Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          JP+NTmlhiMPInAg8kgsKOLFYXwyiVm+QpveyBGrTjTM=
Subject key identifier:   8A:37:A0:78:53:A7:C5:EA:68:B4:3B:D4:68:42:43:67:66:08:C6:95
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       018F86A3ACD20F6DA8BD9CD7656FBFC9B763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 13:00:24 +0000
Manifest this update:     Fri 17 May 2024 13:00:24 +0000
Manifest next update:     Sat 18 May 2024 13:00:24 +0000
Files and hashes:         1: OG7XJqiNG-qIinZ3PxfWhndyOK8.roa (hash: ElrU0DblKTV1UupE+a/5Ip/HRi+8mspjeYBcKFp6M3I=)
                          2: TPGthfRSwY7FrDmNwyFWXVI_Ywk.roa (hash: 5fGbDnZdNVMQDIL4RL+d/MzV+ZD6KlWyirl3P8EbR2I=)
                          3: XgXmkQKT0vM4x1PX5LyQO7XQRRM.roa (hash: Ui6rNz0MjZ7atBtpBkFdEfvRYymbo89JORYNU8MW/MU=)
                          4: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: gp2WrDQSzHRR9J5Cdh/cXICGhToo1pdXYiaBt3M68Kk=)
                          5: tdkUtodTeOLX9Oa8Ow0u-SbzMv4.roa (hash: hsmv/pkUO4WtEWW/Pvjua9j6ngJenvDWVOWcGlin13k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ac:d2:0f:6d:a8:bd:9c:d7:65:6f:bf:c9:b7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: May 17 13:00:24 2024 GMT
            Not After : May 18 13:00:24 2024 GMT
        Subject: CN=8a37a07853a7c5ea68b43bd4684243676608c695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:b3:51:bf:0e:be:46:5f:1a:88:78:28:5d:
                    2b:88:ea:e1:ee:c9:bb:43:00:68:4d:46:1c:1e:75:
                    1e:61:54:9b:fc:b1:e0:f2:0e:2f:35:85:ed:f4:c4:
                    7e:f2:b0:56:35:d4:4b:ae:2a:3b:41:4a:c0:59:27:
                    25:88:5f:71:06:61:27:dd:37:40:34:59:06:f8:5d:
                    97:b6:17:b1:45:fa:43:76:77:b9:e7:b1:2b:d9:bc:
                    1b:17:a7:9c:7c:ad:27:08:85:a6:33:22:a6:7c:1e:
                    90:d4:86:78:e3:87:a0:11:ff:89:6e:71:2a:c9:fc:
                    10:9b:3b:62:7e:86:fb:93:74:5f:35:22:e5:13:7e:
                    0d:82:92:26:30:83:4f:83:35:33:7b:5e:38:3f:a5:
                    1a:59:8c:96:9a:6c:21:66:47:a3:5c:32:40:fa:ec:
                    c1:cb:d6:7e:79:21:d2:f4:1f:95:94:6e:a0:a7:bf:
                    b2:bd:69:33:d7:19:69:af:0b:70:87:c3:31:0c:1b:
                    01:e6:bd:6a:de:7a:79:51:78:b7:ac:95:b2:f3:e8:
                    f7:a1:e6:7a:f4:f5:9f:d7:36:9a:e8:7c:81:52:ce:
                    dd:d3:34:d4:26:23:43:86:32:66:e9:00:e0:53:dd:
                    76:19:31:68:dd:37:a3:5b:42:72:b4:d0:18:1f:d6:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:37:A0:78:53:A7:C5:EA:68:B4:3B:D4:68:42:43:67:66:08:C6:95
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:02:1f:5d:8f:07:37:55:66:a9:ac:4f:12:12:5e:7d:1e:
         d3:6f:05:d1:f1:3b:f9:3c:b2:fe:e1:20:a0:f3:04:ac:5b:58:
         64:48:4a:d9:62:9a:35:2a:58:92:f8:ef:c6:f3:39:26:60:3d:
         26:3f:a4:c2:48:b4:2d:52:2a:0d:91:00:cf:a5:7c:2d:1c:85:
         e1:f8:f5:11:2e:e8:75:88:a2:ad:64:eb:15:11:23:06:6c:c8:
         ac:42:47:52:50:26:38:25:47:df:59:06:e3:fd:37:2d:c1:d9:
         01:14:74:05:9f:dd:fc:23:df:8b:ee:43:22:45:4d:f6:73:66:
         56:d4:69:f8:29:24:91:b8:a0:75:4f:5d:4a:a4:29:a4:b0:98:
         67:89:62:90:da:0c:e6:b8:98:d9:63:6b:52:45:b0:be:09:67:
         bc:3a:3e:62:ab:68:f3:3b:ba:45:07:6c:d8:66:db:b6:25:fe:
         9a:e0:12:cf:75:ba:c4:fc:63:c6:09:32:5c:44:35:b5:d0:43:
         54:46:82:83:3c:e3:b3:67:27:52:78:33:28:cf:ec:58:a5:2c:
         38:e3:20:d7:b6:37:ed:aa:a3:a2:f2:49:a5:16:57:bd:8b:5f:
         d6:fc:41:40:26:ff:f0:19:01:f1:35:0e:55:12:40:84:43:24:
         7a:1d:f6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:21 2024 by rpki-client on console-ams.rpki-client.org