Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File:                     71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier:          WyUFxQS/ipZpUHPBHtxKXbe4OzxpzYF5UNp4MU03xok=
Subject key identifier:   97:25:A4:BB:DF:39:3A:01:38:9C:40:E6:1C:75:2C:16:99:65:92:C7
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer:       /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial:       018E82941016F3AA8BD8B502A3B895CB11E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number:          0D1D
Signing time:             Thu 28 Mar 2024 01:02:05 +0000
Manifest this update:     Thu 28 Mar 2024 01:02:05 +0000
Manifest next update:     Fri 29 Mar 2024 01:02:05 +0000
Files and hashes:         1: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: e9fJiq9KkUl3GetwroKW3aaR/1KU9iWSugI29U5i1u8=)
                          2: Cobgh31dSmzB77t5-dEi5g23Trg.roa (hash: R/vIX5DcQkOFnzpCwz6QTEkw7AWHiE/qDeJ5ph7OBqU=)
                          3: J8cuiXT2g23wndNvyFrcpWzDdHA.roa (hash: e4hAOCwWTrgP6ZknxGcjGruv+CU8DSN/CkQFqjnHcNk=)
                          4: Mh_GNcUVa16oNJqbCfhW0lARbN0.roa (hash: FhhVHvEE/akBu8v4hdr0V5LN8DiDXi08oVRjC0Bfwl4=)
                          5: Sj1iz-ORdmMwnbJR6Eyd7ELrV10.roa (hash: uIsmt14DqfuKdzUgJdLi1h/N7QwTs4eZvC3Nw8GW7Ww=)
                          6: ZwkyChbsSJk1g6Ao-Hw5oMvDT8E.roa (hash: 86lwT6T3LJpC1lcuBkxP5xpAKi98U70K0aUiQUMk0FA=)
                          7: _oABcb0n5WSIZkIhiobbcyZ5r9w.roa (hash: RQl5WSMc121555H89RB4jV89hHPt9PZ67+uo3vfSN1E=)
                          8: aRyYS4UuUN8w4eHt-qmuglDNkpM.roa (hash: LEWFYdysHP5aW1SkQg2Jak7e7B61JGjKOpwDVfX5PRc=)
                          9: cSBdOpyT4vS_FSzoHThF-s1N-6E.roa (hash: /pBx+9bnc82fpcCYrtBaMJ75KE5GQ0RgRhMn8iP2X4o=)
                          10: eapc41tjJa0hfHId5ykkkfvMMRs.roa (hash: zZNPbqe/vwD/MRbkiLPjy5F7oHm/SGU+BxBbBkXNjlo=)
                          11: jEeiCwltrxPpbVEHb94obdjMcrk.roa (hash: fUJj9nT0ugSKDwluLx5uy1Eqdk24fEqOm2lzvTrvoG8=)
                          12: m0AkQ3FD0f8X5Fms9-GGs1xaDjI.roa (hash: kLxjz+5rtR2uerqz4/mY/4+3eNRPvhyTf6GMIor1IWg=)
                          13: q4W4R39oVDcSRR5MWA-eZrOybEw.roa (hash: jEOG0tI2nOd3Y6E02scIxq/iOfKnAzDuSPjPlqsYKB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:82:94:10:16:f3:aa:8b:d8:b5:02:a3:b8:95:cb:11:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
        Validity
            Not Before: Mar 28 01:02:05 2024 GMT
            Not After : Mar 29 01:02:05 2024 GMT
        Subject: CN=9725a4bbdf393a01389c40e61c752c16996592c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:88:b7:d6:a8:c2:1d:bc:ea:30:f6:ad:b0:
                    63:c8:fa:02:86:75:79:3c:2e:f0:2f:1b:83:de:19:
                    9a:65:5d:e6:65:c3:b4:8c:c0:97:d1:03:03:c5:b1:
                    8f:d3:ac:cf:44:8d:91:8f:9f:3b:3a:7f:0d:3d:22:
                    ab:ab:40:e8:e3:32:b0:a0:60:f0:2d:44:57:bd:0a:
                    7f:9e:e2:f1:7e:9a:9c:c0:e1:8c:b6:8b:b9:32:2a:
                    2d:b9:7a:a7:dc:12:64:ac:11:b8:73:14:f2:f0:88:
                    51:dc:e3:f8:49:4f:e8:08:3e:b9:b5:60:5c:78:d1:
                    f3:52:c8:c5:3f:7b:39:64:ff:ce:63:12:32:67:b1:
                    ab:35:11:1f:a6:84:a6:3f:ec:35:14:06:9b:32:07:
                    cf:af:75:14:25:65:86:98:ca:c2:ce:03:b3:48:61:
                    54:0e:e1:79:4e:95:d4:86:aa:57:7b:08:89:6c:2d:
                    64:cf:03:93:c0:3b:e1:42:55:08:fd:56:4c:dd:db:
                    7a:4d:75:2a:e2:1c:cf:eb:de:3c:e8:e2:be:0d:54:
                    9d:ff:a8:15:31:67:cb:9b:0e:c5:b8:48:c2:e2:f8:
                    cc:86:27:f6:b5:15:a1:8a:18:b6:0d:00:d9:ba:de:
                    82:f3:07:90:61:52:36:da:ff:42:85:4a:1d:51:1a:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:A4:BB:DF:39:3A:01:38:9C:40:E6:1C:75:2C:16:99:65:92:C7
            X509v3 Authority Key Identifier:
                keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:66:aa:7b:69:bf:ee:d7:cd:03:f9:23:be:01:e4:1d:0f:
         58:94:d9:58:2b:30:55:ea:a3:16:30:df:0e:9b:4d:21:6d:c5:
         c9:79:df:3e:b8:a7:5e:46:d9:d2:50:5a:ad:dc:d7:0f:f5:d6:
         a5:2b:43:06:47:d9:ef:76:67:63:17:bd:70:0c:bc:e3:76:91:
         d6:74:de:aa:82:8e:47:bd:b9:55:18:79:ac:f7:4f:9d:a1:c6:
         4c:b8:c6:7c:70:4c:3a:7c:7a:5c:6a:6d:a6:93:b9:65:4b:f7:
         da:04:15:79:62:cc:73:4d:19:8b:73:42:83:66:9e:33:eb:e6:
         22:ca:4f:f7:53:84:ad:d0:59:ac:4d:c8:f1:2c:07:35:b7:62:
         52:b2:da:75:74:6c:32:d9:8d:c5:71:2c:13:c2:fa:07:2b:d2:
         28:31:f3:df:9d:71:86:ec:12:8b:bb:1e:3e:d6:41:42:4d:13:
         c5:dc:b7:da:50:49:40:9d:39:05:00:8e:2c:7d:42:4f:99:17:
         e5:d0:cc:31:88:8e:9a:9c:97:82:8a:23:3b:28:72:fc:03:74:
         f7:73:73:96:8e:92:f9:91:9f:df:cb:de:a5:84:90:07:b3:8e:
         2f:d9:ae:79:30:ef:7d:d2:71:71:aa:a4:f3:a1:3b:f3:82:d5:
         cf:a1:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 07:02:40 2024 by rpki-client on console-ams.rpki-client.org