02:56 2024 GMT
            Not After : May  3 16:02:56 2024 GMT
        Subject: CN=d967c8a88bb20dde495a77760a9da68348909a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:a7:98:15:43:61:0d:71:2e:5c:2d:fa:a8:
                    07:73:c3:ca:ce:05:16:3c:3e:20:0d:5a:3b:84:f0:
                    f1:ae:61:b4:cd:a3:36:e9:ef:bb:81:aa:a8:ed:76:
                    84:e3:15:87:58:77:d9:c4:12:2c:dc:a0:d4:a7:e5:
                    84:06:e5:20:59:6a:73:ba:4d:88:90:d8:da:e3:70:
                    ec:94:3f:5a:9a:cd:6e:7c:cd:47:cd:99:bd:0a:61:
                    43:be:57:47:e7:c4:2d:d6:77:73:7e:48:66:bf:58:
                    c6:b9:e2:8f:14:09:c6:34:8e:fe:d5:f6:16:bb:6c:
                    28:d9:f7:15:cf:38:48:be:12:09:ca:b4:6b:5f:ef:
                    24:6e:16:d3:a6:4a:a7:54:c0:fc:ef:e3:ca:25:bb:
                    a4:c8:10:57:81:53:2c:17:c6:07:cc:2f:a0:6e:04:
                    92:57:66:13:41:84:ce:ad:72:76:c0:9b:f0:1e:cb:
                    fa:88:a2:97:95:e6:3f:43:eb:ff:20:8d:83:ca:9a:
                    44:1f:f0:2d:7a:ab:5f:4b:92:10:9e:26:7a:d8:57:
                    f6:86:e1:c2:a7:2e:ee:be:9b:75:05:fb:7f:cb:ed:
                    1b:fe:f8:b2:ae:3e:d1:19:2c:5b:26:df:1e:7f:b7:
                    8d:3f:60:55:f8:9e:23:fc:d8:c8:3c:fe:2e:6b:3a:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:C8:A8:8B:B2:0D:DE:49:5A:77:76:0A:9D:A6:83:48:90:9A:37
            X509v3 Authority Key Identifier:
                keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:f9:bd:47:2b:57:c3:07:d7:e6:39:61:58:ac:61:ed:08:
         77:3b:c2:0e:91:72:1f:40:66:bd:d9:bc:ff:68:30:78:c3:72:
         ce:c6:18:a5:89:4c:7a:6b:f9:07:7d:86:28:40:00:3a:aa:cd:
         73:ed:ba:05:f1:ec:5e:0b:80:88:3c:51:00:80:4e:7b:68:e4:
         51:da:3e:13:5a:80:c5:ed:dc:90:83:de:58:73:8d:66:94:be:
         34:1a:dc:c7:57:f2:b1:2c:21:27:eb:aa:6e:07:3f:cf:dc:dc:
         51:c9:db:55:3f:3d:12:08:7a:bc:8c:42:73:80:d3:c0:ba:f5:
         6f:a1:f7:a9:54:d5:38:8e:c1:20:e4:77:cc:b1:f3:75:12:63:
         42:16:6b:7e:92:63:a3:a3:63:00:ac:a1:ec:db:1f:66:d9:3c:
         09:f1:70:1b:08:86:13:df:0a:5e:64:05:13:9a:60:a7:cd:8a:
         b3:6c:2d:8b:e4:e0:1e:67:6b:5e:19:86:37:7a:03:9d:b2:74:
         b9:8c:2f:b5:65:35:0e:bc:83:5b:99:7f:11:64:0d:3c:aa:b0:
         fb:d7:44:36:db:17:b0:83:9b:e5:07:8b:47:3a:6e:b9:bd:98:
         93:04:de:91:ed:2a:0e:bf:31:4e:c7:eb:db:86:a7:ee:6c:e0:
         e9:bd:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:34:32 2024 by rpki-client on console-fra.rpki-client.org