Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File:                     hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier:          P2UyukAqQ9jXDWeJkuJdaXG5MW1bd9r47SkpN7qjsaA=
Subject key identifier:   A2:15:49:EE:B7:84:17:8B:AA:BC:68:9C:3E:29:41:A9:B8:68:7D:8F
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer:       /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial:       018F885B377C9F08DC3BD95EF5949AF25516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number:          023F
Signing time:             Fri 17 May 2024 21:00:30 +0000
Manifest this update:     Fri 17 May 2024 21:00:30 +0000
Manifest next update:     Sat 18 May 2024 21:00:30 +0000
Files and hashes:         1: 1-6shrCDm21yzejsIgVtORGHAgw4.roa (hash: WLLb/a/oc2xZINj3fpUF08PCCesmpd+WBoagJJj+V/E=)
                          2: 591jALtH1xecOJfGoqGBhiLo1-A.roa (hash: rDpMrpxpetKrGmlFYsXipXl2KZhQTUdmel02LMg363I=)
                          3: fumXAB3kLsDhFeyHd4o90_RfvU0.roa (hash: gPIDCgGfw3T8gC/OJEjYh+3WcbXsN2C9rFZNwd9AoYg=)
                          4: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: Zhv6Vum6+OHyP0ACzEImgaizjYo++KEDI9/eTW+hI/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:37:7c:9f:08:dc:3b:d9:5e:f5:94:9a:f2:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
        Validity
            Not Before: May 17 21:00:30 2024 GMT
            Not After : May 18 21:00:30 2024 GMT
        Subject: CN=a21549eeb784178baabc689c3e2941a9b8687d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:e0:77:76:4d:40:80:15:8a:f4:57:1e:32:
                    ba:10:9f:57:07:db:01:ab:aa:f6:ad:c3:59:3b:1d:
                    64:36:70:a5:d1:a2:fb:71:5c:bf:ba:79:91:f9:b0:
                    a8:c3:04:67:98:eb:2e:74:4d:2e:df:47:f5:59:d8:
                    86:42:8f:2b:ff:9a:af:1d:ae:5a:af:55:86:ba:b2:
                    e8:38:91:ee:7a:df:ef:72:f8:29:52:d1:cb:db:d8:
                    5e:42:07:9e:81:59:0e:62:c5:3b:35:19:c4:56:7d:
                    3d:eb:84:21:ed:aa:19:7f:cb:e9:27:bc:9b:55:42:
                    2e:a9:c8:fe:8a:39:40:23:23:22:51:12:6a:44:b2:
                    9f:8d:9d:da:c6:13:5f:b2:74:52:8d:8c:11:ed:06:
                    45:16:2d:6d:b0:e9:56:e7:f5:05:23:1d:d4:ff:9d:
                    d6:53:0d:35:3a:75:81:84:e2:f4:5a:ae:5d:22:ff:
                    7b:9b:d0:11:a4:c8:7c:f4:22:ef:1a:87:b6:96:2e:
                    e3:ef:05:ba:e9:c5:50:90:80:e6:73:cc:cf:34:6e:
                    cf:b7:1f:78:46:8c:d5:24:80:49:0c:f4:df:6c:d9:
                    18:4e:06:28:04:fd:ac:1d:9c:b0:3d:8d:75:3a:5f:
                    97:ac:a6:c5:08:f0:19:1f:bf:85:14:5f:ab:bc:a0:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:49:EE:B7:84:17:8B:AA:BC:68:9C:3E:29:41:A9:B8:68:7D:8F
            X509v3 Authority Key Identifier:
                keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f5:17:31:77:8c:f8:9a:f2:af:60:54:d6:f1:f7:32:16:5c:
         16:a2:1c:a7:18:3e:44:0d:af:0a:e1:e2:68:88:8f:cd:05:7b:
         25:38:ff:be:54:e4:53:b7:7f:6f:19:38:cc:d5:63:f3:93:3d:
         31:9c:56:b5:a8:c4:03:79:04:7b:71:b3:c0:ff:c4:ad:14:53:
         36:ec:ea:7f:fe:ca:75:a1:34:06:0c:d4:a6:a2:eb:44:8d:c0:
         c0:42:d7:e0:d8:a3:be:05:cb:06:da:8d:f1:f9:e2:8d:63:09:
         cc:f6:f8:d0:07:d2:d0:9d:39:49:13:87:77:fa:4d:c9:5d:12:
         d4:c9:cd:89:b9:b5:af:92:ab:d9:db:a7:4a:b7:cc:84:a1:76:
         ec:2c:8d:cb:cb:cc:d2:d0:8f:0a:18:32:a7:1e:e3:91:63:9d:
         f3:a3:8f:4b:a2:59:7a:35:c1:57:c0:34:16:a0:b4:58:78:ff:
         ad:81:0a:18:6f:53:be:e2:66:82:96:1e:f9:fa:ce:94:9d:ff:
         54:31:58:cf:dc:83:47:31:05:c7:2d:61:31:43:29:f7:33:a8:
         64:8a:a7:94:c6:c3:f3:3b:0f:07:79:4e:b1:21:0b:58:65:a3:
         a4:54:0b:e3:5c:0a:42:cb:c2:8e:2a:2d:02:9e:3e:53:cc:e5:
         8a:ac:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:58 2024 by rpki-client on console-fra.rpki-client.org