Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File:                     cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier:          vtPtDp31tucv5OcNhlZimOwT5/OqoKcIn090+r9Dws4=
Subject key identifier:   CD:14:36:F3:81:86:DE:88:19:5F:CD:42:5C:34:56:B2:28:1C:AE:0C
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer:       /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial:       018F8749664367CA8AA1FC3E8C48C214DEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number:          0D23
Signing time:             Fri 17 May 2024 16:01:25 +0000
Manifest this update:     Fri 17 May 2024 16:01:25 +0000
Manifest next update:     Sat 18 May 2024 16:01:25 +0000
Files and hashes:         1: 5Pt2NN4TjG1ObQ7gbMwFin75nGU.roa (hash: SYC4JjB8iYvq1MPcQjRzJXbnTPipD6dZgTgza7z/dac=)
                          2: 6Q52Yd6fsatiSRJ3LulMjuhnDjs.roa (hash: Ad9/rpOUoEI1Y32oSAN7NksQV2yrHf4o7c11soeqFIo=)
                          3: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: kRwgemwpDh4ov5drd1bgTH5FgnaIYydnPJk+ENMrJAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:66:43:67:ca:8a:a1:fc:3e:8c:48:c2:14:de:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
        Validity
            Not Before: May 17 16:01:25 2024 GMT
            Not After : May 18 16:01:25 2024 GMT
        Subject: CN=cd1436f38186de88195fcd425c3456b2281cae0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:9b:f7:9f:46:5b:c8:70:e1:47:74:2a:3f:
                    f9:ab:9a:ae:9c:80:e1:bb:08:7e:0e:d7:c3:d2:06:
                    f2:ab:fe:4c:6e:5f:3e:fa:3b:2f:60:18:f4:ef:03:
                    fb:b5:2b:47:f3:27:1b:99:e4:d7:57:6c:c0:9e:ec:
                    25:57:c7:01:55:62:17:bb:54:5c:67:30:5c:07:de:
                    cf:cc:d5:dc:aa:30:25:25:0e:7c:01:7e:a5:1f:6c:
                    38:6c:53:8c:59:60:df:21:0b:46:92:3d:07:48:1b:
                    85:e5:6f:42:84:25:fd:12:6a:19:0a:ed:2a:bb:9a:
                    6e:48:e9:27:a3:c1:6a:17:29:91:a7:e6:c9:a0:41:
                    f8:c9:5e:76:71:7a:e1:d5:fc:c2:98:e5:09:95:db:
                    a4:3e:17:16:ca:66:20:56:01:3d:bb:1d:b2:dc:b9:
                    fc:7b:ce:21:17:6a:a6:1d:2b:5b:cd:3b:8c:c3:37:
                    a1:67:df:1d:b4:7c:fd:1b:7e:fa:c8:fb:6c:c8:63:
                    1a:ff:e3:8c:93:ba:74:fd:4c:29:26:bc:4e:d0:ba:
                    76:18:9c:04:11:e0:a8:92:b1:df:ec:98:68:e3:4f:
                    b6:3e:3d:97:ca:9e:8c:8b:1c:e3:f4:aa:d4:9b:06:
                    29:d7:80:1a:15:e6:29:a8:39:74:e1:7e:8b:65:23:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:36:F3:81:86:DE:88:19:5F:CD:42:5C:34:56:B2:28:1C:AE:0C
            X509v3 Authority Key Identifier:
                keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:94:34:47:7e:18:8d:58:8f:de:30:8b:ae:37:21:80:02:85:
         18:db:22:bd:47:78:61:c0:20:bd:27:e3:cd:50:b9:21:ff:48:
         cf:3a:1a:76:6f:3a:fd:7f:07:df:60:32:c9:04:57:a1:bc:81:
         59:40:0a:a5:eb:d8:4d:cc:6f:13:5b:60:18:0e:b5:24:d8:84:
         9d:c4:52:e7:8a:a3:ea:87:a8:fa:6e:94:80:7f:fc:19:b4:d4:
         cb:06:a4:6c:db:61:9a:dd:79:59:0b:c1:5d:65:22:81:98:8f:
         17:93:ed:09:cc:11:0b:e3:c7:53:30:65:b1:41:6e:2f:bc:33:
         19:94:c4:c4:34:98:4c:2e:f7:5f:eb:70:e7:46:65:f5:4a:38:
         62:9a:98:c9:fd:fa:42:0a:f2:1c:de:43:9d:17:9c:b5:41:7b:
         0a:88:42:4b:c1:ac:0f:35:53:1a:e9:54:c8:82:ba:fc:23:42:
         52:d7:d3:7d:1b:4f:b2:d5:00:c8:b5:41:a6:cd:cb:5b:e5:ee:
         65:ae:a1:c6:a4:c7:7b:b8:b2:f0:1a:dc:ce:db:77:32:c1:6c:
         6a:51:d3:d6:6c:a7:57:7c:32:80:6f:39:84:d3:cb:b1:c6:42:
         8f:66:47:ef:49:a5:d7:1b:ee:8b:83:76:a7:06:bf:03:98:7a:
         e2:52:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:53 2024 by rpki-client on console-fra.rpki-client.org