Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File:                     Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier:          uuvnBCuVZXeGbIEkK/WW0NFL2x7ozavNNB1SwR96ui4=
Subject key identifier:   6B:61:DD:86:BB:3F:51:D6:20:47:73:B5:61:3E:6B:A3:96:75:56:EC
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       018F535BA3065231F78F3DCB8709B7EC09AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number:          119F
Signing time:             Tue 07 May 2024 14:01:05 +0000
Manifest this update:     Tue 07 May 2024 14:01:05 +0000
Manifest next update:     Wed 08 May 2024 14:01:05 +0000
Files and hashes:         1: 058NlUDIWNUWjx1N7Z3K20D2rSM.roa (hash: f+pi3yNQvxDPr9FTG86AGByEvUL7ula3prhtUug7/98=)
                          2: 2Rw57iC399HLJY7A-cqdBFUvbvE.roa (hash: ZUhwZeadTuaNP3AfTqrBDBG75mivVCOlwYDLPuhm7a0=)
                          3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: DhIs2p+JDD4l9sa1FLUqHXyUmgANbKrd+Rr+LhvgY6g=)
                          4: LT1I7WjN-5b-bonArPNYycZfYnM.roa (hash: bIRILgg5MIF+0c4CqF/j8fZ5WP8L8tDIBMNnyS1pe2A=)
                          5: RcVMZSBy7bXBIQqiconic9k38Dw.roa (hash: oSFVcR8yFH6HtY15qbxHmKiSEah4wjKIT8UmV82eQnw=)
                          6: fHeYJ2Smg9vEbBojb_F6yV56OkA.roa (hash: supk2X9b5yd+D1QtCPTWu/ccFxgWeb/2UO5SKLZwNRc=)
                          7: kuez1iA_11dfaTRwPKgQ9y1-0_Y.roa (hash: +SbYqXIGvd5BJas6VkVuLWLgLkbZxVyhTd/xY7hUwwo=)
                          8: sCw9SpNl50PgkY00gehoXHS4tXs.roa (hash: KL676s77pRP5v8Z/2Bn3ScO1U46zXBuvpZijZ+KullI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:5b:a3:06:52:31:f7:8f:3d:cb:87:09:b7:ec:09:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: May  7 14:01:05 2024 GMT
            Not After : May  8 14:01:05 2024 GMT
        Subject: CN=6b61dd86bb3f51d6204773b5613e6ba3967556ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:39:bc:de:e6:1c:b7:08:0b:a3:95:f3:f0:
                    ac:11:24:86:84:54:bb:4f:43:31:23:28:22:81:6a:
                    84:d8:73:6e:0d:a4:7e:55:c6:4c:0a:32:ff:a0:3b:
                    b7:eb:1e:29:4b:59:c7:9e:60:4f:c6:69:91:d9:31:
                    e8:a5:e8:af:ea:16:f7:ad:3b:22:6c:58:1c:6b:1d:
                    61:06:01:04:ac:d4:f6:22:12:d5:07:bf:3c:99:15:
                    45:b9:e4:28:ba:b1:0e:3b:d2:20:b4:76:52:e8:50:
                    20:ac:a7:bc:60:a6:ba:a4:70:39:45:78:93:80:05:
                    88:01:7e:75:fa:36:8c:f9:c4:7c:bd:c3:01:e0:3a:
                    79:14:6f:9d:c7:d3:01:40:73:fc:af:47:c4:db:2c:
                    41:01:f3:c5:b4:3d:94:1f:e4:5d:80:04:a3:a0:67:
                    0f:33:02:d8:58:e4:58:fd:fd:75:30:4a:7f:55:21:
                    b0:90:c8:19:72:05:bd:a4:5a:6c:b4:0e:fa:58:f8:
                    4e:23:4a:35:d1:51:a4:d9:9e:6c:7d:6a:15:d1:c4:
                    3e:69:3a:df:8f:a1:22:85:69:a4:58:af:8d:f4:9e:
                    ef:69:a5:7e:7c:fe:82:52:1b:7f:d4:c5:33:22:ff:
                    d8:78:86:ec:b6:6f:6f:05:89:79:c0:a0:05:f7:20:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:61:DD:86:BB:3F:51:D6:20:47:73:B5:61:3E:6B:A3:96:75:56:EC
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:af:44:fb:3e:40:fb:fa:5b:00:ea:e6:f7:ec:a2:ae:d7:f5:
         46:62:a7:32:5c:17:aa:ee:3e:0e:bf:e3:e5:eb:47:d2:07:36:
         db:03:9a:e7:51:84:8e:18:fa:68:89:22:5c:a9:2d:a6:64:f3:
         3f:1a:47:ee:9d:3e:f9:3f:e7:59:c6:38:da:21:b2:c3:d7:c0:
         b0:7e:a2:6c:dd:12:11:7c:7e:88:45:8a:9b:23:87:b5:f9:fc:
         f0:9f:ab:78:c8:5e:33:46:e2:4b:ff:f9:ea:bd:20:90:fc:83:
         23:ba:f7:e3:d6:3b:f2:0d:c3:a6:41:56:ad:28:b8:ca:41:6a:
         29:70:c0:2e:12:1e:84:1d:3f:06:da:9f:90:9c:2f:c3:7b:b3:
         ef:d5:17:a8:69:5e:08:48:7a:cb:dd:35:ac:b1:4e:b9:94:2f:
         34:ad:56:86:e2:cd:4e:18:9a:b2:91:a5:d0:21:e6:55:2f:d9:
         98:4a:9d:1d:a5:b8:d8:32:36:43:92:59:19:ed:66:ff:e4:d1:
         9a:b1:2b:5c:60:06:c0:81:ff:0e:83:5e:20:fe:f9:6f:2d:df:
         4e:82:e5:10:fb:32:35:87:40:18:72:d0:fa:e1:f8:89:55:ab:
         f1:f1:36:c9:a6:67:d2:1f:e7:43:30:15:be:41:6e:1a:9d:3a:
         81:b9:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:55:05 2024 by rpki-client on console-fra.rpki-client.org