Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File:                     iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier:          8UeDizv6DtXfIEb0CJEfTFRg05YFxXwT15WVjD2DT8U=
Subject key identifier:   4F:03:91:81:E2:E8:92:7C:55:F5:9E:01:33:00:A0:B8:6E:D2:85:32
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer:       /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial:       018F874AE4CE7516DB06DC2857D9E88D0CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number:          0873
Signing time:             Fri 17 May 2024 16:03:03 +0000
Manifest this update:     Fri 17 May 2024 16:03:03 +0000
Manifest next update:     Sat 18 May 2024 16:03:03 +0000
Files and hashes:         1: g0hIsyA4evou3K5Zv_WWiVwmJZ4.roa (hash: ypSslI9M/fGVrNo6enXx4fsuGzo4XxzKWBh20TjAJyw=)
                          2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: HhzxtiNAFLAdCUIz6D49hO+8chIlqgFiFIf9Zhif9hw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e4:ce:75:16:db:06:dc:28:57:d9:e8:8d:0c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
        Validity
            Not Before: May 17 16:03:03 2024 GMT
            Not After : May 18 16:03:03 2024 GMT
        Subject: CN=4f039181e2e8927c55f59e013300a0b86ed28532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:7a:ee:94:a9:4b:b4:e2:b7:64:18:c1:4b:
                    b8:c8:c9:e0:1f:8c:d8:ea:c2:41:39:18:41:3c:f8:
                    cd:24:c7:15:be:56:ad:3d:07:f9:d7:77:0f:5e:86:
                    6c:75:e1:8f:06:4c:80:dd:85:16:b2:ad:8f:ce:19:
                    5e:f8:6a:55:26:91:01:e5:e9:22:66:a9:c5:af:10:
                    fa:ce:34:73:bc:d6:8d:ca:62:43:55:d0:f3:7e:c1:
                    01:b9:78:e8:29:93:00:19:7c:95:80:8a:3a:b0:5f:
                    85:20:94:b4:66:b3:db:52:8c:23:f5:ce:ce:a4:ea:
                    19:85:13:88:22:22:dd:f7:39:88:33:00:65:59:47:
                    5c:ed:18:08:c7:65:55:b6:cf:bb:ea:fa:e6:8f:62:
                    12:0c:b0:df:88:15:2f:9f:eb:a6:4e:e2:91:6c:13:
                    d4:8b:4e:1e:d7:94:38:cd:d4:dc:32:a8:c6:a7:3f:
                    c2:ea:d6:40:19:cc:48:69:4a:65:64:67:0d:ac:7c:
                    61:38:3a:fc:2f:95:59:a8:3d:77:b9:3e:f1:71:94:
                    14:70:c5:1e:f7:23:68:85:d7:82:6a:d5:87:23:93:
                    9d:73:cf:6b:a0:0f:e9:2a:11:76:cd:cf:92:70:fb:
                    3d:de:61:9e:46:46:59:7c:2b:8f:ed:72:7e:f1:76:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:03:91:81:E2:E8:92:7C:55:F5:9E:01:33:00:A0:B8:6E:D2:85:32
            X509v3 Authority Key Identifier:
                keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:47:df:e6:51:4a:b0:e1:75:fe:c3:e6:24:6d:7d:d5:bd:b0:
         56:d0:1c:6e:c6:b6:ff:7b:93:8a:79:b1:cd:28:fb:aa:17:8f:
         2d:a9:0a:a6:ac:34:1f:57:e8:f1:bc:31:bf:88:d1:67:6c:c9:
         e1:87:70:bb:3f:57:f9:eb:c4:b2:97:62:bc:2f:83:42:ff:95:
         bc:78:55:92:c4:22:87:07:e2:30:09:bc:e4:f4:b2:da:76:c5:
         cd:ae:e3:1d:72:1d:fe:ef:da:ce:11:1d:a1:d3:7e:55:e1:8c:
         00:81:13:46:2d:a2:76:7f:46:4f:f7:52:a5:8b:ba:d0:75:31:
         73:70:09:50:7a:37:43:96:7b:64:99:af:6b:94:9a:03:b7:b0:
         00:07:72:fe:7f:aa:5f:16:5e:de:c1:05:df:e0:b4:4e:99:2e:
         42:9c:76:61:73:05:b0:fc:92:28:fa:44:bb:f1:f4:f4:fb:d2:
         0d:8b:d2:9d:09:7e:70:be:ed:a6:09:ba:cf:90:83:db:da:5c:
         33:23:a1:b8:87:ab:13:8d:bd:e5:05:9e:9b:5f:10:8d:f5:4f:
         e5:47:50:83:7b:43:ee:8b:d3:6c:09:47:61:a9:1e:09:8b:87:
         19:8a:08:0e:d1:b6:95:24:59:6c:7c:43:66:cb:0f:e5:c8:50:
         30:35:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:30 2024 by rpki-client on console-ams.rpki-client.org