Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File:                     2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier:          8/88aL0Sx6RLhk01F6o8MhgmrMNUBuoD9DDsd9Ghibg=
Subject key identifier:   0B:56:CF:41:94:CA:2E:30:2E:56:10:49:2E:16:77:1C:FB:D4:42:17
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer:       /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial:       018F855A2D58ED9B2C7D71E319F76B59A6E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number:          03C4
Signing time:             Fri 17 May 2024 07:00:30 +0000
Manifest this update:     Fri 17 May 2024 07:00:30 +0000
Manifest next update:     Sat 18 May 2024 07:00:30 +0000
Files and hashes:         1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: YtlMYVzIu7SS3ZMEuCpEqQcl5XPQKQPeoVSNSARdzO0=)
                          2: QML8pzL9Iu-fY699i8MX4_vOfog.roa (hash: Y4Ew0D9xxn+fFK0UC4D/O/SPpLzTfVMCs8gHL8EqCn0=)
                          3: xeQr3bO04zX9AYVQDOjyoZYZ_8E.roa (hash: nkYwdzzKsL/3jEDFZaz7Ig+Hwwx+i9W9EjvRBy13Yr8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:2d:58:ed:9b:2c:7d:71:e3:19:f7:6b:59:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
        Validity
            Not Before: May 17 07:00:30 2024 GMT
            Not After : May 18 07:00:30 2024 GMT
        Subject: CN=0b56cf4194ca2e302e5610492e16771cfbd44217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:09:dc:6d:bf:af:fa:12:7e:4c:f5:03:6f:
                    37:e8:6a:b7:9a:c1:35:84:b0:10:fd:6b:13:39:2a:
                    2c:1e:22:14:e1:5c:c0:c6:42:ec:03:43:8f:76:8b:
                    b0:41:33:01:d4:8a:cd:62:28:0a:b5:05:7f:ea:db:
                    e3:a3:e1:75:44:e4:b6:6b:f2:fa:79:a1:91:20:e4:
                    53:fd:a7:a1:a4:59:59:63:2c:da:2c:f6:53:86:ea:
                    e5:ff:01:64:d0:d0:4a:65:80:21:44:f8:ad:bf:63:
                    0e:27:94:10:61:9e:b9:06:5d:6e:7c:3d:ab:5b:3b:
                    6c:8a:9f:38:0f:3e:27:d7:5f:55:a5:b7:08:61:3a:
                    5e:67:91:f7:e1:7d:7a:77:50:4c:56:a0:40:71:0d:
                    e0:93:e1:8b:df:f2:3f:af:e3:35:e8:fe:ab:f5:6e:
                    0c:5b:a3:c1:0f:8e:09:bd:56:8e:cc:69:9c:dd:db:
                    36:a3:5b:16:54:dc:30:5e:08:49:ab:e4:2b:f2:e6:
                    86:a5:37:50:43:d4:a4:ae:48:35:2d:ba:eb:be:53:
                    53:eb:f4:20:4b:84:50:f7:6b:5c:25:c3:60:d0:41:
                    9f:5e:ae:f0:c6:96:fe:00:c0:e5:37:e0:a7:d5:2d:
                    5a:b0:e3:c3:f6:19:d4:88:8f:63:56:a6:29:45:89:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:56:CF:41:94:CA:2E:30:2E:56:10:49:2E:16:77:1C:FB:D4:42:17
            X509v3 Authority Key Identifier:
                keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:06:fa:17:2c:9f:11:ed:0e:e3:ea:d8:51:ed:75:7d:36:
         ac:55:f5:d9:78:e0:e7:c4:70:59:05:af:21:9c:ef:19:f3:80:
         70:66:33:74:9f:ad:59:27:52:a5:7f:12:55:cf:a8:22:b1:7f:
         e2:ea:bf:b3:3a:75:b7:ad:b9:91:6e:00:cb:21:73:f5:64:73:
         3e:56:85:05:c8:2c:ff:17:97:c7:c2:3e:a9:eb:5d:04:96:b0:
         98:02:d4:93:0f:50:85:7f:52:03:44:00:60:85:87:87:f6:1e:
         17:d7:09:30:c7:0f:f4:95:2b:ce:77:1d:78:76:f0:7a:f4:db:
         5a:61:2a:d0:1a:e4:48:62:98:22:2a:00:2d:36:8f:2f:ab:7a:
         f0:a3:42:98:e0:d2:d2:4c:31:88:a7:ad:ad:be:b0:bf:fd:42:
         fa:df:68:01:ec:57:5a:cd:4d:b3:67:52:e9:ff:96:be:27:c3:
         64:14:00:b0:5f:27:ae:fe:ab:77:ee:e3:9c:77:30:83:42:bf:
         73:d9:4f:0e:5d:25:c9:74:99:e3:bd:8b:e0:e4:c3:ed:a4:9f:
         2c:81:b2:39:54:3d:6d:d9:1f:3e:16:de:bf:98:12:16:26:75:
         c9:55:33:dd:2e:f7:41:82:fd:6b:01:98:e9:b2:a3:05:7f:fb:
         bf:34:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:21:06 2024 by rpki-client on console-ams.rpki-client.org