Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File:                     sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier:          aHDnFKtYgNEQgY1EFPvI/Wm2KLh6mOUi6na2n5xEktE=
Subject key identifier:   93:F3:C1:DE:FA:6B:BA:19:69:2E:E2:1E:32:8E:6F:98:68:61:F4:3F
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer:       /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial:       018F8824A165E91794405721EBE8C4F9B539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number:          0809
Signing time:             Fri 17 May 2024 20:00:52 +0000
Manifest this update:     Fri 17 May 2024 20:00:52 +0000
Manifest next update:     Sat 18 May 2024 20:00:52 +0000
Files and hashes:         1: 1wSat9pGHQy7ydyiNfXByzfu7as.roa (hash: Wo3KEaJaBpNMuqocNOu+DJF/Ef2apezcGDTX2WI3oMc=)
                          2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: kBbV+mfFo84MtigukKBN/nWrC/i3qBsEPK/yohBJaEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a1:65:e9:17:94:40:57:21:eb:e8:c4:f9:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
        Validity
            Not Before: May 17 20:00:52 2024 GMT
            Not After : May 18 20:00:52 2024 GMT
        Subject: CN=93f3c1defa6bba19692ee21e328e6f986861f43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:c6:33:83:c9:55:cf:8f:d7:14:2d:ed:63:
                    a6:cf:1c:2f:fd:45:f2:69:b9:77:1b:51:f8:ed:c3:
                    3c:bb:f3:9a:d2:07:f6:7c:48:88:26:d6:3a:c8:2f:
                    67:2e:c8:c1:6d:b8:05:9b:0c:cc:3a:ab:0a:d0:e8:
                    11:c6:dd:df:ac:34:b7:ac:59:c2:d1:b9:cb:da:86:
                    5b:10:02:56:cc:78:dc:79:16:30:d5:dc:fc:93:41:
                    26:af:5e:c1:e5:a9:c2:07:16:d8:f5:7c:c9:a6:2b:
                    45:88:4d:81:86:7c:a3:12:90:35:80:ad:69:0c:54:
                    10:9b:68:35:23:86:f5:90:14:84:19:15:f7:f4:83:
                    aa:b5:16:bf:b9:31:2d:ee:94:2c:07:ee:70:aa:f5:
                    c0:8d:3a:82:ac:aa:ac:b3:a7:c4:cb:b1:eb:bd:dc:
                    fc:97:81:31:7a:2b:2c:dd:2e:71:a0:2e:cf:14:5b:
                    d0:d5:de:bb:e5:fd:c1:46:63:53:fa:62:e0:5e:0e:
                    56:84:72:79:ed:98:43:c6:54:4c:5f:da:c8:89:ea:
                    c3:ea:f4:54:0d:c5:14:75:dc:21:fd:6c:92:b5:e4:
                    30:54:de:8b:d9:2a:c4:af:68:34:47:b2:68:a2:db:
                    b4:aa:d8:fe:67:1e:8a:61:ae:78:99:2e:e0:55:69:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:C1:DE:FA:6B:BA:19:69:2E:E2:1E:32:8E:6F:98:68:61:F4:3F
            X509v3 Authority Key Identifier:
                keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:5b:5f:a8:dc:bd:0c:7f:8d:e4:2f:ed:45:e3:a5:a1:be:
         de:e7:51:c6:24:10:c9:73:00:19:f2:1d:40:a6:22:ea:d6:43:
         c2:d8:cc:e3:72:98:6f:d3:07:89:52:2e:31:67:97:84:91:5e:
         f3:f0:d6:76:f1:71:7c:cc:de:5c:53:73:fb:9f:68:05:e3:a0:
         85:03:ee:d0:9a:a2:2a:ee:9e:fd:5d:bb:54:f6:17:a3:9b:30:
         4f:af:20:fa:f6:d0:8b:41:87:74:ef:e8:bb:72:6f:1e:c9:23:
         f1:4b:a4:81:97:09:b8:23:b1:36:c6:7f:62:da:e2:f7:83:d9:
         91:55:04:44:06:15:63:71:9d:5d:85:00:8e:51:b6:89:e9:49:
         0b:da:ed:5a:22:c5:1d:ab:d3:7c:23:a8:eb:fa:ab:aa:c5:89:
         40:55:c5:be:9f:31:1a:a7:c2:05:f6:f0:88:dc:54:3a:d9:60:
         56:b5:de:ba:76:3d:73:f5:62:6d:33:30:68:84:f3:1c:8a:83:
         b6:d6:44:a4:64:25:cf:05:57:5c:82:da:7a:21:e3:fa:aa:95:
         b1:e0:36:b4:81:db:da:93:a9:b4:e5:95:71:20:f4:c5:b0:01:
         64:cc:ee:58:ba:34:e0:82:2c:fc:92:b9:c1:00:41:94:4e:ae:
         48:c8:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:48 2024 by rpki-client on console-ams.rpki-client.org