Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
File:                     DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json)
Hash identifier:          JhX68b7wV9TwHR2MYX0k+oLcmnbgZ/6xk6fVOdUuYq4=
Subject key identifier:   C3:F0:9F:42:BC:47:FA:27:73:60:78:7A:64:D5:C3:8C:DB:DF:0A:5F
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Certificate issuer:       /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial:       018F1FDB951E3B76E8EC1119DF25A7AAD747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
Manifest number:          1154
Signing time:             Sat 27 Apr 2024 14:00:35 +0000
Manifest this update:     Sat 27 Apr 2024 14:00:35 +0000
Manifest next update:     Sun 28 Apr 2024 14:00:35 +0000
Files and hashes:         1: 2ihxRmHIoJvXsLRJl9UnuklhTss.roa (hash: Qy8rAi+HinoFZjghLieHk4xlEgqzEhcsZEASXcskWk0=)
                          2: 2lnqbImLXxs3Wbp1Ze7lO-z1znQ.roa (hash: fo+OQStVu/frgRp4eXhTJslO9wxHI3OWrvz6QRiHEIQ=)
                          3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: dWaqsePnn6eu62jA03RDYjpBxYoSoEJRFXrdl4KpsOE=)
                          4: E5HTbbG8tJE4hEPzKkGTLaMYS5g.roa (hash: xH5ZDr6Wa5GEJJ224YNGCwk0uCbWdk7z4495VtoQMoE=)
                          5: JUxqsMg8AcJK9YjeDJQq4hdmx1g.roa (hash: bokmazk3mO4DHz8md1CqOuJNxFi3g2MA5VC6MIRGXQ0=)
                          6: cReyfHxRedEyWCc4T2I-S6LxAbg.roa (hash: F+k746vtbwQnRbIkj+PlDdhTRO3luOc0FY4hJkVdy98=)
                          7: iH1ZGhA3DpL4881pQkbGOrVgJqk.roa (hash: Q+3UWG8RRRE0AIHv7UtXby5UCEViT6HwxOmc1fwQUOk=)
                          8: ivHkKX_ORDC-6xhTq2-WKnod-lc.roa (hash: llMBrXPiNbbctBK//nCjh3yZiZAhekKORYnn4HVMhyg=)
                          9: vO_y6VIwYq6qfEIxk5e9qSRMRSo.roa (hash: t2qvnHemp+7MxMy1gOFg0UZH4D+EK8bgUwRnPbmLpec=)
                          10: w9rdqWNlvGTJoFcY7uWtD_NAReo.roa (hash: LtQKi+RfuURNtP6WNT22UHelD96t1xeYOnjEKOGUy4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:db:95:1e:3b:76:e8:ec:11:19:df:25:a7:aa:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
        Validity
            Not Before: Apr 27 14:00:35 2024 GMT
            Not After : Apr 28 14:00:35 2024 GMT
        Subject: CN=c3f09f42bc47fa277360787a64d5c38cdbdf0a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:2b:b1:e5:bf:4a:77:ed:ae:a0:f5:eb:ad:
                    65:ad:c3:5c:7c:bc:a6:e7:9c:24:a9:ee:a2:28:09:
                    f0:90:82:43:bb:86:44:2f:f8:57:4e:0d:47:85:a2:
                    62:f4:91:1f:d3:e5:d0:64:87:10:c7:a1:8a:e6:52:
                    ea:3f:5a:49:6a:93:2d:71:16:f4:9f:cc:76:a8:d0:
                    90:ed:ea:fe:f7:ee:46:a2:1d:e2:a1:d9:8b:54:2a:
                    9c:e2:e4:d1:af:bc:5a:f2:aa:69:57:b4:4b:b5:03:
                    d3:45:7c:fb:6f:7d:9a:1a:d1:62:57:f7:c8:4b:8d:
                    1a:ed:18:0d:87:54:64:fd:1e:59:59:81:35:02:c6:
                    6b:f3:07:9d:08:d7:d6:2f:2c:35:24:2d:8e:97:dd:
                    21:73:a1:53:0a:3a:d3:73:55:f7:10:1f:28:e8:50:
                    85:a8:94:e0:51:19:74:8e:f7:9d:d6:76:31:19:b6:
                    03:f4:9d:ef:64:23:c7:8c:8e:c6:3f:5c:6e:b5:7b:
                    24:43:b5:03:67:bb:78:38:89:c6:96:ff:63:43:ff:
                    a2:9d:f5:37:61:c7:ba:69:02:68:19:ab:6a:52:0e:
                    10:5e:3d:ae:df:c3:5f:bd:54:20:6e:53:af:84:dc:
                    6a:3b:13:f0:45:fe:4a:15:ed:41:36:58:a2:ee:00:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:9F:42:BC:47:FA:27:73:60:78:7A:64:D5:C3:8C:DB:DF:0A:5F
            X509v3 Authority Key Identifier:
                keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:c5:3c:93:3c:ad:7d:66:b0:7e:31:44:fa:28:c5:ad:3e:
         0b:71:78:49:15:30:3f:b8:19:fa:a1:82:a1:50:05:af:a1:fd:
         3b:8b:8d:9a:26:3a:2f:0d:48:46:cd:59:17:97:42:5a:ee:8a:
         08:5f:c3:10:01:82:67:d6:df:03:0d:01:6c:0c:04:7b:53:f8:
         6d:80:a8:d2:94:bb:d2:5c:b9:d1:f9:34:da:49:1e:e9:db:e0:
         74:49:2a:69:56:c2:3a:6a:9a:81:c5:76:5e:1b:d5:dd:d8:ce:
         46:64:e6:bd:32:2f:da:fd:d1:96:69:b5:ed:24:55:55:af:55:
         6e:d1:01:5a:7c:3a:40:2f:5e:76:b5:d7:3b:07:37:96:6e:6a:
         60:59:88:ea:f4:57:de:ad:14:c8:51:93:ed:33:f6:07:77:ce:
         b8:ab:db:61:dc:fb:2a:f1:b0:85:cf:26:ab:41:61:a0:56:ad:
         d8:5c:7b:b6:2d:1b:2e:06:d2:f9:77:da:52:60:98:df:d5:0c:
         d9:6e:a7:78:3d:ac:c8:70:29:88:a0:4d:c0:06:46:c8:86:41:
         4f:5d:68:2d:2c:6a:b2:1d:5c:53:00:f7:08:77:41:fb:d7:f7:
         4a:6d:a9:9f:a4:82:81:c8:a0:23:43:a3:74:29:64:27:c6:ab:
         3b:db:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:54:49 2024 by rpki-client on console-ams.rpki-client.org