Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File:                     cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier:          Q0nwAhDrm2ygpMo5qwRxEdwJGrPl3tx15agBkRU8Koc=
Subject key identifier:   94:16:FB:DF:38:69:C1:CE:5D:D7:CD:39:0C:9A:72:74:75:C3:16:9A
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer:       /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial:       018F8748771F6342A8BEC799303FD5989DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number:          058F
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: _Fh1D8oSnm2BMSaERx42b1wB0vA.roa (hash: I/NphGDYA5Vd6pHa6QTu1JtHviFxX0yu0MNXsxDgDvk=)
                          2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: 6wsc+KIwSm41x7YvyzAUA9wDIZngaXBUrM3cQeyMUyk=)
                          3: wFuqTnfFf0dqjIfvyLGPAnXgVaE.roa (hash: eoYAeYGFm7tJMsyYWz1XvO5ymb2pbehx+H44l1Dfr6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:77:1f:63:42:a8:be:c7:99:30:3f:d5:98:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=9416fbdf3869c1ce5dd7cd390c9a727475c3169a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:47:c0:58:4d:a4:a8:0d:5f:5a:06:2a:64:
                    46:6e:89:17:9b:f2:84:f0:b2:27:6c:ce:b5:5e:8d:
                    30:c6:54:5e:1b:29:e7:71:65:2a:92:c5:83:05:54:
                    d7:3c:88:c4:36:0b:b2:45:86:d1:74:a1:4f:ab:b1:
                    ec:7c:ec:26:5d:60:c5:f3:0c:b6:e8:43:b5:51:10:
                    57:ee:5a:9e:1d:04:e3:0e:64:89:25:fa:bc:b8:9c:
                    92:dd:22:63:4a:58:61:91:5a:38:18:73:bb:8c:58:
                    6e:11:61:cb:1b:be:49:ce:0a:1f:81:55:b1:87:c9:
                    b1:cb:ee:01:42:0b:2a:37:21:5c:e2:a4:8d:1b:99:
                    7d:fa:e7:eb:ef:d0:f1:97:2f:f2:b0:24:73:dd:e0:
                    88:64:d9:c8:0e:db:85:3a:4f:00:cc:d0:d3:27:61:
                    52:9c:ed:cf:fb:b8:bb:2c:5d:66:eb:1e:49:56:a2:
                    3a:6e:53:58:29:46:01:cb:5c:00:73:ab:94:36:5b:
                    b5:b1:ba:d4:40:9c:60:41:bd:c9:37:3f:65:72:49:
                    fe:69:32:db:a3:75:dd:da:68:eb:13:eb:ac:ae:63:
                    c2:d4:0e:0e:1a:55:34:f0:b2:40:8f:00:25:20:8d:
                    f8:c5:a4:13:61:26:1d:c9:f7:36:76:ba:29:b0:ff:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:16:FB:DF:38:69:C1:CE:5D:D7:CD:39:0C:9A:72:74:75:C3:16:9A
            X509v3 Authority Key Identifier:
                keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:70:85:4f:1e:ba:c8:7e:f7:7e:da:b0:aa:27:16:8b:91:
         7e:fc:96:e5:df:a9:21:33:98:6a:a6:c8:6f:5b:17:48:d4:04:
         68:9f:8a:47:7b:c8:8d:57:c8:26:9a:c6:ca:6d:e1:4d:fc:38:
         15:d3:47:36:90:67:6f:08:63:91:c3:fa:d4:1b:5e:10:d7:04:
         59:8f:d7:fb:db:f4:07:9b:b8:8c:bb:31:85:c0:74:97:cf:d0:
         b4:c1:71:d3:f5:8a:65:dd:40:06:70:3e:a0:09:53:02:c1:24:
         38:62:12:c9:14:72:f9:cb:52:0e:85:15:cc:41:c4:7b:b2:db:
         38:f6:29:2a:a2:39:c5:64:3d:3b:9e:63:83:fb:92:51:ed:9a:
         6b:99:39:ec:34:d8:07:9e:dc:a9:03:2a:d5:26:56:cb:ae:ac:
         47:68:23:44:4d:58:9b:21:7d:2a:bf:60:43:6c:46:39:d5:14:
         41:b0:e5:88:8f:54:28:cd:55:bb:a8:13:6f:7f:cd:da:f5:24:
         33:66:e3:1f:83:44:0f:1d:b0:fb:58:9a:cf:1b:64:31:99:42:
         04:cd:6d:89:2a:14:3d:7a:ed:71:d4:8a:fa:de:a8:41:c8:da:
         50:bf:c0:3a:c0:fc:2e:91:b0:c5:53:28:4f:cb:69:e6:97:d5:
         31:6c:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:40 2024 by rpki-client on console-ams.rpki-client.org