Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          kYN11XsI2WIUt3EchLHlX/UjNMjEI1h2Y2O5gzxLn38=
Subject key identifier:   9B:DD:FB:D5:12:9B:FB:BB:2A:9B:64:F3:2E:40:8B:E8:97:3F:D1:09
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       018F52492E67FC9FD7D36E5125D4614215A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 09:01:18 +0000
Manifest this update:     Tue 07 May 2024 09:01:18 +0000
Manifest next update:     Wed 08 May 2024 09:01:18 +0000
Files and hashes:         1: CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa (hash: VHPOBG5iXR9yXyXkTFoH5zsie3yZYG880vinlCDqsJY=)
                          2: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: jIzYpY9UAEqwGzCDXyCryB9dLUXNCcyQPb1yKE+R7jA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:49:2e:67:fc:9f:d7:d3:6e:51:25:d4:61:42:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: May  7 09:01:18 2024 GMT
            Not After : May  8 09:01:18 2024 GMT
        Subject: CN=9bddfbd5129bfbbb2a9b64f32e408be8973fd109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:ed:ad:b0:e9:6a:8b:22:33:78:66:40:48:
                    00:6b:ec:86:fe:24:de:8d:40:27:87:b4:20:ca:3f:
                    1b:bb:d7:06:ec:46:9f:16:74:bd:38:e9:71:8c:9c:
                    b4:4f:da:f6:6d:8b:f0:5d:2e:b2:73:6a:fc:f8:36:
                    5e:a8:9a:29:64:4c:9c:23:0d:27:71:72:2d:ea:8c:
                    a8:ea:9f:bf:c2:58:2a:4e:24:ba:8e:3e:88:51:26:
                    27:c1:d2:05:4b:62:c5:33:39:1f:02:da:0c:27:e8:
                    03:98:d2:39:43:df:06:e1:c5:84:a5:17:ea:24:13:
                    9b:44:b4:2e:b0:30:b6:4d:05:77:b6:0f:e0:4a:7f:
                    be:e0:36:b7:f9:b9:6c:c5:a7:ad:f8:31:b3:53:11:
                    a1:e4:90:c6:a9:11:c1:bd:f4:1f:92:74:a8:04:45:
                    10:96:0e:ab:74:1a:a7:42:21:a5:67:b7:e1:23:eb:
                    e4:b9:eb:ba:08:17:b2:fd:cd:b0:b1:80:3f:77:47:
                    ed:2a:9e:a6:4c:5a:e4:98:5a:27:07:6b:84:d1:1d:
                    ae:58:f1:c9:17:fa:6b:97:f1:df:99:e6:43:fd:3e:
                    c5:86:a7:af:50:c3:9e:d4:40:95:d9:d1:af:ce:36:
                    aa:6c:01:a9:6b:0d:22:06:39:7b:3c:31:e2:58:6a:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:FB:D5:12:9B:FB:BB:2A:9B:64:F3:2E:40:8B:E8:97:3F:D1:09
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:0c:c3:a8:cb:43:9a:7b:26:92:5f:77:51:fd:9f:2b:b0:
         91:10:3c:3c:e8:bf:f4:15:ad:07:f8:ea:45:6b:ba:50:1a:b7:
         87:4f:8d:e1:72:7a:0b:ec:e5:b4:2c:af:ae:b4:f3:f4:1d:24:
         04:b3:f4:6e:f3:f7:0a:ca:df:e1:02:89:96:0a:27:e4:6a:16:
         60:ff:14:af:e5:b4:12:de:e0:5c:6f:4b:f4:73:9e:a7:ba:a8:
         6a:9d:3f:7c:ce:ef:30:89:e4:fa:d8:73:74:b8:7d:70:f5:a8:
         d5:87:8a:37:d3:b0:d3:38:95:61:7a:b6:b8:14:2c:b1:c1:73:
         b1:b2:16:ef:12:fc:38:5c:85:7f:91:5b:1e:17:84:df:74:54:
         e7:5b:82:2b:b3:9e:a3:9c:ed:7a:7b:d4:16:a2:a7:12:9a:2d:
         67:70:43:6d:87:ec:f2:8f:df:af:01:82:54:37:27:e5:c7:28:
         97:8d:0c:e8:c1:09:03:c2:df:42:57:71:17:c8:92:59:5b:5f:
         85:d1:0d:3b:7d:c8:f3:91:dc:81:95:e5:c4:23:e2:21:68:b5:
         ff:49:7d:a2:b9:4e:58:7e:71:53:f7:e3:12:71:f5:0e:07:ea:
         af:5d:c6:1f:de:e4:14:3f:29:22:6d:85:26:67:1c:5d:f9:d1:
         68:08:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:10:41 2024 by rpki-client on console-fra.rpki-client.org