Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File:                     i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier:          ptx/VqKVRZI9W2JqwsjpHvmzqKIZmWs1eEIJvHn4kGk=
Subject key identifier:   5F:9F:A6:F1:D5:E8:B5:D6:EA:36:1D:0F:09:D3:8C:88:15:C6:3B:41
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer:       /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial:       0190716365938F813027E14E6705DD4DEC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number:          1F
Signing time:             Tue 02 Jul 2024 03:00:57 +0000
Manifest this update:     Tue 02 Jul 2024 03:00:57 +0000
Manifest next update:     Wed 03 Jul 2024 03:00:57 +0000
Files and hashes:         1: Vj0hnlVlqpllNasabMdw_r1DALg.roa (hash: 0Es0DKQLHL/5MROE579mQjjR9NUVTWu0DXcaeu4vQ9g=)
                          2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: 0iW6Kw7zuYMWewj3VHWbftitrKqQxqYxZkOGFh/SZAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:63:65:93:8f:81:30:27:e1:4e:67:05:dd:4d:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
        Validity
            Not Before: Jul  2 03:00:57 2024 GMT
            Not After : Jul  3 03:00:57 2024 GMT
        Subject: CN=5f9fa6f1d5e8b5d6ea361d0f09d38c8815c63b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:aa:7e:24:e8:d3:ff:b2:2e:e0:80:35:36:
                    52:e9:15:4d:ea:4c:6d:e9:37:94:00:b7:7c:b3:7a:
                    7a:85:ec:07:c6:f9:d5:3a:d4:5f:76:1b:b5:88:ac:
                    71:d9:7f:3c:47:17:a4:64:5c:4b:43:ef:ce:21:03:
                    ed:89:0a:26:0c:34:f6:65:4a:d7:7f:4a:5e:d2:0d:
                    f7:f0:f4:95:f6:9c:bf:45:75:bc:5b:1b:f3:0b:e3:
                    45:47:61:ea:07:cb:71:e4:15:6b:69:7c:0e:63:5c:
                    0f:52:68:7b:d3:e9:9b:85:7a:6b:89:1e:73:95:4c:
                    bc:da:ad:4c:81:e7:e1:d8:b5:d4:43:24:b5:da:02:
                    97:f2:08:df:da:3c:36:d6:2c:f7:40:0b:3e:74:bd:
                    a4:6f:e4:ac:c3:29:86:62:2f:08:e0:07:17:25:ed:
                    ce:d4:05:a3:91:33:51:0f:2c:a0:bd:c0:09:c2:b8:
                    2f:fb:f8:8f:9f:66:a8:f6:3e:39:d9:d9:16:31:b4:
                    11:b8:84:b7:f5:86:78:63:97:58:27:e7:2b:19:e7:
                    1b:ce:9e:b9:3e:69:c1:94:8d:c7:09:b7:12:94:b5:
                    3d:28:93:93:e0:c0:43:bd:91:2d:b6:01:a4:b7:ec:
                    d0:2f:f9:f7:fa:27:14:5f:e2:11:9e:33:5f:d9:d4:
                    01:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:A6:F1:D5:E8:B5:D6:EA:36:1D:0F:09:D3:8C:88:15:C6:3B:41
            X509v3 Authority Key Identifier:
                keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:96:fe:ed:54:92:f0:4d:f1:4d:08:ab:01:f2:50:0c:ee:
         dd:36:73:ec:49:79:89:e6:69:3f:3c:b6:47:41:57:54:19:cf:
         7a:13:53:e9:85:73:f5:c6:61:d8:30:52:a0:bc:cd:47:4b:61:
         5f:83:da:d1:99:d4:3d:a0:3d:86:79:ff:5f:ad:73:f6:29:64:
         08:2f:11:a3:98:72:99:2b:fa:ad:ef:0a:14:4c:89:c2:a1:f0:
         51:bc:c6:47:86:1c:68:4e:a4:ce:3f:89:2c:97:0f:80:39:69:
         eb:31:b9:2c:5e:01:dd:03:4a:d6:d6:0b:ae:64:5c:11:d0:4f:
         78:06:f9:63:2b:92:a6:de:f8:11:ee:0d:e3:07:ef:a7:4b:bc:
         14:04:a9:46:b1:78:53:45:6f:62:90:c0:87:33:7b:52:04:f7:
         83:10:4b:56:11:7c:8f:02:0d:c6:54:a0:f4:aa:0a:78:3c:f2:
         d6:22:46:0d:b2:f9:95:d9:06:f7:9d:f2:4e:db:16:5f:39:08:
         ed:8e:aa:64:1d:94:1c:63:d6:96:52:83:80:76:65:3c:d8:1a:
         26:3c:ed:da:ae:ff:27:fd:9a:95:9a:71:15:fb:2f:09:5f:27:
         00:8f:7e:82:20:b7:fd:d9:4e:53:4d:95:22:0b:b8:3f:cc:3d:
         91:49:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:37 2024 by rpki-client on console-ams.rpki-client.org