Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          sX4YZPsTrSczXKeF269PIGTV9HmEhmv5dFKUFvID3vw=
Subject key identifier:   A3:03:8B:CF:E5:B8:78:72:46:F9:3D:B1:C5:D7:1D:1A:11:89:E5:0D
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       018FA252DEB4B48D1772EFAD2A5461E2A4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          11AA
Signing time:             Wed 22 May 2024 22:01:30 +0000
Manifest this update:     Wed 22 May 2024 22:01:30 +0000
Manifest next update:     Thu 23 May 2024 22:01:30 +0000
Files and hashes:         1: FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa (hash: zsJGlFFxdMa9D+vJl6WrwtfteEMMNeJ0plGG4w6nRFQ=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: FmjRCkVShn4qsTP+eln8gSAni65sDxLV3D3eYF2iMBk=)
                          3: W1P5dKfuw5hrshhUs34-OCzDBkw.roa (hash: KJ6YL7gffvQohgEl4JgChkYggCKJbyG9WlRh/MZe/Xc=)
                          4: mgZJPL0nR3ZEehAjPHzv4kedWww.roa (hash: 89tsemg9bwljRD4qyclcULNS89/gjzWeZiimoRrRYFo=)
                          5: wTSlLAapVK-K-mMLcdSHFCZMVrE.roa (hash: 3D1AhrE1B4fyUWJgZWcegasLf4kbw/3Ho2+sFtiZE1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:52:de:b4:b4:8d:17:72:ef:ad:2a:54:61:e2:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: May 22 22:01:30 2024 GMT
            Not After : May 23 22:01:30 2024 GMT
        Subject: CN=a3038bcfe5b8787246f93db1c5d71d1a1189e50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:51:18:35:09:a1:ab:73:f1:d4:be:9f:4a:
                    2e:70:82:f7:b0:e4:b5:c6:97:c9:a8:e0:b8:87:2f:
                    8f:a4:0e:06:cf:cd:dd:1a:74:fd:98:02:aa:dc:56:
                    46:15:e7:45:5b:10:ec:60:24:c7:36:5f:e4:c7:c5:
                    56:38:a0:7c:d0:d4:2f:5a:88:ef:a2:ab:97:2d:20:
                    02:db:d8:7d:2b:e4:ed:24:15:a0:0f:3e:e6:70:c3:
                    7e:e2:ed:40:c5:8d:fa:ac:aa:63:bb:58:36:f4:21:
                    ff:39:dd:49:47:11:21:2f:4f:e4:ca:96:8c:ac:0a:
                    9f:d3:4b:c5:17:65:be:9a:23:b8:48:56:5a:7b:ad:
                    23:48:ee:bb:16:25:ce:97:bb:05:9a:37:60:2a:1a:
                    95:a0:4f:c9:bc:aa:54:c1:56:ae:17:ec:d1:b5:8c:
                    d6:8e:b1:ff:1b:b6:4b:28:d4:82:76:40:0e:48:3e:
                    2a:1c:37:1d:3a:db:95:3f:6a:fb:00:ab:f9:0b:16:
                    94:0a:8e:1d:a3:92:1e:0a:90:60:9a:66:fe:3a:33:
                    97:63:f3:da:64:86:56:00:a3:93:35:f2:f6:f9:f7:
                    a2:36:91:3c:5e:ef:c3:d1:f9:f4:54:9d:48:ca:6b:
                    4d:88:c9:48:f2:70:ef:b8:b2:a1:7d:2d:9f:99:62:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:8B:CF:E5:B8:78:72:46:F9:3D:B1:C5:D7:1D:1A:11:89:E5:0D
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:42:d1:d4:a4:2b:1a:35:9a:9b:91:40:6b:99:76:28:3c:ee:
         bf:cf:5e:62:7e:54:b5:00:2e:6e:24:7a:3d:6f:ef:0b:87:44:
         b3:7b:a6:09:b4:9d:e0:4d:eb:88:ae:5f:ef:27:6d:f7:a9:80:
         8d:ef:92:3d:12:5b:07:15:12:aa:f0:9e:0b:d8:25:1a:e7:3e:
         b7:1c:60:7c:73:24:af:a8:4a:68:67:bf:86:b4:18:05:7d:4c:
         0d:44:f2:51:59:7b:42:36:9f:16:43:4f:cc:84:73:89:e6:e1:
         5e:0d:3e:bc:42:0c:a0:8e:f6:a2:55:8b:50:44:56:d1:a1:d2:
         48:00:be:85:5b:5b:54:7d:73:77:32:ae:53:9f:df:4b:e3:0f:
         7b:50:55:6c:b9:f1:4f:8d:12:1a:9b:d0:5a:c4:19:84:fa:ef:
         cb:f1:9b:dc:f4:5c:7a:b9:7c:5b:ac:5e:ea:c1:0c:74:25:02:
         e2:ac:bc:c5:81:8c:a4:d2:6e:3d:ab:19:0d:8e:13:b3:20:2c:
         bc:8b:1a:4d:17:58:f1:66:13:a8:86:51:47:7b:75:d0:c6:52:
         45:22:6f:ed:ca:78:60:83:20:90:64:f1:2e:77:fa:a3:76:d8:
         a6:55:48:2e:f9:17:7f:2e:24:e7:af:a1:8a:f4:4e:ed:ec:dd:
         bb:2b:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:06:36 2024 by rpki-client on console-fra.rpki-client.org