Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          FDdnGOdymx1yeUy+WEgK5kSqKIqVHfVNfqwguUaHCtk=
Subject key identifier:   68:3E:B3:6E:EB:42:5E:D8:12:21:79:68:C1:4B:DD:9F:2F:29:92:A9
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       018F91271E6C5CABFB47F9BC451E38D4D86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          093B
Signing time:             Sun 19 May 2024 14:00:10 +0000
Manifest this update:     Sun 19 May 2024 14:00:10 +0000
Manifest next update:     Mon 20 May 2024 14:00:10 +0000
Files and hashes:         1: VOeuLpOx-9rUtgpc9mWKzO61Aq4.roa (hash: +7bJmLneF8fZVWXj2rmXr4Zs7B/A4q+acRp3+yJXBiQ=)
                          2: Z_BZFUL6C-ftNQc0lkNg79gtamU.roa (hash: 06W35BAIdQfT0RghqgBCJxAQ2Nuvlau1PPbEOkY138c=)
                          3: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: y1pPHoq70M/tH7F50h6Nf/kPDG1bVP7KEKWBi8nNdIg=)
                          4: mlyepGde1QkXQLI3PozR6-0BQq0.roa (hash: tqqc54mT57smm52qHcwqGEivsll9fRnKNCuh4QtSzuU=)
                          5: r-DPGMFRID5R-xWnBSAYnp36D6E.roa (hash: 9Z+qwkaVjPyqUrg8V5GXBKhweUM8CGQTaZcF605ND1o=)
                          6: zaJIAUxhzCrxvEgoS5zKchAANJs.roa (hash: NWWL6CjZ2TvXbRhCdkfuikea6EinMNl+AcqhTIVDIOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:27:1e:6c:5c:ab:fb:47:f9:bc:45:1e:38:d4:d8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: May 19 14:00:10 2024 GMT
            Not After : May 20 14:00:10 2024 GMT
        Subject: CN=683eb36eeb425ed812217968c14bdd9f2f2992a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:70:fb:d8:8d:3b:fb:2f:8a:8a:47:ac:33:
                    77:5f:c2:9d:85:df:f3:e9:7a:50:14:7a:ab:d5:3e:
                    8d:60:16:b4:e9:99:40:38:5d:6e:80:23:aa:9a:5c:
                    87:f5:8d:f4:f5:b6:29:62:93:f1:72:89:87:f3:23:
                    56:7e:3e:2e:53:4c:72:8d:6d:c8:f4:a4:50:c9:29:
                    be:2b:5b:1f:a2:23:a8:cc:a5:16:ae:23:bb:4d:07:
                    fc:52:9c:63:90:6b:21:8c:98:e5:32:ac:81:60:72:
                    b1:cc:0a:11:22:45:7f:d0:0a:c4:f4:98:d8:ae:83:
                    b7:cd:b0:5c:72:6c:64:31:14:9f:46:8f:b9:64:d0:
                    0f:60:d8:c1:7d:fd:70:63:90:8c:46:3a:3b:7b:a4:
                    36:75:ec:ae:6d:d1:fd:ba:c6:c4:10:c8:33:39:26:
                    4c:4e:a4:73:e2:f8:ad:51:21:4a:81:6c:75:03:f2:
                    3b:7a:07:48:d5:b1:56:95:15:ba:71:37:fe:16:d4:
                    c1:38:8f:35:ef:fb:12:28:85:de:80:db:e3:76:6b:
                    22:f5:9d:40:7b:9b:fc:94:bb:3d:b3:57:99:cf:be:
                    1d:cc:c9:db:b8:64:9f:19:06:77:b4:8e:d0:6d:a1:
                    d5:c1:4a:5c:08:d9:23:66:8c:cc:04:61:89:8b:9d:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:B3:6E:EB:42:5E:D8:12:21:79:68:C1:4B:DD:9F:2F:29:92:A9
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:5a:ea:4d:7d:15:55:d0:a2:dd:58:7e:6e:d7:93:03:f7:
         5f:6c:e8:6b:dc:3a:7a:89:41:cd:ae:61:2d:78:74:eb:41:53:
         6f:42:0a:31:97:68:18:2e:77:73:94:89:02:c1:81:fb:76:43:
         a5:c1:ae:14:27:d3:7b:48:bf:63:09:b1:f6:70:8b:9b:08:b5:
         43:a4:86:95:e6:d3:b6:78:24:7a:f0:82:81:87:bb:be:e6:f6:
         92:ef:20:c6:a0:d4:e5:97:85:d6:78:22:86:c2:6b:f3:b4:38:
         ae:91:ba:89:f8:23:e0:12:ba:da:30:3e:8f:cf:29:49:ba:47:
         32:8b:b1:8d:1d:db:4a:db:6f:69:42:96:28:64:5e:96:20:27:
         59:f6:9b:84:82:fa:26:ab:8a:36:db:4e:45:27:aa:a2:85:1c:
         ca:f3:13:c6:70:ed:66:f0:5c:f8:fb:36:75:5a:ec:ed:3b:14:
         49:3d:67:a0:94:a8:8c:36:bd:21:db:cf:af:b6:50:08:7e:e5:
         63:aa:ea:f4:02:b4:de:88:b4:56:a2:73:a2:ee:6b:6e:c9:7f:
         a9:ed:2a:bc:2c:ac:d1:6f:0b:98:25:f9:2f:5b:bb:69:eb:57:
         f2:c9:75:7b:2b:df:fc:e4:fd:db:35:4a:b2:31:61:7a:2f:26:
         e9:63:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:32:51 2024 by rpki-client on console-ams.rpki-client.org