Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          twXShs7sPBs4dwiHR1bSqAvXq8UaLLEZ2wLGYe6x+XM=
Subject key identifier:   E1:E6:0B:AD:BC:28:18:BC:5B:1A:46:67:43:8D:81:6D:D3:67:D7:18
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       018F83A26E11FC9C4CB9D9BCEB112D538034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          05F2
Signing time:             Thu 16 May 2024 23:00:10 +0000
Manifest this update:     Thu 16 May 2024 23:00:10 +0000
Manifest next update:     Fri 17 May 2024 23:00:10 +0000
Files and hashes:         1: 0JiiC16GZGLF20US6Wu0KyHjjQA.roa (hash: tfqFl5LcVajhy2ntJAlfGzIMCfqWcn9u3/CI9b65Ol0=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: ZjYnUnNFs+FRgSdnuoM5LCfYn0HstUEi7LuXWk2hRDs=)
                          3: N-eG9C8wcHYT2onRwZoc8XuteG0.roa (hash: KkuQxwOVb2N1d7VsWAs4uQv9rLWAv6f1BqFFiAr24ks=)
                          4: u68rvslim_OyQcX6Vof_B_wGZf8.roa (hash: efDTrPOVx0Svp5+CqAXenAMezaXI4A6PLOmCrYKZQ44=)
                          5: vnytldOyEirk-qYCETct4thhi00.roa (hash: c5KWJnrpTBBcZGZs/Fh5Vo+GzfolYYvuQ9YSEQnhYqg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:a2:6e:11:fc:9c:4c:b9:d9:bc:eb:11:2d:53:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: May 16 23:00:10 2024 GMT
            Not After : May 17 23:00:10 2024 GMT
        Subject: CN=e1e60badbc2818bc5b1a4667438d816dd367d718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:19:06:43:28:76:e0:35:51:0c:f8:ad:d2:
                    53:63:58:87:96:e7:8b:2e:5a:28:38:ad:12:ee:8d:
                    cb:73:07:29:d3:ca:5b:e2:c7:46:c7:c3:f1:23:37:
                    9d:95:1e:bb:b1:22:16:04:a6:a4:9e:5e:25:d0:1e:
                    3f:10:dd:30:7e:e8:77:26:4c:85:7a:96:8c:75:eb:
                    22:d2:17:e0:4c:9d:5e:44:21:9e:29:0a:6d:94:dc:
                    c9:93:1f:41:b1:d2:ee:06:ca:53:5d:80:59:e8:c8:
                    49:fc:b0:28:f9:7e:d8:51:44:8c:83:68:be:c1:d4:
                    3c:a0:76:34:c2:71:b8:73:7c:c9:4d:46:88:a4:ea:
                    7d:05:df:57:a9:f1:53:1d:99:fb:bc:35:95:d8:e1:
                    81:85:70:4b:02:b0:47:23:0f:bf:0c:42:96:0f:4b:
                    c8:fb:ac:24:d3:2f:62:ac:eb:3f:f0:8b:15:5f:2c:
                    3d:7a:99:c7:cf:1a:14:44:64:85:87:ca:f6:80:aa:
                    6b:80:77:f8:ba:3d:c1:d1:38:29:eb:53:2d:d6:15:
                    19:d7:20:79:26:e4:f6:d5:1a:90:16:90:7b:0d:d6:
                    f2:1d:a4:e4:83:1d:06:f1:5a:6e:09:76:6b:33:a7:
                    29:96:39:5b:f7:e2:27:7f:ef:09:68:14:ff:d2:5f:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:0B:AD:BC:28:18:BC:5B:1A:46:67:43:8D:81:6D:D3:67:D7:18
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:a5:48:be:e8:09:55:2b:f0:08:76:d0:5d:2a:c7:96:43:
         65:24:0b:f5:18:89:27:ab:ce:d4:21:99:a5:7f:8e:d9:c2:67:
         6d:dd:64:3a:be:cd:84:dd:30:81:95:2f:de:f2:59:b8:4a:da:
         d8:94:4a:c9:af:0f:66:29:60:66:d1:66:b6:8f:8c:ef:e9:2f:
         67:c9:a0:c6:c4:25:a8:e2:00:60:e5:9b:27:e4:7d:92:b4:75:
         ee:df:30:d3:67:69:e8:f7:72:ea:89:4f:88:98:f2:f1:9e:15:
         11:e1:2a:84:c6:9f:f5:f3:ca:1e:de:24:3c:05:8a:8b:95:24:
         53:a3:95:2a:fc:8f:72:6b:40:25:9e:e7:32:56:bf:8a:f4:d8:
         e4:1d:54:4b:4d:52:55:03:25:66:a4:d4:91:7e:33:35:79:38:
         67:fe:de:ac:98:8b:55:8a:27:77:8e:73:c7:dc:7e:d8:3e:80:
         87:79:4d:47:81:0e:35:71:42:47:c7:9b:96:c3:04:4f:fa:e0:
         98:76:d5:35:74:d2:bb:70:c1:a9:fb:63:c7:43:2f:cb:f5:21:
         e4:ad:7d:68:24:14:d0:4b:5a:fb:69:01:dc:f3:a6:7a:25:49:
         d6:0c:1d:25:29:0b:3d:3c:bd:a2:c8:eb:8d:cf:51:dd:80:73:
         68:94:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:14:12 2024 by rpki-client on console-fra.rpki-client.org