Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          H0pJ+oNSja5NSELe4Vx88s1mP1H4R7GN6iprC+d0CEM=
Subject key identifier:   3B:97:85:E4:57:A4:08:AC:DF:66:D7:66:94:21:00:7B:71:A6:8C:28
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       018F42685DD414D8C5B53B5E4C7AEA0491C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          05E7
Signing time:             Sat 04 May 2024 07:01:27 +0000
Manifest this update:     Sat 04 May 2024 07:01:27 +0000
Manifest next update:     Sun 05 May 2024 07:01:27 +0000
Files and hashes:         1: 1kHHMke9hWLQr3qEEbQGWg4EIPQ.roa (hash: k8JYUYuRySnYAwh2TRsTdaUGtsjPT1QkKMbbDEMkOKU=)
                          2: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: nhvunhltYlGNpf3WZX4ENk915oAP5h7lIiXReB46l4g=)
                          3: IitFlexYZfX-UU71f3XpZrGvWsM.roa (hash: tylWdlOxFACp9bND59PH/ucvG9vvleDVIVW12I3eErQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:5d:d4:14:d8:c5:b5:3b:5e:4c:7a:ea:04:91:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: May  4 07:01:27 2024 GMT
            Not After : May  5 07:01:27 2024 GMT
        Subject: CN=3b9785e457a408acdf66d7669421007b71a68c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:14:f6:a7:ca:45:da:c4:58:e9:65:9a:50:
                    79:4e:d9:72:56:44:f3:0a:c2:a0:5d:77:b3:62:fc:
                    d3:5f:fa:4e:1c:e7:6a:72:be:66:2f:5c:14:e8:d8:
                    d3:a6:10:48:96:8c:b1:3a:c2:c9:87:af:92:b4:b4:
                    f0:b6:7a:9e:ff:19:fb:d6:55:04:52:13:60:27:47:
                    0a:3c:a8:0a:2d:78:99:1f:24:d6:39:07:0b:54:96:
                    e7:56:cb:99:d9:99:09:64:24:d7:5c:3c:4e:2f:b3:
                    35:12:af:36:b5:e2:a9:bc:5c:ec:ed:cf:a1:61:da:
                    4f:7d:c1:35:ce:64:d4:95:7c:fc:33:45:22:66:ff:
                    50:6e:d4:37:43:6a:32:df:26:42:7f:7b:0f:fe:2a:
                    6d:fe:60:2e:69:fd:c8:9f:22:22:a0:ec:e3:11:ec:
                    d5:c3:c4:75:8c:13:72:66:36:89:b0:98:5e:ac:01:
                    ca:35:0f:41:29:a9:2c:41:3d:6e:b7:ac:f4:49:34:
                    49:5c:f6:26:cb:95:a4:8c:0b:98:1d:80:b6:f1:17:
                    fd:f0:79:61:ea:49:f0:b6:0e:91:e8:d7:b4:4d:18:
                    8d:22:0d:a4:0f:f8:6e:80:5a:9b:6e:e9:53:04:23:
                    9d:4f:c6:29:33:66:1a:eb:cf:a4:37:46:d0:bc:fc:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:85:E4:57:A4:08:AC:DF:66:D7:66:94:21:00:7B:71:A6:8C:28
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:d6:12:23:94:82:37:3d:58:bd:54:d2:6c:70:63:26:dd:
         e3:30:9f:dd:0e:1b:a8:2d:6b:bd:04:c0:12:7e:de:3c:a6:77:
         e4:79:54:5f:f2:25:9b:3a:ad:8f:36:bc:19:06:15:f5:46:d2:
         80:4c:07:1f:58:bf:fa:6d:cd:0d:41:84:be:3a:3a:df:92:4d:
         36:b9:4e:99:2f:d9:07:5c:7f:eb:7e:83:39:39:f1:f0:2a:c4:
         30:92:ec:41:43:68:55:4a:3c:2f:04:07:ba:f1:02:26:36:4e:
         94:d8:c1:1e:1b:e7:2f:d4:57:0d:8b:92:8e:ea:6e:79:7e:a1:
         f2:83:93:35:1f:52:d6:89:75:29:aa:ed:fe:b6:ce:cd:1b:3f:
         62:62:67:e9:6f:92:95:30:24:7f:dd:70:54:ea:49:d7:05:44:
         53:a0:4a:c9:90:e4:11:df:1a:8b:8e:12:f8:1d:d4:f2:41:98:
         05:aa:f4:d3:2e:cd:87:16:1b:fe:af:55:3f:07:52:d7:11:b2:
         83:48:b1:10:06:70:10:62:2f:d7:43:81:12:95:4d:cd:8a:93:
         67:4f:cb:de:a8:74:12:86:fb:43:1a:7d:e5:10:af:1f:df:ea:
         83:81:89:59:63:f4:c5:fd:fd:78:5f:8e:de:a9:37:61:79:bb:
         e3:d9:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:17:18 2024 by rpki-client on console-ams.rpki-client.org