Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
File:                     DoMf1wxr03oqddeg6sAxyS2o4YU.mft (raw, json)
Hash identifier:          y+LXhfcMxGU0ATBPi+ttsI8PLGFusiRblVeHbmjlG7c=
Subject key identifier:   53:AA:29:32:45:BD:F0:07:02:65:E3:CE:BF:05:EE:EB:F5:9B:96:36
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Certificate issuer:       /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial:       018EF8623C16EB178374D133EB3D1A9CEEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
Manifest number:          0DAF
Signing time:             Fri 19 Apr 2024 22:02:51 +0000
Manifest this update:     Fri 19 Apr 2024 22:02:51 +0000
Manifest next update:     Sat 20 Apr 2024 22:02:51 +0000
Files and hashes:         1: 2eiBe-YvumNiX53d4cu8M055i-E.roa (hash: EP36YLWN1HyMZ46/gLn5uEJ3Pk+dywnfnNeYJrL+PNM=)
                          2: CvE0ZB-b61MXkge9ERrx_uHdNiU.roa (hash: eC8K4kTdj7hMym/ulA3PVV/PTqUee3gTns5GbFnyllE=)
                          3: DoMf1wxr03oqddeg6sAxyS2o4YU.crl (hash: pttbExCjGR/ac4PuuP7Hkb8r4iMc72PL1KQPRdpaaNg=)
                          4: GadQzAbtTgXl4GYPZXfHrpxnomE.roa (hash: QXyr56urikoFKylCgF6CElhTS3/QZ4Ytc6v/3SU4UPo=)
                          5: YSnxJepqddhT4iz97XOGvbUK_Lo.roa (hash: 6HVAAVZ1D/gHmhy0WaGOLnjQMLGZgVTfwqyoEIy4bLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f8:62:3c:16:eb:17:83:74:d1:33:eb:3d:1a:9c:ee:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
        Validity
            Not Before: Apr 19 22:02:51 2024 GMT
            Not After : Apr 20 22:02:51 2024 GMT
        Subject: CN=53aa293245bdf0070265e3cebf05eeebf59b9636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:4e:06:ea:25:9f:18:f7:77:c7:3b:d9:24:
                    b1:12:29:55:14:71:c0:b3:c3:d4:9e:12:aa:0b:df:
                    0f:ff:34:f3:28:43:45:0d:4d:27:0f:e1:61:ac:07:
                    e2:6d:33:98:0d:36:c1:1e:22:2e:fc:49:76:9b:e3:
                    cd:9a:4a:09:fa:32:dd:2f:15:d5:63:9a:44:56:5f:
                    b4:f2:df:85:bd:d9:73:27:94:77:c6:19:6e:69:02:
                    13:8a:62:2d:f6:e1:ff:82:1e:9b:46:f8:a3:ff:ac:
                    94:39:a1:2a:1f:15:b5:a7:77:cc:1f:af:54:3f:4f:
                    f2:9d:0f:ad:c6:94:84:08:e8:42:45:fc:ae:cc:5f:
                    96:99:13:9b:49:a8:eb:4e:95:cf:92:c4:ec:9b:55:
                    02:0d:9d:f5:9c:2d:c6:21:5a:f5:38:ff:a1:ea:b5:
                    9b:95:03:b3:a9:f4:8b:40:b4:0e:68:cc:ac:1d:dc:
                    5a:e1:cc:2a:7c:c3:7c:95:4b:11:c3:6f:d1:ec:f8:
                    45:cc:5a:71:e8:d5:8e:32:de:3b:3b:21:67:d4:61:
                    98:44:52:ae:4f:5f:b0:69:a1:f5:7b:41:9c:94:22:
                    3e:d2:ee:b6:f3:4f:6e:a4:c3:dc:af:1c:71:7b:36:
                    68:df:a4:7a:59:28:62:3a:a0:c3:bb:f6:11:8b:9d:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:29:32:45:BD:F0:07:02:65:E3:CE:BF:05:EE:EB:F5:9B:96:36
            X509v3 Authority Key Identifier:
                keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e2:86:32:f4:be:d1:4d:1b:1a:68:58:4e:fa:aa:2f:ca:21:
         86:26:bf:9c:e9:81:fd:9f:04:4f:82:b9:6c:5f:3a:ae:39:33:
         6f:82:dd:e5:49:09:22:f2:a2:6c:c6:e6:63:e9:44:20:6a:d3:
         e4:c2:0d:8e:cc:03:52:f0:ea:58:c4:12:b5:8c:c1:fe:1d:34:
         12:62:74:7d:61:f4:24:ef:2f:92:73:13:b3:04:72:bc:a2:b0:
         15:64:38:df:48:02:f7:18:d1:08:87:d4:f9:99:ed:48:d4:07:
         54:a3:b9:d7:6f:3e:e8:da:f9:c3:e6:82:40:12:53:96:84:01:
         07:92:26:74:27:c0:f7:69:cc:fb:5a:d9:d3:98:6b:89:8a:dc:
         76:19:c1:5e:28:0b:95:17:41:15:bd:b7:b4:d2:9a:9f:a2:c7:
         03:60:9d:56:75:02:5c:f7:4a:5b:40:f5:13:8b:d6:97:85:86:
         97:2d:5d:7c:3c:8f:38:d0:42:3a:92:cd:08:3a:4b:d3:35:cc:
         c4:47:4f:8b:d2:88:59:5a:bf:a0:c4:71:94:67:84:b2:96:3b:
         76:f0:83:10:c4:6a:f3:4c:5a:88:b3:e8:e2:72:95:c1:4e:eb:
         98:c5:0d:20:72:6f:fa:98:dd:6f:3b:ad:ac:ec:6b:c4:9f:b5:
         fa:85:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:26:00 2024 by rpki-client on console-fra.rpki-client.org