Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          oEhoPwXYFCUWilxMbF6PM3s3mrbWPxXagJV/w++iNDI=
Subject key identifier:   E2:C2:33:AC:7C:83:0A:5F:28:18:35:93:26:EC:BB:57:27:DB:BF:BE
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       018F43B21542AF032B3B1BB51AF76D42D79B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          0D27
Signing time:             Sat 04 May 2024 13:01:35 +0000
Manifest this update:     Sat 04 May 2024 13:01:35 +0000
Manifest next update:     Sun 05 May 2024 13:01:35 +0000
Files and hashes:         1: 4H_0LDcB0uqiWR96COsCXUzjlmc.roa (hash: 99ELlRZ8r0KzcCajERUtuHFA2JgDcldtUIOtMi9qSgQ=)
                          2: DR9neCuYo1plJyMD8Bhf0z2QBNc.roa (hash: Xgp3SGWDuclIDuZkVTnJ/1pymw5hHbez0X1WSf3Suu0=)
                          3: FumMNyw1gstotfvd-i7eDdJb4Lw.roa (hash: YBMEcarKvySnA6efZ8EaPLTNRHAnYvo0pJRdw1YMY/Y=)
                          4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: FyarWkoXbXFnjV1Z4h6c9D3RsXhDIVj4Kck6nGwB7UE=)
                          5: J0BcmXGCs65cVSWLk97lm8TYdks.roa (hash: xQfsRK+Z+ikweprnMQmj5Z8Phxazcj98pXaLRey7oa8=)
                          6: P3m25CQUDYU6VebS0UhAlIQINLM.roa (hash: UfIEaYZCG30kxshbHDUTRnllpmdvH5qb953I/JNPB+o=)
                          7: PQhmBBiaToLXMqE-blwy8mxtOh0.roa (hash: vAZEqFBk224KSwZyRLSCm0xqt/jnZQMMhRNoSHDuMcA=)
                          8: SKw-u9vl5h7n9hHGurToMPojS6s.roa (hash: oM6sCN/QXfB6aAtbjS7uw1uoFqYV6lZLI4z7e40bB6w=)
                          9: sGetRY41AMrl0iEX5-a6PSQnDV8.roa (hash: fWoyTgN4XgELISzdxk2CSax2AcUTUYgN1hUeLTA5R9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:15:42:af:03:2b:3b:1b:b5:1a:f7:6d:42:d7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: May  4 13:01:35 2024 GMT
            Not After : May  5 13:01:35 2024 GMT
        Subject: CN=e2c233ac7c830a5f2818359326ecbb5727dbbfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:ec:d6:14:53:8b:a4:c0:1a:65:d6:5b:10:
                    b5:e7:5f:a8:f2:0b:ce:c6:e9:bb:d3:51:51:05:23:
                    94:01:24:87:ec:50:73:bf:36:b7:0d:6c:15:87:ce:
                    7a:01:91:53:a9:de:b4:e9:a7:c9:e2:f6:89:90:b1:
                    05:8e:8e:15:83:c8:e0:cd:a4:73:d0:65:86:8f:4f:
                    cc:29:98:54:4c:04:82:d2:62:a0:4a:3f:e5:30:97:
                    7d:a6:2c:b9:5b:cb:46:fe:ea:f1:cf:68:af:b2:6d:
                    cf:98:7a:cb:ab:3a:db:a5:0a:71:52:f7:58:15:f5:
                    bd:c0:ec:ca:c1:2b:ef:e0:01:d3:47:75:74:2d:28:
                    21:77:68:40:1a:9f:d7:e2:9b:7e:c8:e7:ed:59:4b:
                    61:40:4c:c6:5e:05:f2:ee:f6:ac:38:fc:a3:9e:5e:
                    be:5b:37:42:32:26:50:5c:0b:33:7c:36:3e:f3:7e:
                    a2:70:b9:2f:ac:19:4f:f5:c0:07:c5:8f:ad:e0:ed:
                    cc:08:e3:83:7b:e7:1d:6e:7f:50:10:42:15:40:ef:
                    d9:52:f7:24:f6:3f:88:26:a4:b7:8c:dd:75:0a:50:
                    b1:f9:21:89:61:e3:87:ed:9b:45:17:f0:11:ca:96:
                    05:ad:be:8d:98:8b:86:49:47:c6:d0:7e:10:ba:67:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C2:33:AC:7C:83:0A:5F:28:18:35:93:26:EC:BB:57:27:DB:BF:BE
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:64:c4:5e:64:c4:34:60:7c:76:92:5d:49:3d:55:81:24:
         46:9d:01:33:47:4f:1e:58:28:71:ef:fe:58:95:13:88:0b:42:
         ed:55:40:b3:59:28:a7:a2:5b:39:98:18:5a:81:7b:b7:2f:db:
         dd:f1:fd:0b:71:9d:20:2c:07:37:b2:be:90:38:3c:97:29:46:
         40:f2:b2:87:67:ce:5e:51:5a:c2:19:01:86:e8:31:a7:40:5e:
         ec:7f:2e:24:29:e4:74:eb:80:26:2a:a7:30:3a:34:2d:4e:bb:
         94:c0:d6:9f:a8:12:93:af:fd:c1:f6:ee:05:9f:60:85:dc:62:
         e5:a5:65:c0:cf:20:4c:8d:c4:7e:5c:44:8e:eb:32:14:ad:97:
         03:3a:a8:ea:67:ec:46:9a:ba:7b:3d:30:f5:05:72:32:4e:c7:
         22:ee:b1:45:58:ae:9d:9f:c5:f5:85:b2:84:e5:fd:9a:96:50:
         bd:93:40:b5:c2:72:43:5f:59:26:58:1e:de:08:44:b5:59:7a:
         6f:c2:5e:ce:f5:8c:70:be:39:46:ac:84:7c:36:68:da:55:72:
         e2:ae:36:1e:c2:52:1d:87:88:b8:d1:d4:ad:47:b0:ed:51:ed:
         20:94:e6:98:3c:7a:22:42:70:6e:23:3d:4c:2a:c5:c9:82:b6:
         db:16:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:51:35 2024 by rpki-client on console-fra.rpki-client.org