Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          H3ft5crsUSX4Ps/BVJlhcdzri3LD85Iq/Qno10FCGpE=
Subject key identifier:   B1:6C:B2:4B:94:F1:BA:B4:6F:B7:FE:21:42:ED:92:79:79:C4:F4:E0
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       018F86A3F1901F3ED992B9B05001C8F6A82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          0C51
Signing time:             Fri 17 May 2024 13:00:42 +0000
Manifest this update:     Fri 17 May 2024 13:00:42 +0000
Manifest next update:     Sat 18 May 2024 13:00:42 +0000
Files and hashes:         1: HKqkubg2bQVA1I2983F6IM5Zo6A.roa (hash: P4Qwe1efB2EoZJau5jyVZFTXp3n5pMn4Q98gXOBEofQ=)
                          2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: Aq+ZxC44s5OUadIWsA3kA/pVEWqet3NuY7qoX0nmll8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f1:90:1f:3e:d9:92:b9:b0:50:01:c8:f6:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: May 17 13:00:42 2024 GMT
            Not After : May 18 13:00:42 2024 GMT
        Subject: CN=b16cb24b94f1bab46fb7fe2142ed927979c4f4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:39:cc:a2:da:2c:6a:8d:9e:56:31:3c:dc:
                    ff:f9:b0:c0:50:bc:2c:71:5f:7a:be:1e:f3:ca:79:
                    ae:2c:cf:e8:9e:4e:95:57:ad:fd:2b:2d:0d:5e:c0:
                    04:01:3b:55:ad:67:1d:9a:a2:6e:f5:2f:9c:6c:3a:
                    9c:78:ab:ef:7a:42:24:a0:46:50:51:2d:2f:5b:77:
                    13:e9:4b:1f:10:96:79:9e:4e:41:e4:ba:9f:c1:12:
                    41:54:43:b8:08:a5:2f:4f:0b:f5:c1:f7:eb:d1:94:
                    86:49:38:c6:8c:3c:f5:54:88:2f:79:31:80:4c:22:
                    f6:de:fd:dd:15:f6:14:0e:64:e6:26:5e:bc:00:bf:
                    01:16:fd:1c:45:4b:f2:45:6f:0b:c3:3c:f6:07:01:
                    c4:44:b5:2d:6c:af:1d:ff:68:07:ea:37:5a:d5:e0:
                    0d:31:b8:50:a7:4f:3b:43:69:03:27:b9:bb:4c:4d:
                    1f:7d:57:1b:e9:b0:7e:e9:63:60:f1:bb:dc:c0:70:
                    2a:ad:d3:73:c1:3b:b7:b0:c5:4a:22:25:81:ea:d5:
                    49:7c:40:77:b4:a5:63:5c:98:e2:87:e7:ad:b7:c9:
                    b0:cc:e0:28:ec:fe:30:0e:4e:db:5e:81:c8:10:19:
                    e7:11:d1:8f:d8:5a:21:6d:58:6d:8f:81:37:e4:d7:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:B2:4B:94:F1:BA:B4:6F:B7:FE:21:42:ED:92:79:79:C4:F4:E0
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:a0:40:1b:12:53:16:a7:7b:14:7f:8d:f6:1d:15:c9:7f:
         ee:e2:15:fc:7c:48:99:97:98:7d:e6:b1:bd:e4:b3:79:68:5b:
         ad:90:b6:2f:15:ed:16:6c:3c:6f:2b:c9:18:ec:f0:08:a7:26:
         21:c7:8f:26:92:0d:be:d2:d2:ac:51:05:53:d8:ca:e6:28:9b:
         05:ee:a4:96:ce:d9:d9:50:45:17:38:99:90:10:f1:f0:a3:df:
         c2:8d:4c:06:f6:36:4f:c2:56:cf:4e:c5:4e:85:c9:ef:65:70:
         b3:6d:cc:7d:ad:ba:a3:90:48:e2:04:5f:b4:d5:82:a6:46:58:
         e8:70:0c:dd:ba:03:a3:e8:7d:19:c5:00:00:5f:dd:32:1b:87:
         43:30:cb:7a:97:ef:a7:dc:de:bb:6d:14:94:58:1f:13:f6:88:
         26:4c:30:91:16:fa:b3:71:8d:b6:f0:6d:17:22:87:88:8d:68:
         b8:80:a7:cb:31:5c:a0:54:ae:8c:01:ed:d1:d0:f9:bc:29:98:
         35:8b:6b:44:c1:28:9f:5f:25:db:06:eb:8e:7f:27:9b:2a:7f:
         25:45:db:2b:84:12:ab:8c:ec:9c:22:53:b8:ea:1b:f2:57:5e:
         07:7c:eb:74:16:d1:e1:29:22:92:ef:61:56:2e:8f:2c:ea:4e:
         cd:db:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:47 2024 by rpki-client on console-ams.rpki-client.org