Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File:                     mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier:          KxVW8dz9LT7cBVE71pndTUwYXhMZbbVBkNjoBDIMzSc=
Subject key identifier:   2F:55:65:CB:E1:29:A2:AD:0F:0A:78:35:FC:5E:ED:15:73:37:B0:40
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018F9A612CCFAFBD58BD9E11537CF5BE1302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number:          11AC
Signing time:             Tue 21 May 2024 09:00:10 +0000
Manifest this update:     Tue 21 May 2024 09:00:10 +0000
Manifest next update:     Wed 22 May 2024 09:00:10 +0000
Files and hashes:         1: 31ZwNrP5Hi-QY9WNxmNCXj48saY.roa (hash: nf76tkncSAwe8YEEOCkrd7gs72j1d4uYvrtr+LQqZUQ=)
                          2: 4678rxOgfjNEh30MqXRXYEkaQFU.roa (hash: u3BPXQ0yKQKo7AaGAMkoPi6Bq40Vk+O3jffEMXwrqd0=)
                          3: 6TT9Vx-iQajBf_2AdooJiVM-fsg.roa (hash: xb4bDrdPjufkFg+3tMHHcBOfDtRH98C+nmPCAScvI28=)
                          4: MVT7ziLr6Du6O85dMFj4gvBgBvk.roa (hash: uUBcWWw63ocYP/y7iF7gfOBkoTsXTa/9FMnFeSL4PHc=)
                          5: NNsckov9kC-mP3r6PSH82FBdGZA.roa (hash: 6KDkfRS5DOR9feURfq2ZgY0gnH2rPlFCjZOcfk7323k=)
                          6: jxS2wXeG6lxvCjcAhghQuvJS5_I.roa (hash: qZf2LOxcGWVBHKceml47Tqbbv5T/aJ5F5PubfrwiV0Q=)
                          7: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 6eA4RRb7VY+gRY8vJH4R8YijznoLhpDh3kgJ6zwyhGA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:61:2c:cf:af:bd:58:bd:9e:11:53:7c:f5:be:13:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: May 21 09:00:10 2024 GMT
            Not After : May 22 09:00:10 2024 GMT
        Subject: CN=2f5565cbe129a2ad0f0a7835fc5eed157337b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:34:cd:95:82:1c:c8:ca:0a:0d:23:16:06:
                    f7:fd:d0:f3:af:6d:7e:9e:ad:c8:69:21:ba:09:93:
                    78:a2:52:ee:26:be:a8:84:eb:76:39:60:ef:f3:e1:
                    fd:58:42:16:71:ba:0e:32:32:26:a5:6d:8d:41:32:
                    08:8b:f9:15:35:cc:c2:9c:b9:a7:f9:bf:65:8a:84:
                    2f:44:57:67:5a:b8:c1:a1:1a:e2:ce:9a:54:16:23:
                    d2:33:28:6b:0e:52:67:e9:cd:fe:d4:8d:2a:df:27:
                    80:4a:60:a6:20:b1:f4:93:3f:1d:54:c9:3a:25:be:
                    07:95:31:72:2d:75:ac:e1:e9:a2:a0:94:58:2b:e0:
                    7d:7b:c0:8d:0e:40:0d:c4:b8:ba:2d:ac:ab:f6:65:
                    51:b7:93:5a:a3:25:69:78:5f:fe:e5:f2:11:cb:01:
                    fa:e3:27:d1:e7:7f:ce:05:8f:b2:71:5d:5d:d0:82:
                    6f:a8:41:1a:b3:d8:66:b7:2c:f9:75:3f:26:e7:7f:
                    59:34:91:2d:49:13:b8:79:40:8a:f2:6f:72:8c:c1:
                    49:b4:8c:7e:41:f4:4c:95:60:e0:8b:64:f0:49:4d:
                    8e:27:3a:ef:88:df:ce:b9:e0:56:30:f2:25:69:78:
                    40:18:44:63:46:3c:49:64:0d:fa:23:22:9d:c0:30:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:65:CB:E1:29:A2:AD:0F:0A:78:35:FC:5E:ED:15:73:37:B0:40
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:18:1e:6d:c8:eb:d8:0f:1d:ec:4f:a5:26:ff:52:ea:56:d4:
         83:8c:25:31:ac:37:27:57:40:cc:54:96:c3:53:2d:d3:1b:1d:
         4d:4b:95:81:c8:4d:e0:8e:10:1d:3e:c8:2e:29:22:39:fb:7b:
         f9:21:3a:84:31:05:f6:dd:b0:6a:a8:fa:fa:47:7c:ed:87:8c:
         73:3d:1c:1f:3b:fa:20:c5:58:47:1c:8d:0b:53:70:0e:a4:64:
         3a:11:30:9b:96:c2:7b:5e:33:5a:10:e6:dd:a8:dc:44:78:53:
         09:82:c9:68:ca:78:0d:00:5b:54:fa:b0:30:c9:58:92:e2:d3:
         49:0d:65:02:28:a4:d0:87:43:94:78:10:52:89:f2:4e:36:1f:
         4c:c6:ba:78:af:fd:4b:ec:83:12:06:18:6c:46:28:92:84:37:
         27:d4:de:68:5d:83:e4:9c:08:32:51:5a:c0:94:21:e6:1e:32:
         46:98:45:25:93:a2:3d:3a:bf:6f:d3:f8:f5:cd:b8:12:80:64:
         32:01:c6:b5:83:6f:a3:0d:b7:64:ae:ec:d5:6c:79:69:fd:59:
         6e:51:bd:1d:a4:5e:04:71:89:03:0b:ff:07:54:3d:82:fd:c9:
         41:22:74:ef:73:ad:d4:b4:c2:35:98:83:71:dc:03:45:59:7b:
         b3:8b:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 11:00:34 2024 by rpki-client on console-ams.rpki-client.org