Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File:                     vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier:          XZhg3UrZwBQ7LO+aAbqspKndn/w1SaAbcdqcp3C4II8=
Subject key identifier:   52:9B:83:27:90:9F:E2:9C:D7:10:D1:A7:7A:D4:DB:B9:4F:42:E2:5E
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer:       /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial:       018F893703CDA74A8EFC379CB6625349F281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number:          0D0B
Signing time:             Sat 18 May 2024 01:00:35 +0000
Manifest this update:     Sat 18 May 2024 01:00:35 +0000
Manifest next update:     Sun 19 May 2024 01:00:35 +0000
Files and hashes:         1: qzHhWrLbcYulg5Rz8NJ1yggYSc4.roa (hash: ZDVLeo8PfEP/BVo6iivFu2ylQ4yeIVBNq/FT1BKTv+M=)
                          2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: XbzbfIptUqGpB7silWMsJrQnddSI+zS3lTRCjQyYhXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:03:cd:a7:4a:8e:fc:37:9c:b6:62:53:49:f2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
        Validity
            Not Before: May 18 01:00:35 2024 GMT
            Not After : May 19 01:00:35 2024 GMT
        Subject: CN=529b8327909fe29cd710d1a77ad4dbb94f42e25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:cf:02:98:73:fa:c3:e4:ee:53:22:6c:1e:
                    f9:69:e2:dc:0e:77:76:26:86:e6:c5:b7:a3:f5:bf:
                    41:6c:8a:0d:71:fe:53:46:38:0b:9f:06:2b:b0:4b:
                    a1:7f:aa:61:91:ae:cb:c5:40:d4:a0:84:82:c1:1b:
                    49:24:a0:89:21:2f:a2:9a:41:f4:ee:71:02:6a:97:
                    41:43:29:20:5e:56:bf:c6:2c:6b:62:6c:1a:7b:e5:
                    a9:e8:07:e5:16:d3:03:6b:89:fc:97:1b:79:83:98:
                    22:cc:37:3e:42:04:ed:f5:60:22:b4:17:6f:d6:8d:
                    26:98:05:35:d5:74:cb:46:5b:5a:42:8c:6b:f2:0e:
                    db:0e:b6:dd:38:12:2e:92:92:21:56:89:a1:e3:dc:
                    06:ec:85:a6:de:c2:23:36:b9:5c:50:41:03:8c:fb:
                    d9:a8:9f:59:ae:ca:f2:70:d0:c0:6a:a8:32:df:11:
                    3c:7d:86:d5:7b:3f:2f:86:ec:e2:fa:a1:fb:b7:c3:
                    be:b4:12:a9:c8:b1:fd:36:50:55:ac:b8:d7:89:d3:
                    27:2b:29:3e:50:53:26:97:cb:33:f8:a0:e6:99:1e:
                    65:8e:0e:66:83:7b:0e:b2:f2:bd:d6:eb:d4:ef:b5:
                    d8:86:9c:db:76:8c:19:e4:d3:1a:61:77:42:b5:e6:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:83:27:90:9F:E2:9C:D7:10:D1:A7:7A:D4:DB:B9:4F:42:E2:5E
            X509v3 Authority Key Identifier:
                keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:1d:63:22:1a:00:26:f0:5c:4d:8c:9d:91:87:e4:40:a5:
         55:a9:64:39:17:74:d6:23:d6:87:b2:04:75:5d:e7:62:e7:10:
         c9:a5:fc:bb:7f:cf:96:b8:ba:95:25:40:31:f7:94:a0:ab:e1:
         76:3a:fc:62:e7:ea:10:c4:c6:9e:64:89:d3:fe:1f:f8:14:d4:
         1b:2d:4d:00:4c:fc:06:2e:ab:b9:89:41:1c:ae:73:9b:cd:e6:
         08:19:cd:bc:38:5b:7c:56:85:3b:7c:92:2b:5e:2b:22:ef:6c:
         c2:4c:72:ad:b6:26:89:5c:f6:44:fd:47:9f:2f:99:e8:9e:41:
         8a:59:25:c5:68:3e:98:d3:2d:74:73:63:30:ec:1b:39:7d:72:
         65:69:e4:a3:40:53:ee:5d:9e:d2:e3:e5:c2:09:27:f9:72:f9:
         38:aa:b4:03:f8:4a:5e:5e:ec:97:1b:45:41:58:38:f0:4c:92:
         d6:07:a3:11:cc:21:f3:2c:bc:9a:77:82:65:13:a6:a4:b4:7b:
         d3:e4:6f:56:e8:97:9b:67:73:b3:df:26:9c:8a:6a:f3:f0:92:
         eb:c8:26:b2:c8:08:1c:5e:ca:b7:21:07:fa:f6:b8:be:25:d3:
         99:87:1f:80:1a:78:a0:23:13:c3:45:72:76:4a:a3:a4:c4:02:
         39:b4:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:31:22 2024 by rpki-client on console-ams.rpki-client.org