Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          2EMd4BFo0xzFLqLmT5UZ17POPQr8PBY+nAk3mNaAIAY=
Subject key identifier:   83:3A:AA:A7:EC:AC:0E:3E:55:27:C1:DF:B8:4A:CE:72:94:22:8D:75
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       018F877F481E525C6EFA3141214696E97C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0510
Signing time:             Fri 17 May 2024 17:00:16 +0000
Manifest this update:     Fri 17 May 2024 17:00:16 +0000
Manifest next update:     Sat 18 May 2024 17:00:16 +0000
Files and hashes:         1: 3c-FaHD5i6as5Y6FVNeMkyeRvQ0.roa (hash: ryvSwdLxF9Tta9gTceUC4iruOmkqfhSgulV/B49uI6U=)
                          2: C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa (hash: +rG/NTtMEMzcFW9dHX0Dw1uq6d0iTIJZ+yHQlfpQ0YM=)
                          3: EJSsHLYzJT39mPFyHtwBihZFs18.roa (hash: M8wt7W2lDiBfSNzt9ymUH/9Ah9RShJYJV/7CQkF8qcQ=)
                          4: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: xPYqVOjW54jmpKW8D0GNV4ZI+oQxXP0TdAaUesApGg0=)
                          5: zt5_vqdq6MSwkfhrn2MtEX60Hw4.roa (hash: GnvHr13R1Hp9loaIJhANZd2Jf/9Zalmyth2nmyIlPTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:48:1e:52:5c:6e:fa:31:41:21:46:96:e9:7c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: May 17 17:00:16 2024 GMT
            Not After : May 18 17:00:16 2024 GMT
        Subject: CN=833aaaa7ecac0e3e5527c1dfb84ace7294228d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:e0:90:2e:9c:6c:a6:60:40:27:a9:b1:84:
                    e8:49:57:82:f0:6b:65:26:0c:ef:de:ff:36:4a:e4:
                    c1:84:d3:5f:56:23:c7:d9:8a:81:5e:c3:0a:41:13:
                    b8:cb:16:40:be:0f:d3:65:e4:af:cc:af:43:90:a0:
                    57:97:98:9f:ad:e3:1b:cb:b9:5c:0f:dd:5a:e2:3b:
                    f5:70:a0:5c:c3:9a:fc:18:6d:33:cb:3f:9a:93:74:
                    03:56:b9:17:63:7d:95:72:90:23:6c:80:7d:f7:d4:
                    2c:bc:7d:86:01:b9:6a:ac:39:85:9f:67:31:a9:b1:
                    de:5e:fb:dd:bf:e0:77:f5:aa:e7:da:a3:64:06:3c:
                    2f:fd:bf:6c:2b:3a:eb:b7:8e:45:a7:b6:55:1d:5d:
                    c6:5e:73:76:f8:85:0b:27:c3:04:f0:d6:0c:28:1f:
                    87:23:cb:9e:6a:80:37:bd:ac:3a:23:f7:36:8d:66:
                    cd:52:f4:5a:d7:c0:57:13:63:33:0c:db:34:e0:bf:
                    26:be:5d:46:ad:d8:0e:d5:60:71:4a:30:ec:92:ba:
                    a7:ff:a4:2c:2c:74:a3:a2:26:44:89:cb:41:56:0c:
                    1e:f3:a4:b1:b6:51:a6:00:56:e8:fb:2f:d5:43:c9:
                    d7:38:cd:9a:68:30:02:ac:02:7a:2c:b1:a9:c6:78:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:AA:A7:EC:AC:0E:3E:55:27:C1:DF:B8:4A:CE:72:94:22:8D:75
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:3b:d2:47:3a:6e:a8:2f:6c:e7:6a:0c:05:a9:db:95:be:
         c4:1e:78:4b:47:e7:93:3b:83:6e:2b:3c:39:46:ba:07:86:60:
         8a:c7:fa:d5:4d:03:b9:ac:3f:b1:46:24:06:84:8a:aa:1a:e1:
         16:57:c7:d7:b3:20:78:d7:38:a4:54:3e:3d:00:9f:24:56:06:
         a9:66:31:40:ed:fe:04:c1:12:da:3b:a1:1c:4c:6e:89:7d:68:
         b3:5d:3b:5f:2d:f3:4a:40:4b:ca:af:b4:0f:3a:9c:14:ba:2d:
         ef:50:77:f4:e6:84:89:1b:e9:26:f6:99:0b:d1:22:22:bf:ef:
         b3:c5:e0:b5:87:9f:c0:29:9e:0a:c3:88:9d:4e:a3:91:fe:7b:
         41:a9:f4:13:d3:ba:c2:bc:54:eb:cd:f7:8b:23:04:bc:9e:38:
         38:7c:bf:7b:2d:92:ea:05:1c:7b:0c:c8:70:51:92:d3:45:db:
         67:80:62:5f:98:43:bc:da:56:fe:ea:5e:64:89:62:60:0a:e7:
         74:d9:80:c0:3a:be:9f:7a:42:a2:aa:f3:70:72:c0:65:10:26:
         bf:b1:13:76:5d:89:f5:2c:d7:34:53:92:a4:0a:23:32:5d:99:
         1a:63:c6:cb:0f:75:11:c9:d3:8b:c0:e8:20:c6:c3:89:21:0b:
         51:5d:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:56 2024 by rpki-client on console-fra.rpki-client.org