Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          jMNZR0a5RJ/iiSpepmdpDx/64xPRb8UbmwAVlZA5UpI=
Subject key identifier:   64:62:03:4A:66:47:9A:D4:7E:4B:44:91:63:94:72:52:3E:3A:2F:61
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       018FE0C383506A852FD7A8312B221F12ED9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          11A6
Signing time:             Tue 04 Jun 2024 01:01:00 +0000
Manifest this update:     Tue 04 Jun 2024 01:01:00 +0000
Manifest next update:     Wed 05 Jun 2024 01:01:00 +0000
Files and hashes:         1: 2EdC38YqU277dTmsDCQT8a77z1g.roa (hash: 6NwjV50Tcrq42VXFZu7RdXZ2so0ykcYYu4ZSMdxn/y0=)
                          2: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: Cfluc8l1q1xfizIzsok51USGtCw4veSXTeajTVBUceI=)
                          3: fkKJwJcnk7RCptGxL_yLW9foc0I.roa (hash: YQf8iTbzj0U0ppMguXknAgtVs5/dItOVI9rpYgjapgw=)
                          4: yeYsD1uZfuwm7p_lm9bEEldcttg.roa (hash: 2I2GJKtPi2OtWzB7w2D/R768dRtm9J/RwDV3FX9+KIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e0:c3:83:50:6a:85:2f:d7:a8:31:2b:22:1f:12:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Jun  4 01:01:00 2024 GMT
            Not After : Jun  5 01:01:00 2024 GMT
        Subject: CN=6462034a66479ad47e4b4491639472523e3a2f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:3a:ab:ad:29:35:55:5f:db:89:f0:70:6f:
                    93:06:31:13:56:dd:cc:ca:9e:3a:60:b0:f1:ae:4a:
                    78:20:5f:4e:40:b5:5d:76:f9:85:50:f1:fd:fa:71:
                    ed:ab:f8:28:f5:9a:13:3a:bb:d5:64:af:1e:f0:59:
                    8c:aa:86:78:47:f3:41:f2:8b:44:6b:03:7c:4b:61:
                    92:1c:77:c6:9a:6a:14:f4:6e:b3:5d:0e:cc:4c:67:
                    a7:69:21:a9:6f:ab:e5:68:a1:a7:62:f7:c5:2e:6a:
                    1c:8e:d9:f1:62:43:ce:ac:ae:25:f3:45:00:b1:b4:
                    bf:57:9e:29:b7:9c:3f:62:f0:88:9e:60:bc:84:20:
                    fe:8c:63:86:cb:8b:6c:1d:01:57:a9:52:ba:58:e0:
                    6d:c1:8e:1d:75:5d:12:12:a9:d3:de:1b:99:b9:c8:
                    e5:68:76:85:50:79:9f:92:ca:5a:01:21:46:50:b0:
                    db:e0:56:7d:3a:24:78:7d:83:aa:38:18:9d:15:be:
                    02:0e:16:aa:e6:19:15:c1:84:d7:bf:7b:3d:fd:3b:
                    fd:5d:7d:43:57:3a:22:11:43:ac:3f:07:23:8f:53:
                    ea:24:0f:c6:55:46:30:72:83:b1:42:2b:87:97:a6:
                    e7:e4:a2:ae:a3:3e:9b:6a:24:29:98:78:04:3a:fb:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:03:4A:66:47:9A:D4:7E:4B:44:91:63:94:72:52:3E:3A:2F:61
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:53:04:fb:5e:7e:87:85:be:48:19:82:91:1e:2b:d1:1e:
         39:18:67:03:ef:f3:2f:d2:e9:9e:39:71:49:c3:c8:a2:87:b2:
         58:d7:ac:c5:35:d1:8e:00:23:a4:dc:29:0a:55:35:7f:33:e8:
         4e:54:5b:cc:e1:8c:d8:db:58:03:f0:c9:7f:e4:c5:29:ce:c4:
         85:b7:7b:eb:99:8c:a8:1d:1b:fd:1f:31:07:bf:4e:22:cb:89:
         eb:99:e7:2a:6b:ba:23:d4:dd:98:9b:39:b1:c5:58:f2:9d:3a:
         75:3a:cf:8a:72:1f:de:b8:f8:bc:95:4c:80:43:60:28:de:ea:
         0e:0c:00:54:4a:dd:94:f1:43:f3:2c:1c:bb:89:82:e2:bd:e7:
         f9:58:56:71:a8:60:d0:18:35:2f:ec:b0:42:ec:99:e3:e0:13:
         0e:f5:72:d5:b4:25:12:91:34:54:16:20:43:58:5c:4a:fd:3d:
         86:98:70:cd:01:5e:ee:c0:4a:0c:64:0a:6e:81:4b:a0:96:99:
         ed:a4:06:cd:18:00:d2:59:86:2d:b5:89:3c:3e:3c:14:b1:c3:
         f5:32:2c:78:40:b5:2b:6a:c7:de:23:72:68:7b:d5:74:31:16:
         0b:f5:c5:24:7d:94:91:05:88:ae:ad:2d:80:50:58:5f:b1:ce:
         ad:7e:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 07:46:38 2024 by rpki-client on console-ams.rpki-client.org