Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          AEDKXxX2/72H0lIM/GhsQbWwWeazIhba6IMR0MCUdTw=
Subject key identifier:   30:95:30:60:1B:3E:F2:91:CE:22:D3:CE:FC:21:4B:BA:38:07:5F:DC
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       018F874A5B042700F4960A2426BFC837F1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: 0xHjVSZdRfrStkMzArdqdZbKInA.roa (hash: QcW+K87diU5BkEN/PvkZJcP6sfhBwWdtE+/6h6H/nQk=)
                          2: 6GjqnuCuDVv_J-V6e1fcSAZNM8Y.roa (hash: +2ZrqdKMGq4za9nf9hc6i6aIsUE79Pri6Ng9W87kHR4=)
                          3: V-WztWpNQN3v70M5nFo3CeYonfo.roa (hash: sb09Cdd8d53Y4vQ3YKix/zgsSHBlBJmxWU03hD1ua9Y=)
                          4: X5WodBu3Me40y58jT9DgXkn1quI.roa (hash: 3Ux0oyp+2KFx72lcCbMaI/bInQzpCCbNZvrymtK0yVM=)
                          5: XWSuYIY-y_Sya5OxmXkQqjup0gc.roa (hash: 9QVWsqoBncVVxPPAkJC0HV52oWAgLzg1gTvmGQ68mTI=)
                          6: kL9QonV4wN-kpc9dHdgV56YtQl4.roa (hash: wDwu1ONeglr5+9PFg3ggzb7lNzthhjoc891qfzymJV4=)
                          7: mYcpzNPDBX_MC14MZpRFwBuQFW0.roa (hash: 1IRYr7sXLXl6b6ffdA9wcVI9nCBPOO3s6yuWRC+ZNaI=)
                          8: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: ZeSSPuUP8eMqxNlMNPdhC7erLhiacPXeZ5JKT6u7vo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5b:04:27:00:f4:96:0a:24:26:bf:c8:37:f1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=309530601b3ef291ce22d3cefc214bba38075fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:ec:41:30:aa:31:de:de:95:85:8f:77:8e:
                    42:8a:77:bc:7d:62:74:a5:86:43:83:f1:49:7b:9e:
                    ec:5c:27:c5:90:a5:c8:f8:80:87:32:6b:1b:3a:ec:
                    bf:16:c5:4e:99:11:20:9d:2b:37:06:13:3d:bd:3c:
                    1f:8c:23:52:a9:d5:11:1e:7f:c0:a1:ff:a3:7d:44:
                    49:81:48:45:b5:48:b9:93:0b:87:39:08:a2:1c:b5:
                    af:99:4a:af:b4:0a:9a:a3:58:db:20:cc:08:cf:49:
                    02:d7:5f:69:ff:bc:f4:d3:74:40:92:db:90:cf:99:
                    76:b0:8d:68:36:de:61:5b:b1:62:f3:31:87:6c:14:
                    00:17:31:9b:6b:a0:fd:88:ac:ca:ab:b3:53:26:e4:
                    3d:be:45:9f:a0:8a:7b:96:41:5c:54:f4:d2:30:17:
                    c1:cb:49:a8:36:19:7d:f8:18:61:31:f3:05:d2:a8:
                    68:80:76:e8:35:13:76:56:67:b0:45:9b:ed:6e:7f:
                    90:bd:91:81:bf:97:66:74:12:c7:53:77:a0:0c:cb:
                    06:89:4b:94:53:b1:da:b9:10:9b:cc:af:98:d9:66:
                    92:1b:33:36:a3:5b:4c:0b:0a:5c:a6:1c:b7:9f:dd:
                    17:21:53:8a:c7:1a:f0:fa:a1:52:39:7a:e4:22:9d:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:95:30:60:1B:3E:F2:91:CE:22:D3:CE:FC:21:4B:BA:38:07:5F:DC
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:08:16:5a:7c:3e:61:d6:c0:01:59:55:9b:b6:19:54:18:a8:
         7a:00:68:3c:a1:48:36:87:ba:c3:e3:ab:e0:11:a3:b6:04:ea:
         a8:26:22:55:23:5a:45:e4:fc:4e:ef:2d:86:bb:10:7c:11:e9:
         05:6d:f6:69:ac:12:a5:71:21:44:bc:73:33:d0:14:e6:50:ab:
         4a:9a:c9:c1:7b:37:39:6b:2b:6b:b9:08:18:3c:55:41:3d:e5:
         34:5d:18:dd:0c:41:81:04:a3:a7:e5:37:d2:50:ee:12:25:d7:
         2b:97:f4:83:92:a1:d9:7f:27:d1:ec:0c:1a:ec:75:83:9f:5b:
         31:f8:ed:48:fa:5b:f1:2b:f8:a1:f2:ad:2d:71:0b:f5:21:7c:
         dd:a2:a2:32:25:ee:d3:3d:d1:e5:1e:15:e8:ef:2b:80:ac:05:
         df:7d:75:90:89:d8:54:5f:05:ef:39:bc:67:08:79:c3:9d:15:
         86:62:bb:b7:62:06:26:2e:d6:2c:4d:1f:e5:91:8b:2a:f2:7c:
         31:c1:72:32:7e:ac:bb:4e:c0:be:f6:b6:56:41:cf:b5:91:0a:
         80:48:64:ef:db:0b:8c:1b:88:41:ed:46:8a:64:a2:4b:83:43:
         87:23:51:94:b4:3c:f9:48:59:96:17:73:f6:53:6f:32:96:85:
         33:b2:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:48 2024 by rpki-client on console-ams.rpki-client.org