Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          Ym8VaRtDttmnHf6EsRdNR5yEov6QER+ujxEkFo+8w5g=
Subject key identifier:   BA:38:31:4F:50:0E:8E:45:55:6E:07:FE:32:2E:FE:08:DE:02:F6:2F
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       018F87493E80E785457F4CB1FEF6441F8A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          1180
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: 1FTRoXbhTWcqa_pQadGLkaNwbDQ.roa (hash: Sr/zmR8DU1wCIvFRn7iGOiQsJJ3cBqOFEdHVUr/gmDQ=)
                          2: DuYDH1Y-K4hsPdq1gsaFKaSnwsY.roa (hash: 471DR/npj3bd1QBL6OgJkkZGhkL439zG4PMH4QWPZls=)
                          3: MQ2ipOLVrR94NxYXdwuRpJU01NA.roa (hash: qEdTQSuyaSE3c4nhBeorwKGIQdgCioUTidOd88JCnQk=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: E7G2RFmwk9NBvEGWUIYPoc9X87ZfKrhs8aJk3txYrWE=)
                          5: jjPh3XiWlMhjcSc3_nU4f0cc2w8.roa (hash: 6ZPYbZ2+eTngd/Wv0JZHVIDm1R1A58Wb/PyU8UK6zcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3e:80:e7:85:45:7f:4c:b1:fe:f6:44:1f:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=ba38314f500e8e45556e07fe322efe08de02f62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:d7:ea:3a:5f:57:3f:8b:27:d3:fe:0a:4b:
                    16:76:70:30:d7:63:eb:cc:dd:0d:21:ce:12:50:02:
                    f4:53:54:b5:7f:16:ba:ed:68:81:42:fb:c3:b6:af:
                    28:04:75:f0:8e:5c:99:9b:e8:3f:64:8d:ec:f5:a7:
                    74:27:ae:16:64:24:05:ca:7e:99:c0:5d:f4:cd:03:
                    49:38:db:99:3c:ea:88:d7:8a:68:90:75:16:eb:fe:
                    a6:c3:e5:83:31:14:91:c0:7e:31:6e:75:ca:33:7a:
                    0e:8f:62:6c:20:5b:a2:ce:22:2c:ef:b7:ac:62:e2:
                    d3:b0:a6:96:fb:a1:e6:09:74:45:a6:e2:03:03:33:
                    80:a9:a6:a4:da:ed:de:22:66:dd:de:72:45:12:1a:
                    7c:b2:ff:4a:66:da:c1:f1:a0:b6:a3:52:60:4f:ee:
                    f8:57:d6:21:8e:b2:c8:9f:17:57:0f:1f:dc:fd:46:
                    aa:ea:ed:95:84:a4:25:67:26:c4:b5:31:19:c7:5a:
                    51:4b:29:00:c6:8d:97:1b:66:f0:d8:79:b3:b0:aa:
                    be:2a:c7:0a:1d:5c:d6:e1:a9:c5:6e:49:57:40:b4:
                    bd:83:2b:96:0a:ad:47:93:f0:1d:16:c1:e4:08:d4:
                    54:f3:24:e2:7e:4c:a5:70:4f:0c:74:24:55:57:90:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:31:4F:50:0E:8E:45:55:6E:07:FE:32:2E:FE:08:DE:02:F6:2F
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:4c:6d:de:b4:4e:5e:72:f0:ff:f2:d4:02:01:08:32:36:
         1f:99:2c:7b:bb:1d:32:91:a8:98:a5:2f:ce:17:0a:f0:4d:58:
         df:da:90:da:9d:c4:2e:42:32:84:19:ca:a1:64:83:db:ed:34:
         33:1d:8a:38:ee:13:e4:72:eb:97:28:5e:19:16:57:37:25:b4:
         c8:71:a1:1b:33:e4:44:5d:62:5a:a6:65:c8:7e:12:b1:f7:42:
         57:47:5b:95:cf:7c:9d:1d:07:1e:36:d3:8b:56:d9:2d:57:d1:
         ef:74:fb:f4:4e:10:0f:5b:80:bc:0f:3a:2f:66:b7:40:d7:ff:
         6a:2b:a2:b5:65:64:ce:70:84:8c:97:0a:06:5d:48:36:a6:9b:
         7e:e3:8c:e1:12:3d:f0:4c:bd:54:bd:74:09:07:4c:7b:cf:26:
         69:34:51:62:f7:a1:cb:81:5e:3d:53:ee:93:66:e0:c3:69:9e:
         52:17:54:d7:d4:08:b1:a3:83:7b:26:e6:ac:66:e4:f9:9c:a7:
         ac:4e:f3:cb:c2:dc:5d:85:2b:e6:52:76:5d:00:63:98:c7:cb:
         fd:57:f8:75:cd:9d:46:03:a1:06:09:95:e4:52:f9:78:b4:03:
         a0:d9:99:88:e5:24:2e:f4:47:18:5f:85:87:4c:3d:0a:ce:8b:
         50:91:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:38:01 2024 by rpki-client on console-fra.rpki-client.org