Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File:                     clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier:          ZehR3GY5QXipZ5byZjb9M/WJcyRvol2NwR/XyavMsOs=
Subject key identifier:   84:2B:4F:50:B9:B9:89:54:A0:B4:52:63:C1:58:B4:F7:31:3E:FC:DE
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer:       /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial:       018F882407AEB93021E726345B2DEEB4DD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 20:00:13 +0000
Manifest this update:     Fri 17 May 2024 20:00:13 +0000
Manifest next update:     Sat 18 May 2024 20:00:13 +0000
Files and hashes:         1: 2F-LML9rBnBG08N1tLGP39G8ps4.roa (hash: d7AOReljssuypAE0DmU/LuL6jKnIf1g5hD50Cp5jJ7I=)
                          2: 9NXQVmlYsjW6BIiromR1Jkv7ZnY.roa (hash: RO3eSs9Yux2tRIek5DZwacPp1MID67DwVS0fxrd2wWE=)
                          3: XcsXGhQHPYypQyl2p-_Augn5OO8.roa (hash: lO8jH4UX/cSp8bgZ2cOrMzm+USmhAfgf2YJxKdvlXLU=)
                          4: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: gW+4uPpy5SL6PmnWbJ3OFJfkXfnq9gCh98wwRHmTd/0=)
                          5: cuHLLDDwdTSlcsG0EOMSaYlGmIE.roa (hash: sy4flCDP25HVq+dkCg4GI6G8jmKr8E+eT87Rky5pxh0=)
                          6: sRwp4wkcyat-VD_6iWN_6BJFP9s.roa (hash: fiitcjz2N5DzPFb3Kem3tlILOCRrIXpcf4WMt3VTx2c=)
                          7: uBlvMciEOhOoE5GWBhg91Pne6p0.roa (hash: eua3wIKb+3Ze0KlMQ/Xy+fv/xWgWGQWNEJ/43dbevkY=)
                          8: xS09c8meBokU8ZKN0XhODBRgaWI.roa (hash: DPHcqqc0ZyQ7tYPGBLBwkSdQYDh8/6Exs+WG64kYt2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:07:ae:b9:30:21:e7:26:34:5b:2d:ee:b4:dd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
        Validity
            Not Before: May 17 20:00:13 2024 GMT
            Not After : May 18 20:00:13 2024 GMT
        Subject: CN=842b4f50b9b98954a0b45263c158b4f7313efcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:d5:4c:b9:46:cb:8f:57:ab:56:73:a9:bc:
                    64:37:d0:2e:76:9e:72:16:fc:d4:b6:df:9a:44:e0:
                    ef:cc:ea:32:44:da:e0:8e:1d:f5:ea:9a:76:2d:b5:
                    de:a5:d4:25:42:0a:d0:7e:00:5b:4a:f6:f1:e8:5d:
                    27:a2:f4:b1:b9:9b:e3:50:b3:f1:36:2c:84:14:8c:
                    a0:dd:d0:29:90:1a:70:c5:b9:f3:a3:f5:01:b1:0c:
                    cd:08:e1:cf:a9:f6:cb:1a:94:ce:a5:9c:1b:39:22:
                    42:98:18:14:f9:2b:a8:02:62:b5:54:2e:cb:d1:aa:
                    5c:c7:62:cc:28:1e:27:ee:84:38:3d:83:e9:c1:31:
                    4f:99:ab:73:36:bf:4e:70:24:b7:53:a5:c8:e9:c8:
                    c2:b8:ad:71:92:01:97:ac:b1:51:c7:d7:de:1f:8b:
                    fb:d1:fb:3e:d3:71:23:b7:09:e3:cf:eb:36:dd:be:
                    4d:df:6f:a5:73:7f:67:b1:76:b2:43:c4:c1:3d:cf:
                    6f:fc:d9:ee:7f:57:42:91:d7:ab:c1:1b:a1:2c:10:
                    5b:9e:49:86:0c:a0:6f:17:f7:39:61:8e:3c:88:9b:
                    52:94:24:08:19:c0:63:fe:ff:61:f7:78:98:fa:f8:
                    b7:13:fb:0c:30:4d:9b:e9:ac:ef:d6:ea:fe:71:4a:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:4F:50:B9:B9:89:54:A0:B4:52:63:C1:58:B4:F7:31:3E:FC:DE
            X509v3 Authority Key Identifier:
                keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:8b:89:fb:b7:8d:da:de:6a:eb:47:fb:cf:c1:93:c5:09:
         27:6b:0f:62:11:37:e1:67:85:d5:94:43:ee:21:04:9e:90:9f:
         2d:49:bb:9c:da:8b:68:1a:1a:67:aa:b9:f0:1c:bd:3d:6a:6a:
         6d:26:61:6a:8a:71:4f:ef:c1:f2:46:3e:6b:9c:77:0e:72:9d:
         d8:5e:00:9a:ae:e6:38:52:75:e0:0a:27:16:86:51:21:d8:35:
         32:a3:0c:4b:44:66:47:62:ee:b1:70:93:8d:69:d6:f0:a3:ea:
         44:65:9a:e5:40:e2:7c:7b:38:d5:7e:75:1d:a8:69:df:82:af:
         10:02:bb:26:e4:06:90:fc:ba:93:c0:19:dc:32:b5:56:28:b4:
         b5:5c:4a:dd:ec:e9:19:85:66:8a:10:93:06:e7:eb:34:92:c7:
         ca:7c:2e:7f:41:23:6f:bb:6e:0a:3f:ca:ce:f0:37:be:da:36:
         56:dd:2e:d4:f3:18:db:4e:88:7b:ff:fd:69:9c:9f:70:86:68:
         99:5b:10:fc:ea:f7:43:1e:bd:72:c0:f1:6a:0f:88:b2:ea:69:
         42:2e:fb:e1:58:1c:2f:14:59:a8:53:7d:bb:a7:c4:13:6d:e1:
         23:9a:56:02:dd:d8:39:77:42:4c:f6:b2:09:dd:45:60:06:54:
         41:12:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:49 2024 by rpki-client on console-fra.rpki-client.org