Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          BEoYv2VDLAlwyIp45Tq+jQYHlwgNSzv37ytILn17K9k=
Subject key identifier:   87:F9:3D:29:AE:E0:45:2B:A3:15:19:A1:AA:3F:5B:BC:DB:BE:E6:84
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       018F3A0C2AE783CDCA639BC13122063FF79E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          0C43
Signing time:             Thu 02 May 2024 16:03:46 +0000
Manifest this update:     Thu 02 May 2024 16:03:46 +0000
Manifest next update:     Fri 03 May 2024 16:03:46 +0000
Files and hashes:         1: 1-0oqVkXpDHhaUn0ZYhWeewLz7tM.roa (hash: iygJaNr3TOCZvgp1M77G9NIpc4P+7zd2vrn1FGh2QXM=)
                          2: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: QMtpFCwDzHXf7O0aJtjQCu/NXvGUWZh5FnmVEQwM9wU=)
                          3: GMrwghURqGiYUqAmJ4omupR1DtU.roa (hash: uYOwDCicwkcetxU6581TS1GYPzN2F3/+nTBaM6BtjdQ=)
                          4: LGMINbRPMnClAQDmvmT4QDPm-A4.roa (hash: eZ8yMZQ73KKRIhWDRQZRftHM0ezWWNo2vnhqVAlZ/6A=)
                          5: o9at-H8dNqitFTAUBoq5d7lp4JQ.roa (hash: h1vdJsQogeaSl/nuPJTfeCksvT+c5xf9C3+afQLh7rU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:2a:e7:83:cd:ca:63:9b:c1:31:22:06:3f:f7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: May  2 16:03:46 2024 GMT
            Not After : May  3 16:03:46 2024 GMT
        Subject: CN=87f93d29aee0452ba31519a1aa3f5bbcdbbee684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:18:43:58:92:32:89:00:86:46:76:b9:77:
                    7f:9b:d1:1b:ca:78:9c:ab:5f:66:0e:0b:32:69:d1:
                    cd:2a:2a:b8:69:4d:d9:5d:c3:ba:6e:87:41:5d:98:
                    18:0e:1f:bb:cf:71:98:06:3a:e0:5f:34:fe:2a:25:
                    3c:62:95:69:7e:e7:90:eb:36:83:0f:51:49:89:7c:
                    11:98:4f:bb:9b:a4:97:85:54:92:d8:3d:9a:09:67:
                    3a:f4:09:85:61:30:26:d0:97:ec:47:2f:f4:3f:d9:
                    5e:36:e6:ac:73:d2:34:54:2d:2a:31:78:6c:11:52:
                    ec:dc:76:b9:8f:3d:33:94:16:eb:84:7c:cd:29:7f:
                    66:60:a4:22:6f:e7:06:d9:e3:15:22:31:48:c9:45:
                    59:61:ba:ee:9c:e4:b7:ac:e5:62:fa:a6:f3:a0:0b:
                    95:32:03:4f:5a:2c:90:c6:15:a7:6b:18:2b:e9:65:
                    2b:cb:62:9f:41:f2:68:00:48:be:fa:b3:42:f1:5e:
                    5c:a4:55:56:bc:67:95:45:06:4c:b9:c2:16:6b:86:
                    ce:0f:50:f7:ef:ee:5f:5d:2b:d6:87:74:65:a4:1b:
                    b9:fb:ed:3a:f9:d8:d6:26:70:02:33:98:18:79:d0:
                    e4:3c:8b:5a:4b:da:cd:0f:59:d6:93:82:1e:6d:c0:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:3D:29:AE:E0:45:2B:A3:15:19:A1:AA:3F:5B:BC:DB:BE:E6:84
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:8e:4b:c0:3e:f8:25:31:9f:7f:fe:43:4f:89:cd:2f:60:
         d9:83:a6:02:f1:6e:6c:9e:7b:a4:81:26:78:92:c7:90:9d:cc:
         26:5e:b9:83:51:fa:a3:5c:94:5d:50:bf:8c:bc:c2:47:16:63:
         62:d0:26:26:45:e9:51:09:ae:3c:79:f8:44:4b:a4:14:30:e0:
         15:43:95:22:d6:3d:0c:73:09:23:21:64:be:0a:39:45:92:1d:
         7f:5d:34:55:66:62:01:e2:9c:2c:00:80:89:5d:61:e0:61:52:
         a9:03:04:b5:05:3d:1a:45:99:db:43:d9:f1:c1:8a:9f:58:ef:
         91:d4:dd:ef:25:69:e8:6c:a9:07:dc:ed:64:6d:4c:a6:df:a6:
         94:35:54:6c:9e:6a:d8:df:5a:d8:66:1e:04:ee:7a:ca:40:ba:
         ba:ab:b1:c0:1d:6f:c3:c2:b1:0f:73:e6:8f:10:9d:ce:64:98:
         70:7d:ab:43:48:47:ac:c8:28:6e:66:2f:23:13:74:02:4c:28:
         0e:d4:7c:82:f3:f4:35:b5:3b:48:f4:ae:18:69:b3:98:a6:69:
         db:01:89:f6:bc:19:b3:e5:c8:c5:24:fa:8a:70:00:10:3a:5d:
         a3:fb:db:45:3d:16:04:5f:f8:94:55:68:af:78:5a:0d:5d:0c:
         9c:db:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:51:10 2024 by rpki-client on console-ams.rpki-client.org