Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          9fOpuKTsGRPFVaryXau3mnBYGeR1HLbAk1K1dqkeVVk=
Subject key identifier:   A4:A4:D5:59:AE:DB:C9:34:13:D4:DC:F7:C2:88:62:21:48:5E:0A:C5
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       018F3AE5E9AB25DFB82D4306046CCCCF5ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          0839
Signing time:             Thu 02 May 2024 20:01:37 +0000
Manifest this update:     Thu 02 May 2024 20:01:37 +0000
Manifest next update:     Fri 03 May 2024 20:01:37 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: d9jNMCAbwqPdBNIPMLz5rTEdgFwJ/HAoXdsSnyk1ATo=)
                          2: AlSOhJMU63JQIzB91nI6JD3bd3k.roa (hash: NuY1rnkkK5awrdTYXXuj0ShJXsUX38zQhVU0IIxaZsE=)
                          3: pgQN5XRa0zvpKSQrl-IE-jf1yqA.roa (hash: fYXC3eD70mjo8RSzzMrh+y+NAG8g1ATMY+LLJcobl3w=)
                          4: r6aAdtAyS_c84jbT7yHSFWSckHY.roa (hash: UxNe4DUIBBWjKLDHwbsN2XhjhzaY2AWGaDU//1xYVEs=)
                          5: zIX1FYUGyQgqwVJ_6Una9s0LQ_g.roa (hash: EnYd0Ez2m2tloax6Rquzz+TYSD9BSGORd7NJYrhxB8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:e9:ab:25:df:b8:2d:43:06:04:6c:cc:cf:5a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: May  2 20:01:37 2024 GMT
            Not After : May  3 20:01:37 2024 GMT
        Subject: CN=a4a4d559aedbc93413d4dcf7c2886221485e0ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:e9:80:3f:32:16:5d:49:31:24:a6:5a:f1:
                    59:e9:e7:1d:6d:2e:07:7c:2e:a9:84:6a:ae:3e:13:
                    67:f5:0d:96:d3:3e:c2:98:34:d8:1c:59:c3:b4:71:
                    0d:f2:b9:fb:f3:86:f4:7b:96:46:3b:22:3f:8e:3f:
                    ae:83:45:bb:bb:fc:14:5a:1e:28:cf:ec:0e:4a:5e:
                    41:62:07:03:94:c8:d6:31:bd:32:70:10:35:41:9d:
                    bc:bd:44:c0:b8:2f:9f:af:84:08:b2:d7:c3:ea:66:
                    ff:cd:63:c8:84:74:8d:92:6c:da:ba:8b:00:59:23:
                    78:6a:51:4e:bd:07:3a:c3:99:82:94:52:c1:87:b1:
                    20:86:16:fc:37:92:7d:b2:a9:b5:6a:de:bb:d0:98:
                    ca:69:e4:7e:82:bc:2e:4e:e2:a6:24:ba:31:55:5f:
                    14:ed:f0:b6:36:b1:06:0a:72:c5:a0:74:cf:b2:73:
                    c3:a4:f2:18:3e:87:c1:9c:95:2f:00:6e:7f:00:c8:
                    67:37:6d:86:f2:34:34:af:37:2c:2c:f4:dd:8e:ca:
                    3c:00:05:2f:6a:13:19:5e:21:e1:85:6d:fe:14:4a:
                    59:0e:db:e4:ef:a2:3d:09:7c:c0:2b:ac:99:cf:82:
                    fa:7c:de:23:6e:0d:09:48:60:2f:70:15:99:44:f5:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:D5:59:AE:DB:C9:34:13:D4:DC:F7:C2:88:62:21:48:5E:0A:C5
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:51:dc:0a:90:b9:ce:af:3d:df:5b:c7:37:b9:4c:04:64:e6:
         91:85:e7:fa:d2:4f:82:fb:36:3c:41:41:88:e0:43:be:b2:90:
         6e:c3:da:d6:e5:e9:85:dc:c6:f8:db:7a:6c:36:43:4c:18:69:
         73:b0:50:2b:c9:f2:d7:af:eb:9f:24:70:f6:03:84:ce:c1:c6:
         20:cd:c6:ba:fc:81:3f:e8:c0:58:1e:a2:00:9e:44:34:3a:93:
         e0:2d:7e:90:66:8c:14:e4:2b:29:d6:a2:0f:cb:06:c4:ff:55:
         5d:13:4e:5a:30:bb:37:03:32:f3:1b:16:d5:2f:e6:6d:9b:61:
         87:c5:6f:2e:92:ea:81:65:5d:97:7d:62:eb:47:13:00:e9:a6:
         07:18:ce:79:61:0c:f0:41:6a:f9:d4:f7:53:16:f4:c2:c4:74:
         3c:81:28:db:2a:9f:26:c5:ac:cb:e2:d6:d2:49:4d:e4:a9:ac:
         44:b8:12:1b:b6:3a:df:db:8b:e1:13:1b:6b:69:49:b4:b9:04:
         3e:25:a5:d1:28:cc:30:86:d6:a0:32:3f:ea:53:ad:84:4c:a1:
         ec:e5:64:df:a6:3b:c7:24:fc:20:52:50:01:ba:51:b7:bc:a4:
         b2:9c:4d:2a:f4:b7:cc:51:c9:24:6f:2c:a9:9d:79:20:6b:41:
         3f:3c:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:26:04 2024 by rpki-client on console-fra.rpki-client.org