Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          VgMgRZR7QSTProlfKqWqYeK1f9S0AIu7MIY+q2+jyvs=
Subject key identifier:   22:C7:45:45:F4:F6:7B:BB:88:45:0A:5A:BB:05:47:20:1A:35:00:44
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       018F87494757EE5A1752D8C7C8FCB5B7DB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa (hash: hojjMBBqoepApnb8BYVt7GHuigGFUWpXBLG3KjlCrA8=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: z+GzzLzkWN048i8T4jSyhV8uEjvSSwAcmwXMRl0mqfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:47:57:ee:5a:17:52:d8:c7:c8:fc:b5:b7:db:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=22c74545f4f67bbb88450a5abb0547201a350044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:39:e7:ed:51:4c:41:cd:58:1a:52:a6:5b:
                    90:31:7d:94:0b:01:fa:66:e2:96:72:35:e2:f2:2a:
                    1a:da:b6:06:b7:a5:e5:2c:18:69:45:c4:40:35:47:
                    e1:f1:77:49:26:9a:15:66:2d:41:8a:5c:0d:6d:15:
                    8e:99:eb:9a:b2:c5:2b:0d:ac:d8:eb:80:f1:75:9f:
                    34:b3:7c:14:37:d5:a0:ae:b7:5a:7b:79:0c:cf:3b:
                    4c:e3:6f:43:b9:e0:f2:9d:f7:a8:bb:ea:cf:ea:ee:
                    3b:24:8a:f1:e4:29:18:d2:00:ba:f7:26:0c:2f:fb:
                    5c:01:30:cb:67:1f:4f:09:52:cf:8c:fd:c1:c3:2f:
                    9a:ec:2c:a5:8d:0d:4a:be:c0:49:4b:b5:88:4d:5d:
                    6a:11:9a:c5:28:4c:8c:44:dd:fb:6d:c7:b6:6b:81:
                    6b:08:37:50:68:2f:92:21:9b:c5:fd:37:1e:b7:cc:
                    49:29:af:46:74:80:3a:42:d0:6b:87:8e:8c:5e:f6:
                    04:c9:6d:f8:d3:19:6c:43:86:23:f7:5d:85:d9:c1:
                    4c:87:10:d0:82:21:1d:5d:17:82:5f:44:fd:42:43:
                    57:15:02:ba:19:be:ce:97:d9:9c:16:4c:49:f3:f0:
                    29:f8:90:53:20:99:0a:e9:66:67:85:41:c1:82:33:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:45:45:F4:F6:7B:BB:88:45:0A:5A:BB:05:47:20:1A:35:00:44
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:bd:dd:3d:31:2e:8f:e9:98:aa:7e:3b:7b:45:c9:76:ec:
         a9:b7:fa:0f:57:f6:50:6d:28:f8:a9:71:16:b6:48:15:b0:3d:
         c7:51:8b:5b:89:81:80:a8:2a:25:1d:e3:f3:74:e6:ca:ab:6c:
         f9:8d:dc:68:ad:fc:f5:50:ae:68:fb:ef:27:c7:03:5f:bc:ad:
         21:03:f5:ae:0a:83:d8:51:3c:ed:1d:4d:ec:ce:5d:3c:3d:4f:
         c2:7f:df:f9:79:f0:38:3c:87:87:1d:ed:06:83:20:a6:e5:58:
         91:68:97:57:3c:87:34:24:33:a5:91:46:2f:03:37:43:b4:81:
         f3:fd:c5:dc:cc:92:4a:f8:d3:c2:11:57:50:5c:1e:d5:58:38:
         51:69:c8:00:a1:b2:e5:74:99:0b:d0:3e:20:b0:3a:6d:63:96:
         b2:79:fd:ac:1d:5e:b2:90:34:36:8b:b9:95:71:6a:02:bb:05:
         60:22:03:13:d8:21:70:af:ec:09:cc:1b:34:66:e9:3d:c5:79:
         aa:30:29:68:70:ed:cc:3e:da:ae:b5:08:9a:7c:70:90:bb:e8:
         ed:18:2d:8d:a9:15:6d:37:b0:c5:e6:a8:bc:11:1c:0b:54:73:
         6f:f1:3b:63:aa:b2:ab:3b:f7:9a:f0:65:02:e9:92:de:15:33:
         d4:79:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:08:27 2024 by rpki-client on console-ams.rpki-client.org