Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File:                     0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier:          tIwlRE/6GIASYft20xSnMpcIfsXryT4fuiWltrc/LGE=
Subject key identifier:   CE:E9:5A:08:9C:FE:DF:2E:A8:F2:70:BB:59:74:8B:AA:79:24:B6:47
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       018F22017CC90C9D1088DCE1A41F6A650639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number:          040B
Signing time:             Sun 28 Apr 2024 00:01:13 +0000
Manifest this update:     Sun 28 Apr 2024 00:01:13 +0000
Manifest next update:     Mon 29 Apr 2024 00:01:13 +0000
Files and hashes:         1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: wmhcTr0TNPg6D+YHUhL7I/qB9fxoGDIa9DQXEblDAHo=)
                          2: 4VrJOI3oAPOMoLE_L9J9HrFUHts.roa (hash: vFl3cZqnf26bBUZIgbdTGDczIH1SIq3AckcQjqrZy34=)
                          3: QoIUSTbDSDGsvb8CEfvm4eNXPBA.roa (hash: gPiqJD6j3kHrnXB8lrC6UOGHhiReFQLCbMSTQKZMdys=)
                          4: V_LUI_QNKJ35kmtkcB4Mfd0WCmk.roa (hash: b1XSJPwJLdctJpu/3VleXMpHPrXvCsBrfERHSDhPUCY=)
                          5: ZxclnOZoUoT3oEHzhiXkSMrg0eg.roa (hash: Kr0x6iL7o5LPltcILFWfUY317piX6FAq2Hq67Mhy69s=)
                          6: apIvXAgWz9cPIDWtS0ugpeheFMk.roa (hash: fe2KN+DU1lVwtxb1MVjFjeuBjTCImSwWOQ5w6aE9YQY=)
                          7: duWRZgHRFZC8jKa8QvHJJMJWxNA.roa (hash: xdGoLARQcGdYJZ8S9ekYYuY8NLh3eNapokoT+9t8a2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:01:7c:c9:0c:9d:10:88:dc:e1:a4:1f:6a:65:06:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Apr 28 00:01:13 2024 GMT
            Not After : Apr 29 00:01:13 2024 GMT
        Subject: CN=cee95a089cfedf2ea8f270bb59748baa7924b647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:01:72:f5:a1:78:5f:5a:4e:e3:32:4e:77:
                    45:cc:eb:9c:04:09:a6:85:3e:a7:c5:13:3c:e1:f3:
                    e8:4b:f0:69:16:ce:60:1d:e0:8b:4f:1f:eb:da:8d:
                    f5:ec:72:5e:d6:82:6c:3f:80:62:c4:a5:aa:82:cc:
                    f4:4c:6a:8b:ce:d5:4a:21:e5:1a:dd:dd:62:9d:15:
                    b9:b4:5c:88:86:78:29:09:ac:cd:39:2d:2e:5d:49:
                    97:a1:c6:72:25:64:ae:f8:e9:ce:b2:a1:79:6c:c8:
                    3b:5e:36:a7:71:e4:39:a6:2e:db:4e:ed:36:7b:87:
                    67:ad:25:fc:57:05:ff:a7:01:7f:7a:98:24:bc:ec:
                    96:0a:eb:c4:b6:ea:25:7d:85:61:1c:79:2d:21:17:
                    e2:02:dd:b7:5e:4e:83:35:76:40:71:f1:6a:9c:db:
                    7c:32:a2:70:ea:b0:a3:f2:dc:6f:e5:1d:ad:68:3b:
                    4b:ee:d2:17:87:0b:dd:a2:23:91:f5:e5:9a:72:05:
                    79:67:9f:49:18:ff:57:b0:d5:9e:2f:6f:90:1e:92:
                    ba:ef:9a:65:bd:5c:95:7c:4d:d3:a9:02:7b:43:43:
                    ec:51:cc:a8:56:f0:15:6f:f4:e7:94:b5:42:1a:e1:
                    06:ad:7b:7b:8e:46:35:e7:57:ca:2b:9e:74:21:2f:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:5A:08:9C:FE:DF:2E:A8:F2:70:BB:59:74:8B:AA:79:24:B6:47
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:bf:cc:68:8a:e7:85:86:21:19:48:4b:d4:83:43:eb:02:
         5c:6a:df:43:16:bd:9f:88:2b:c6:d7:e3:ca:bc:bf:85:12:d7:
         b1:fa:06:ae:8c:90:ff:86:0b:e4:24:9a:a6:5e:75:2f:94:62:
         7a:b4:3f:3f:4c:bb:7f:c1:66:e0:88:da:9a:61:40:f9:ea:5e:
         84:ef:c6:bf:1e:20:36:b4:e4:ed:ca:1d:24:16:17:3c:1d:43:
         e9:c1:59:f3:18:d5:7d:b9:34:d6:cc:cd:73:03:6e:53:7d:ff:
         42:0b:7c:2e:a7:aa:9c:64:5b:90:36:8c:c2:20:b6:53:25:6c:
         80:13:af:3b:c8:e9:61:18:02:a0:7f:95:8c:f3:96:ca:86:e2:
         75:4d:f2:eb:6f:57:ed:05:1d:c6:f5:b8:d5:ac:73:aa:1a:93:
         91:36:87:cd:da:b4:88:4e:9d:4f:69:a3:60:3a:fb:ca:c5:b2:
         17:19:6b:75:7f:97:01:14:95:00:62:fd:ea:2d:29:8b:71:25:
         58:02:89:85:98:f3:bf:8f:f4:c6:ed:25:d0:34:e4:87:e4:21:
         a1:a3:4c:b3:13:d5:31:e3:9c:16:be:f4:bb:a0:fa:68:38:f5:
         89:4f:75:6e:e2:c8:40:e3:75:b9:26:a6:cd:9e:58:75:bc:e0:
         67:90:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:56:54 2024 by rpki-client on console-ams.rpki-client.org