Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
File:                     dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json)
Hash identifier:          24FzGAEKTSrCyI/iITxgbrdthZxkN9+HBlgoOAv1QBs=
Subject key identifier:   4F:0D:81:54:68:F4:AA:4F:D0:87:03:FB:B9:52:3A:4D:0F:22:AA:67
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Certificate issuer:       /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial:       018F8748767D893D676A4314734BDF115818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
Manifest number:          0D47
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: 5cPPBzr02Pwf9VCPPDiscGB-To8.roa (hash: iRc3CUUkIIkfsuaongQM8W8af2lvUn/rdW/eTxkz2Do=)
                          2: FHspIQ8XqOe39bJg9wbu1bmgKps.roa (hash: 6T7L0C47jNOJxeTn/OqdWtJNFcCLMqcAhlYuwVrUwyA=)
                          3: XKwTmg-rHTW399wjUwMZA1hhcpI.roa (hash: ERKSnhtg3F62FGfXplzQ29AONmfm0cAos7VYC3Lc1LU=)
                          4: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: gMGJ76mLGe6mXLWQGveULvZCPk+s0eKhik1ZYlK0cnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:76:7d:89:3d:67:6a:43:14:73:4b:df:11:58:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=4f0d815468f4aa4fd08703fbb9523a4d0f22aa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:55:0f:b9:f8:ce:7c:43:e5:b6:8b:35:96:
                    17:dd:a3:78:ca:24:82:6d:81:17:18:3b:fd:23:a9:
                    7d:89:da:ec:c9:c8:56:bf:4f:dc:85:17:4b:5a:f2:
                    e8:4c:16:85:08:1e:f8:f1:13:42:2a:00:e1:23:2e:
                    3d:33:c2:b5:30:32:95:e5:a7:38:93:dc:71:e3:c6:
                    9c:08:f7:eb:88:b2:55:aa:f0:d8:56:ff:a8:a6:fd:
                    41:7e:86:3a:26:47:7f:54:eb:6a:d4:f2:45:b3:6b:
                    ed:20:1a:eb:46:e4:1a:e6:f5:00:09:ca:e5:46:f4:
                    53:c5:8b:ec:6a:01:f0:5f:37:4b:5b:9e:fa:ff:b4:
                    6d:d4:8a:19:a3:c1:46:5c:a8:f2:f6:ef:45:8d:5d:
                    a7:0d:cc:ce:a1:9c:c6:68:66:11:f9:4f:76:66:f6:
                    9e:b3:9f:fb:2d:29:8a:71:a1:f1:e3:80:11:cb:9c:
                    d2:b0:db:64:47:cb:0b:ee:3d:1b:ca:38:e1:fd:e3:
                    62:a8:36:7b:4e:0f:49:4c:8d:b6:7f:63:ad:a8:e9:
                    c9:d6:45:b8:09:2d:cb:b3:33:34:74:70:03:61:10:
                    13:80:59:2a:a9:da:38:98:73:a3:56:b1:3e:42:7e:
                    1d:aa:fe:cc:26:db:42:e7:fe:f1:26:b9:85:96:1f:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0D:81:54:68:F4:AA:4F:D0:87:03:FB:B9:52:3A:4D:0F:22:AA:67
            X509v3 Authority Key Identifier:
                keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:82:88:75:57:2c:1f:54:14:0f:0d:b7:ee:a3:ec:99:3f:
         cc:bd:c2:15:f5:9a:09:6b:11:89:7d:54:b9:74:de:1e:19:da:
         85:c4:b0:cb:94:66:56:df:8c:ca:72:f6:86:88:80:f8:3b:60:
         9b:ee:6c:6b:cc:3a:91:bb:af:6e:d0:90:62:93:97:b1:b2:76:
         65:61:ba:a0:e1:b8:7f:49:c8:83:91:51:69:5a:05:07:a9:ed:
         eb:7b:44:f8:da:eb:05:c4:bf:0f:77:6b:43:84:bc:8a:aa:02:
         d1:e1:a6:4e:f0:35:d5:ac:9a:ab:9c:01:0f:34:fa:59:20:d3:
         52:56:65:3e:c7:2c:95:fc:8a:25:ee:b9:21:d3:f6:42:ee:1e:
         3a:75:96:c0:da:1c:2d:6c:3e:d9:56:95:78:0d:76:4d:44:07:
         1b:6d:8e:6e:0f:12:d5:b9:d3:41:45:c8:79:d5:d1:28:2c:77:
         71:c9:3d:f7:b4:c2:c0:85:94:55:26:33:a9:a9:aa:a9:cf:80:
         c8:18:15:37:83:6d:de:67:bb:1f:9f:2b:b6:3e:57:17:58:ac:
         1a:1d:2b:cc:9c:f0:9c:7c:ed:dc:1b:8a:a5:96:25:50:18:9b:
         99:40:d1:fb:80:02:18:db:6d:7d:a0:15:73:89:93:ec:6c:19:
         30:78:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:48 2024 by rpki-client on console-fra.rpki-client.org