Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          q++6Ba7IiRdL5iOY+Z/zaCvE46by7s7M/3sz8q/2jvA=
Subject key identifier:   33:66:A8:48:A2:AA:7F:0D:12:53:3A:4E:FF:37:68:2F:53:B9:CB:B2
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       018F8748C48FB52026947E30D4CF3CE6C1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0A81
Signing time:             Fri 17 May 2024 16:00:44 +0000
Manifest this update:     Fri 17 May 2024 16:00:44 +0000
Manifest next update:     Sat 18 May 2024 16:00:44 +0000
Files and hashes:         1: 3oXFekC71dbYiTujxurKx-YHWso.roa (hash: VWPXv+GIQeVUCi3IpMlwA7/vni0dBxNp6LVyRBmZC24=)
                          2: CygjlYjt9JDZOuRGT_RW5T-u-IQ.roa (hash: 1gIXFNGqnDblnsQWYsTHHAg1nmft3BPAnbK2GrMenc8=)
                          3: VQxI2rYTwnOJsNLPubbk-LDSca0.roa (hash: rOyUrfkJrgZALueMHmreZ4qlAVmnzC4iSOnbiuXLrS0=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: l1m1TU1afGNExrwYj+ce5+4wP26LIUaU7ITomQlWD0Y=)
                          5: cvamCBm6JqcMNVV1TxW0n3T6jpg.roa (hash: 2Or52RcfV0O9MIEcz9CEHu1LrZ7bUYGVzj5Xd8zl2Nw=)
                          6: grO34-sNuSdYZ9HGbEUyM-DIa00.roa (hash: JJRK8DYW6SJjWKDjcgxEy1LLF/pDzWgJbXqEqhaV3bM=)
                          7: xbB6ucyKhW1_i_JcmupxaHGhuak.roa (hash: 9nOdxX9jju16uBCzR9UKDRIUXKh6RreqwnTB8OB6Ieo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c4:8f:b5:20:26:94:7e:30:d4:cf:3c:e6:c1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: May 17 16:00:44 2024 GMT
            Not After : May 18 16:00:44 2024 GMT
        Subject: CN=3366a848a2aa7f0d12533a4eff37682f53b9cbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:32:15:c2:c3:f2:10:9d:eb:9c:03:cd:8b:
                    dd:55:27:92:b8:9b:37:ef:d1:6e:74:8b:e4:25:9f:
                    b4:46:03:dc:0b:17:f1:2d:f7:cf:24:0b:96:d3:ae:
                    70:55:aa:4c:12:14:8c:d8:fa:df:09:e0:32:9d:14:
                    42:c9:3e:ce:65:9d:1f:66:52:5b:3c:08:a8:1c:de:
                    89:38:0c:1a:50:bf:b3:3e:e0:c0:37:8d:15:92:e9:
                    43:76:44:b0:40:44:4e:64:62:71:c2:67:9b:a3:96:
                    71:05:6f:92:a0:f4:f5:2a:ff:15:7b:45:7d:82:eb:
                    4b:24:bd:d6:9a:84:91:76:1d:b7:39:03:2c:10:d2:
                    a8:45:8a:40:8e:26:b2:8d:48:c6:f3:7d:77:f8:b5:
                    bf:71:b9:48:3f:9c:bd:05:e7:da:aa:9a:1a:a0:7e:
                    fd:73:da:3c:9c:ae:75:34:29:bd:7a:2e:8c:3a:e5:
                    c4:d3:31:83:fb:ce:bb:15:ed:f3:db:6b:a0:0e:17:
                    c5:f8:cb:77:61:0a:a9:ce:ae:f4:97:b8:09:51:25:
                    73:0f:e8:76:3c:65:9b:62:75:e6:d6:ee:2d:aa:ea:
                    c1:2b:61:4e:69:08:d3:6d:89:43:58:e3:83:6a:46:
                    2b:3e:1f:f1:90:32:69:31:99:cc:63:ca:aa:ef:ac:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:66:A8:48:A2:AA:7F:0D:12:53:3A:4E:FF:37:68:2F:53:B9:CB:B2
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:27:04:58:02:2c:fa:4e:3d:67:0a:fc:e7:99:85:a9:cc:63:
         7a:05:39:ce:77:72:55:be:d0:de:33:8f:38:32:ad:49:ed:19:
         df:ed:7a:d6:92:ae:bf:ab:57:ab:e4:1f:eb:84:45:62:be:d0:
         f6:25:ac:02:bb:2d:b1:02:2b:39:d7:5b:79:39:12:9c:f4:7a:
         91:88:e2:7b:f9:f5:66:7c:2f:c6:11:76:71:23:eb:cc:f7:4b:
         da:14:81:5e:93:b5:e8:0b:54:23:c5:d9:6b:46:ab:7e:0d:90:
         b6:fc:ce:9a:25:cb:34:2d:55:85:63:8e:1f:5d:48:d6:73:9d:
         0c:14:bf:33:b1:46:80:46:52:57:c2:30:49:7c:5e:7a:24:dd:
         c6:d7:a6:e7:b8:11:a3:5d:56:77:79:f5:28:0f:59:8d:a8:0c:
         ea:fb:78:3f:99:00:61:8f:07:a7:65:dd:f2:dd:17:bc:56:26:
         1e:bf:1d:0f:98:da:98:3a:d2:9f:62:74:7d:ad:ec:30:14:4d:
         78:7f:19:ec:eb:0b:c5:79:31:a4:fa:5b:d4:ca:9c:c1:f3:dd:
         ca:b9:4a:46:50:1f:ff:f6:92:64:1f:06:fc:da:31:e2:eb:d6:
         43:59:42:b1:b2:7b:88:70:84:6b:32:2c:f1:2e:3d:4b:0d:0a:
         a2:a6:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:42 2024 by rpki-client on console-ams.rpki-client.org