Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File:                     H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier:          95vFuR8hhhZa3Iqw9hACfqWd/ha0m9G2vuX6Rz2x09k=
Subject key identifier:   C4:CF:F3:29:E2:F3:10:44:FE:63:24:7A:7D:F4:EB:FC:11:43:DE:0C
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer:       /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial:       018F3964CF6A874AB244BDEEC0E1C5CDE95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number:          0A09
Signing time:             Thu 02 May 2024 13:00:58 +0000
Manifest this update:     Thu 02 May 2024 13:00:58 +0000
Manifest next update:     Fri 03 May 2024 13:00:58 +0000
Files and hashes:         1: DCS5XTDQLTlv8-5ENuEqgofCiv0.roa (hash: ogd9yCiGO4Tjj8ljesUzdTGS8Y9LEs+02ENvXtCPLeg=)
                          2: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: ZSvvTXdM1he7yEuabxQdoa4m11DXHhjDlYMfXQIHO7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:64:cf:6a:87:4a:b2:44:bd:ee:c0:e1:c5:cd:e9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
        Validity
            Not Before: May  2 13:00:58 2024 GMT
            Not After : May  3 13:00:58 2024 GMT
        Subject: CN=c4cff329e2f31044fe63247a7df4ebfc1143de0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:8f:69:97:98:68:83:29:be:23:09:a1:3f:
                    de:cd:ad:10:5f:b5:8c:9f:5a:d8:6e:a4:b0:6b:a4:
                    ac:d2:18:34:bb:7e:70:2a:76:77:cc:2d:30:f9:61:
                    08:1d:a2:81:00:53:01:81:f2:e1:55:10:41:ed:8d:
                    23:d4:e9:39:67:6a:40:f4:42:67:e3:73:cc:83:c1:
                    88:40:3f:03:72:b2:5d:f3:88:8c:da:67:0c:9f:a1:
                    78:ed:26:ff:f0:74:4d:36:b3:48:33:69:15:18:b6:
                    97:5a:bd:df:5d:18:b6:dd:37:00:ba:e6:62:f2:72:
                    de:65:43:0d:b0:80:18:7a:2d:40:21:5d:7b:9a:79:
                    64:4f:b8:8c:89:d1:7c:cb:76:f2:45:34:2a:9d:c0:
                    dc:eb:60:c8:ef:e2:70:0b:a9:a4:5b:00:13:2d:f0:
                    09:1a:b2:4b:f4:cf:78:ff:82:f8:55:66:f4:d1:d8:
                    66:d2:73:7e:7f:c6:37:a8:fb:03:4b:d3:67:14:1d:
                    fc:80:28:21:c1:a2:31:54:f7:ea:b2:fc:90:8e:70:
                    5c:1b:fb:6a:d4:45:2e:c1:af:ac:df:75:ba:3f:84:
                    86:e2:ed:2f:15:de:3c:09:5f:ad:c0:43:32:e6:c7:
                    1d:3d:b2:b3:f0:83:5c:dd:03:14:cd:8f:e3:38:47:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:F3:29:E2:F3:10:44:FE:63:24:7A:7D:F4:EB:FC:11:43:DE:0C
            X509v3 Authority Key Identifier:
                keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:8e:fb:1a:57:0b:33:62:89:b2:47:56:10:f8:3f:ec:91:
         f1:c6:1c:a9:77:1e:ea:31:74:82:ca:ff:6c:6c:90:68:8e:6b:
         f7:46:e4:1e:2c:1d:77:22:64:7e:3a:92:f6:32:41:c9:38:c8:
         c6:5f:a5:09:a0:cc:0a:96:44:8a:50:66:22:8d:f8:30:e6:ad:
         9b:9e:f6:9e:c0:8d:0d:fc:e9:88:1f:1d:56:50:5f:57:de:45:
         b6:dd:71:cf:35:f9:5e:d7:4a:a4:46:77:6b:8e:a0:69:c9:dd:
         53:5b:18:e0:5a:75:af:e4:3a:ff:72:bb:5e:89:e4:9e:1a:10:
         39:81:14:ce:3f:87:ff:b7:ca:19:c1:ef:25:5d:02:d0:3a:1e:
         3b:4f:f6:fc:28:53:a3:03:cf:83:97:00:38:1b:63:9e:15:f8:
         ef:82:df:40:ae:ce:d8:ea:82:a1:22:83:3e:9a:99:0e:d8:fb:
         17:d2:42:3d:b3:c5:99:1a:c5:52:d2:02:af:a0:98:11:0f:ad:
         36:2c:fb:67:ec:6c:11:f3:fb:a6:cf:48:c8:b4:61:51:8b:d8:
         36:0b:28:5e:32:bc:e9:fd:68:5b:00:50:fa:a1:a7:1f:df:df:
         0f:0a:ed:78:bf:c2:12:58:68:e4:2a:23:22:83:54:c2:67:0e:
         21:3a:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:12:33 2024 by rpki-client on console-ams.rpki-client.org