Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File:                     l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier:          SeAG29GcURCJtmUPVAWtDZt1OPjrhE87t7KqDKrYWZ8=
Subject key identifier:   A3:92:53:DE:E0:B8:58:8E:65:6B:5A:68:CD:7C:48:64:B3:C6:FB:81
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer:       /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial:       0190765253677081CAC6DA20D214556CC084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number:          5C
Signing time:             Wed 03 Jul 2024 02:00:25 +0000
Manifest this update:     Wed 03 Jul 2024 02:00:25 +0000
Manifest next update:     Thu 04 Jul 2024 02:00:25 +0000
Files and hashes:         1: NBKIwG2D7JD3P_OtlQEiAyzxy6Y.roa (hash: ItrwgMNnRJS1Qou6jtb5zy9yd925Fu9+3K1Wqoqx0ng=)
                          2: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: BVqP0LUzbjbmgNZMOzdcjMkIkbegFbdsHpsiv6PRMTQ=)
                          3: zYMN4huP6UijyKWcOl6FrpiKP6g.roa (hash: knE4ObbHUMGlKVCnnIyOZE0Cu/bLz2Dbshs/MB4vigA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 20:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:52:53:67:70:81:ca:c6:da:20:d2:14:55:6c:c0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
        Validity
            Not Before: Jul  3 02:00:25 2024 GMT
            Not After : Jul  4 02:00:25 2024 GMT
        Subject: CN=a39253dee0b8588e656b5a68cd7c4864b3c6fb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:5a:68:95:ec:81:0b:a4:23:aa:a6:4f:f6:
                    5d:0e:f2:fd:95:7e:61:68:7b:e7:b0:97:f0:3f:f0:
                    40:db:ca:b4:30:7f:f4:f3:76:c3:0a:8d:f6:43:02:
                    50:b5:39:d4:9a:1f:4c:a0:3e:20:ef:56:77:bc:c3:
                    b2:9d:6d:37:8c:3a:8e:40:e2:78:c1:f3:5f:9f:df:
                    56:37:f1:5e:7b:9b:57:b1:9c:56:ce:23:e6:61:f5:
                    3e:f0:08:61:c8:58:f0:71:2c:7a:6e:81:b6:b7:30:
                    6d:ab:3e:85:35:38:da:7b:90:ef:d5:d4:4b:02:f2:
                    a6:1f:93:34:e2:20:63:2c:3b:1e:47:f0:cd:01:1c:
                    b0:13:d1:30:ae:67:bb:74:fa:1d:ba:a7:b8:49:84:
                    2c:d8:97:f1:a0:9b:c0:2b:e7:fd:54:55:7d:2e:a8:
                    73:5a:0b:88:22:e5:e3:e3:2a:30:21:08:67:48:19:
                    46:c0:99:12:4d:cf:4f:f7:3b:40:7b:d9:90:72:e0:
                    c4:64:c0:aa:d6:ed:14:e2:04:75:26:cc:0b:7e:86:
                    92:78:df:cb:2e:67:5e:22:d8:9a:b8:00:6d:d2:f2:
                    54:9f:80:61:d0:e5:63:b9:9d:df:e8:f9:f1:00:e6:
                    6f:d2:d0:d5:c4:37:86:a6:0d:8f:2b:a4:06:21:00:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:92:53:DE:E0:B8:58:8E:65:6B:5A:68:CD:7C:48:64:B3:C6:FB:81
            X509v3 Authority Key Identifier:
                keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:23:88:2f:78:d5:e5:69:9a:a7:9d:ff:67:52:e5:35:70:cf:
         7e:3f:24:08:dd:f3:af:6b:74:f1:cb:d5:7a:f0:51:2c:db:81:
         6b:60:1b:4a:93:6b:02:87:12:f5:58:82:e3:84:d4:2f:2c:9b:
         11:06:b9:c6:a9:fb:5b:16:17:f8:09:1e:ff:79:fc:20:6e:17:
         9e:23:7b:44:36:19:09:aa:18:43:66:93:c3:02:fb:c5:7a:76:
         23:ad:65:09:a6:1b:ba:7b:ad:14:c5:8e:eb:4c:da:02:b8:97:
         70:e9:4b:b6:2c:76:08:e5:5e:25:f7:72:01:46:13:f0:83:28:
         bd:21:06:0d:e3:d9:d1:56:88:48:8e:5c:21:de:28:83:ce:0e:
         de:b9:89:02:73:06:d8:6a:d2:b5:31:ae:1f:d7:2e:b8:6b:27:
         0c:28:ad:20:ca:23:fd:0c:da:42:27:3a:ca:86:4f:d0:8c:ef:
         b9:66:ce:45:fe:7a:79:eb:ea:53:90:ff:de:d1:07:fc:82:e0:
         64:bb:4a:3d:f6:02:e4:2a:4c:8d:88:78:c5:79:b3:3b:76:9d:
         2b:1f:cb:ac:99:98:7d:2d:28:5b:94:98:dc:23:ed:31:41:49:
         01:c3:db:6a:7b:1c:88:36:37:ac:61:e4:3e:ed:ab:9a:5f:a2:
         75:e2:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 03:42:39 2024 by rpki-client on console-fra.rpki-client.org