Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File:                     nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier:          KOtaJ7SjExCiUC7W+ro16ESgJ3n/Lom1Pu89sZyryNg=
Subject key identifier:   C8:F7:94:25:D1:F8:6D:0A:72:68:13:52:60:9A:16:C5:1F:62:B8:EB
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer:       /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial:       018F874A77B0117C5541B019ADEEFB1B6A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number:          084A
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: afnDZZuT-Tlz8d05Srqkp7ZHVCQ.roa (hash: D63ElVvs/RJaXGSeR7xzMM52uPgBYgpyAgjLN7GLlY4=)
                          2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: 0FWNldRKvaYym507gRGb966tldka7ww491ci3Pn0ioU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:77:b0:11:7c:55:41:b0:19:ad:ee:fb:1b:6a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=c8f79425d1f86d0a72681352609a16c51f62b8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:36:8a:b0:e8:e9:bd:1c:5c:65:fe:f5:90:
                    0c:e2:00:55:73:cb:40:c8:64:52:a2:29:a1:be:ba:
                    e8:1a:81:fa:59:3c:0d:0e:9d:3d:b2:f9:dc:9b:68:
                    c2:a1:bc:53:50:bb:ce:fe:e2:b9:eb:53:93:38:67:
                    a9:fc:c4:23:f4:86:b4:24:72:52:a6:30:0c:ec:3e:
                    a8:3a:d1:66:7e:3b:c6:ea:8f:3c:05:05:46:a4:23:
                    25:3c:62:ab:29:61:57:9b:85:7e:0b:c2:37:6a:65:
                    b9:ea:f3:17:f6:8c:11:98:83:6a:2f:b2:d1:fe:7e:
                    a1:04:f4:9e:f6:e2:f1:3f:88:9c:01:85:c9:c1:bc:
                    eb:2f:78:7f:44:d0:0c:9a:ff:9c:35:87:c3:35:03:
                    0b:5b:46:69:39:6c:a3:8e:b8:5c:44:b4:31:1e:c3:
                    86:f9:16:72:68:8b:8c:88:44:75:3a:b6:f5:88:38:
                    ef:69:7a:99:20:1d:e9:12:78:38:67:f3:5f:7a:07:
                    23:2d:11:5d:34:01:96:cd:83:76:d0:bc:a1:e2:cc:
                    65:e2:60:d8:01:71:79:3f:48:a2:22:36:0d:8f:b9:
                    d2:86:7b:45:15:4c:11:21:e9:2c:57:a0:60:60:c5:
                    3e:2e:b3:58:f1:7e:d4:62:a7:d0:f1:07:3b:39:9f:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:94:25:D1:F8:6D:0A:72:68:13:52:60:9A:16:C5:1F:62:B8:EB
            X509v3 Authority Key Identifier:
                keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:1d:6b:07:91:08:d8:73:d5:56:93:30:39:c2:9a:a1:47:
         ea:8b:f3:5a:53:a5:08:b2:5f:39:bb:e8:6b:3b:85:99:ff:48:
         d3:6a:4f:b4:ad:63:6c:c2:ca:7e:72:4a:a9:70:49:1f:09:a3:
         fa:b5:f8:36:04:ff:2a:68:a3:5e:fa:8a:3f:a7:99:0e:79:2e:
         85:b4:b1:17:56:3c:67:5d:1f:ed:ef:b7:e5:23:fb:8b:31:b9:
         39:52:43:05:05:49:db:f0:dd:94:6c:9f:e1:8d:05:d2:de:a1:
         dd:d9:d3:67:bc:ed:7b:9d:96:71:ec:9a:be:35:e3:2a:2a:4b:
         2a:a4:44:fe:8c:c5:77:fd:09:14:bb:d5:c7:99:c0:6d:8b:89:
         be:5f:43:d8:bc:11:83:bd:86:19:66:39:3a:7e:a9:b0:42:39:
         6a:18:b4:4d:4e:e5:a4:50:77:1e:04:f7:a3:d4:7a:2f:bc:eb:
         01:e3:eb:6a:26:7f:1b:e2:87:22:68:c5:02:a9:4f:16:b4:13:
         a2:cc:f4:fd:6e:36:6f:d6:35:55:3a:14:15:59:7f:02:28:d3:
         d7:e7:a3:27:76:59:2a:41:56:89:a5:ca:76:37:7d:31:42:07:
         99:0d:c6:f8:c3:4b:bd:0e:f7:03:ff:34:89:62:19:ae:1c:00:
         2b:44:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:47 2024 by rpki-client on console-fra.rpki-client.org