Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File:                     i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier:          pVoVgo+k1p6LwKkQvTe/KL2BnKmf5L2PSspdWtMnh1M=
Subject key identifier:   C9:FF:6D:61:98:1F:2F:0C:65:9C:E8:AC:CA:00:4C:23:CB:34:0C:63
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer:       /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial:       018F96BD51B40CC13F52E10FEBD4EA32A70B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number:          0435
Signing time:             Mon 20 May 2024 16:02:20 +0000
Manifest this update:     Mon 20 May 2024 16:02:20 +0000
Manifest next update:     Tue 21 May 2024 16:02:20 +0000
Files and hashes:         1: PRJa7V2k-CLwAF5UkLaIdcldqlI.roa (hash: wUIhD2jDnsxyp1Dj5kgoGNM8SGIGHri6mRFYv3+dxmE=)
                          2: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: ZGlGL4xVQB+/98nHsScA/8Wjb/HYgte/vfYy32Baj+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:51:b4:0c:c1:3f:52:e1:0f:eb:d4:ea:32:a7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
        Validity
            Not Before: May 20 16:02:20 2024 GMT
            Not After : May 21 16:02:20 2024 GMT
        Subject: CN=c9ff6d61981f2f0c659ce8acca004c23cb340c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:12:01:8b:2a:52:a9:e3:fd:9b:38:00:8b:
                    69:1f:7c:e9:01:83:f1:ca:43:7d:d7:65:58:0d:43:
                    73:34:b2:98:66:d3:fb:13:aa:6b:b0:47:3c:18:58:
                    80:08:40:7e:08:6a:d0:27:29:be:fe:c3:27:77:0b:
                    13:15:15:87:84:36:cb:17:94:46:40:f8:46:33:67:
                    28:e4:cf:d8:e5:fe:dd:d8:28:4a:3b:a0:7a:22:70:
                    32:4e:58:bf:76:20:b6:a6:c1:e0:43:7f:ab:a6:31:
                    be:63:b3:35:16:a8:0b:20:a3:39:00:70:fd:f3:68:
                    4e:34:e6:f5:0c:a7:03:d9:28:72:29:51:87:c6:65:
                    b6:18:fe:a7:e1:d2:6a:8a:97:b9:19:f6:5b:c3:8d:
                    96:e6:85:7e:d0:22:3e:78:dc:35:e8:bd:c2:0f:26:
                    ca:28:be:ad:b8:a2:83:1d:ac:d2:ba:fc:59:83:3b:
                    a6:b6:41:94:18:5b:4c:98:55:f4:32:b4:d8:5f:26:
                    49:cb:1f:9a:36:d4:68:89:ac:33:09:9a:b7:52:ee:
                    db:fc:a1:90:b9:e8:d6:06:cf:87:66:44:64:bd:f2:
                    13:13:a7:6f:a1:07:6f:6c:bc:fe:eb:ea:48:89:13:
                    7f:8a:1d:bb:fe:77:8a:d2:b9:ba:a4:d8:69:97:b5:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:6D:61:98:1F:2F:0C:65:9C:E8:AC:CA:00:4C:23:CB:34:0C:63
            X509v3 Authority Key Identifier:
                keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:d3:83:32:fa:26:e6:d3:67:1d:fc:ee:26:5f:df:de:57:
         d2:10:8a:7a:06:3f:32:02:ef:94:63:f6:9f:c5:ce:74:c0:47:
         54:c3:20:c6:5c:bc:16:1b:c2:a6:30:53:97:a1:bb:33:ce:8d:
         60:c8:a7:02:65:a4:74:3e:c2:4c:3f:05:90:b2:b3:8c:1b:8b:
         cc:28:f2:8d:a4:2a:c8:c9:c1:e6:ee:73:70:16:46:35:56:b4:
         8f:9a:36:d7:5a:e9:65:a4:13:1e:28:36:8c:76:79:83:4d:34:
         9f:dd:1a:1b:e9:06:b9:9a:ef:f7:11:66:46:95:2f:85:e7:ab:
         80:d5:b5:14:f7:54:09:38:09:20:f8:4c:b7:53:76:51:c3:c1:
         76:b7:28:0b:5a:09:18:64:1b:60:04:f2:6e:7c:ff:cd:c2:86:
         8f:6e:33:68:6d:31:ad:f6:dd:9c:1c:1b:cc:e9:cd:8b:43:ec:
         a8:c3:b8:30:28:c0:ef:a6:ef:95:c9:59:54:e5:d1:93:1a:7d:
         f6:40:3a:00:1d:49:71:27:49:65:cb:0c:f7:e7:dd:f8:3c:9e:
         b6:d4:72:44:0e:55:d8:df:7c:a6:79:e4:83:36:6a:7c:20:d9:
         ff:cd:6c:ed:a2:c0:ff:c9:c8:e8:c0:4e:1d:81:a9:d7:56:8e:
         aa:54:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:53:23 2024 by rpki-client on console-ams.rpki-client.org