Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          QxyLmplHksrNtz2vysHHxIjYiTixqSX4g2TiZj0Ckgo=
Subject key identifier:   53:16:5B:1C:D5:7A:D7:BF:F3:E4:9B:A1:5E:6C:D1:3E:7F:DF:D7:68
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       018F8748D12937469CC1C9604486B66F65B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          0C87
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: 0ODk8P2R9JubMCPN-TovAaZGvu8.roa (hash: Qe40JmcntrFWs4nrdS/6UEw5VlO4rVVOpsvuszbbbP0=)
                          2: 28Pth53wKhWgK1J2V3VEf5zc6dw.roa (hash: Dxnox5Uo6i9Gkwk4VTAU+c7xVJK2oc5ivhC+9xu5gFk=)
                          3: K68G3dzuNkbWyzH-ZFsGQEEDbnQ.roa (hash: ypC9UNvcdbqSuXYuGIw4OB2Xjnp2Ol8KsW7qZsQdwEo=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: AmgMxLOJpPkVCQtSz4FN1JmxflScH6zMNBWNQmohX4k=)
                          5: _qEGUBs24kp-lFGWWQFL5oR2mao.roa (hash: aqKxwzkGdXqTsoFlt3DPbqi2MgvKUJo+TD03kn5Q2ko=)
                          6: ql3We4QVrTrcgYEhzy2kg-DIxvk.roa (hash: +2S1iCIA3tqYmwDDO+fJRilI+hUr6M1vkn4uOvn1UyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d1:29:37:46:9c:c1:c9:60:44:86:b6:6f:65:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=53165b1cd57ad7bff3e49ba15e6cd13e7fdfd768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:f8:92:eb:23:2e:8f:b3:d3:ee:58:71:eb:
                    64:06:ad:38:72:9d:e6:ed:95:b3:f0:40:7c:41:88:
                    29:e1:cc:3e:1c:a6:15:9b:0b:93:f4:76:f8:20:0b:
                    fc:58:98:63:2d:31:42:d8:9c:fa:d4:4b:45:81:1e:
                    ce:c7:ec:e9:d9:b5:42:bc:b7:47:54:2d:d1:01:61:
                    47:5c:70:c2:e9:fc:5f:1d:8b:47:ab:0d:57:13:6a:
                    73:f1:b6:a5:4a:b2:ae:0e:1c:b8:c7:03:b6:e0:d6:
                    12:b7:f1:29:f9:fd:5a:53:08:c6:ab:74:ff:3b:63:
                    fc:d7:74:22:96:67:0d:57:91:af:5d:7d:d5:9a:4f:
                    32:11:ba:5d:21:02:68:2f:d1:93:a2:09:75:bc:47:
                    4f:1c:5b:9a:05:31:a1:41:42:be:99:b9:44:a1:f3:
                    59:93:16:c1:9b:11:ea:61:36:74:39:6a:b8:81:1d:
                    db:43:50:e0:73:eb:50:09:ea:02:41:6b:21:33:19:
                    7f:a4:69:c1:dc:ce:18:5e:cd:c8:de:92:fa:0d:6b:
                    01:f6:15:15:e0:c7:db:b7:09:9b:7b:0b:79:2b:6d:
                    c4:5b:2b:64:25:c8:43:8d:b1:b5:07:9b:5e:ed:98:
                    34:e0:67:7a:5f:96:42:08:c8:a0:d5:7d:2b:02:c0:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:5B:1C:D5:7A:D7:BF:F3:E4:9B:A1:5E:6C:D1:3E:7F:DF:D7:68
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:85:73:4c:52:84:02:ca:82:bc:46:78:ee:cd:14:a3:c9:
         03:ca:49:38:9d:1a:03:0a:18:95:e7:2d:44:bd:73:9c:05:f2:
         e1:74:31:08:22:9d:06:07:5d:de:26:1a:0a:ab:47:f3:00:80:
         ea:d2:f1:d2:74:e8:ce:63:42:1e:a6:77:6c:30:de:d3:97:e7:
         3b:0f:f3:10:5a:0e:9e:dc:aa:f1:b2:83:a1:f8:18:57:4a:0f:
         09:97:5d:3b:77:63:21:76:34:fc:fb:79:bf:a7:13:95:49:3e:
         c8:4c:8e:ca:8a:71:79:89:72:41:ec:5f:16:cd:b9:70:b6:47:
         cd:b8:be:b8:72:57:de:0d:33:18:34:17:3a:60:9a:ed:e0:49:
         aa:67:e8:26:5f:8b:58:2a:39:09:7a:ad:58:52:f2:c0:42:89:
         98:92:e7:c0:6b:4c:88:7f:79:79:cc:61:f8:b4:10:19:af:4e:
         2c:b0:e4:0b:3c:92:dc:c7:de:cc:1e:2a:8b:fa:eb:db:98:15:
         7d:62:39:35:98:9e:09:52:d2:49:fe:f5:8d:67:95:7e:88:87:
         43:49:30:e1:e8:52:dc:3f:7b:2a:31:46:32:14:3a:0a:34:86:
         19:df:b5:f2:43:ca:28:49:07:b3:8a:80:20:76:63:e8:d9:11:
         51:4c:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:24 2024 by rpki-client on console-fra.rpki-client.org