Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          ryYvoI/Jvwz2Pb7Ttlem4mRNMdShivZkVdJ4CwdWgog=
Subject key identifier:   CA:0F:41:61:0D:6E:5F:65:CC:CD:52:E6:6E:AC:D2:A1:0D:D8:0D:D3
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       018F8823F5B54C7A8FB48CDD4CCAD716EC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          02EF
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa (hash: +2AUaYD6NQ8cJUZUKmoXPPWae2+gQsufz1Pdu0/B1vQ=)
                          2: GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa (hash: 3owhJETbKxdHMSTNQ17e2xjJd4IgXu7uk+QOPTDeH/w=)
                          3: QP7kcUW0liLdCQGmC7ax3wPvlI4.roa (hash: i1weearkZ0GQKE67NYF+HHFJTFVV2vtdTcj3n7Bu0F4=)
                          4: TUfnGtq8mTQ96RDFRQ6moMMoT_w.roa (hash: o6/MtcGaQt4D8zZXJcfUrJFM80jmKHqtuuVNU8URzcw=)
                          5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: HiMWeVHDK5SuJoMKupR4WwfozRe8w3oWmkJMblqz2Ug=)
                          6: eKt0UjFUyXpV5kJM5_Xw5rPSEbo.roa (hash: 2NaqYTxrbw8oPAI+BMBzQHODXg3JpDEf3BIRWrzhTQg=)
                          7: fHzOxcYmORxZYe9pO8qumXLCe0U.roa (hash: qKmz2V8jciiKv6OqSvMBAFXl4XXjL+1SD1vW53ZDDeM=)
                          8: lRKO1_-GDSpvUMMPeWX_MaC3FWU.roa (hash: Oza4aef/HMo2FnfFsyroXgchMp4RCUO0vLYi9F7omMQ=)
                          9: oWh13R0F6SiWew9yZxD1QnMt0cI.roa (hash: Eh0eIAvxGIo1+sut3ODEw8SEHMcMaQCbE2pc7sq/oOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f5:b5:4c:7a:8f:b4:8c:dd:4c:ca:d7:16:ec:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=ca0f41610d6e5f65cccd52e66eacd2a10dd80dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:ae:26:f7:43:1e:b0:b5:4f:48:2c:14:9d:
                    9e:52:b8:52:bd:d9:7c:8b:cf:c3:69:29:45:46:12:
                    48:05:fd:ed:63:c6:f1:93:67:00:72:66:b2:8e:26:
                    d3:14:10:9b:b0:73:aa:dd:5b:f1:41:d3:27:e1:9a:
                    77:d7:59:17:98:3a:3e:a2:57:d6:af:d2:9b:9c:43:
                    a7:86:4c:c1:39:8d:5a:56:d5:48:c1:9e:4c:2a:ee:
                    b7:46:f8:71:37:0b:19:ce:0b:e8:ad:f1:80:0c:02:
                    f2:a7:37:0b:88:cb:66:b5:89:2c:c4:55:24:8d:27:
                    8a:7d:87:e8:88:79:15:96:93:02:e5:3f:93:c6:44:
                    e3:0e:5c:f4:25:f4:2e:2f:27:f0:d9:ce:32:7e:51:
                    8e:a6:01:b1:cf:98:31:c3:ac:36:35:87:b2:af:b7:
                    37:98:ff:7a:d5:76:f7:3c:dc:79:a6:e6:4d:d3:ff:
                    ca:71:7a:74:fa:cf:a9:7a:44:54:22:5f:b0:ed:f4:
                    06:c5:f5:c8:ee:40:82:79:0b:60:f6:65:9e:24:4c:
                    36:32:d8:ef:50:e1:63:05:6d:f1:f7:04:93:25:04:
                    a8:c8:05:25:e4:2d:27:41:4d:3a:75:1c:9d:09:6a:
                    fa:79:8d:45:ec:30:b9:15:52:40:f3:eb:17:36:0c:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:41:61:0D:6E:5F:65:CC:CD:52:E6:6E:AC:D2:A1:0D:D8:0D:D3
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:39:3a:46:8d:52:1e:f8:55:20:8b:b7:ca:f4:d4:c2:b0:0a:
         1a:5a:17:cb:ec:6b:be:38:ed:df:05:71:19:90:90:9c:40:87:
         25:4a:ad:a7:37:a9:44:07:36:6e:24:1a:ef:4d:f5:a9:d6:34:
         e2:42:91:1c:03:3d:86:a6:65:68:29:a4:7e:38:56:22:fa:af:
         47:89:49:b5:77:7e:cd:88:53:82:1f:e7:cc:8d:ae:4b:10:66:
         ea:ef:f3:74:0e:59:6b:8a:65:7b:9f:27:28:25:04:f4:f1:35:
         4c:9d:1f:00:04:2b:12:c4:8e:bd:d0:42:49:33:ae:1b:b8:06:
         78:22:0c:2d:bd:b7:a0:09:67:5b:4a:b1:73:47:bc:57:ac:16:
         18:02:ee:5f:68:59:52:48:18:5f:e5:c6:47:77:07:09:8c:6d:
         ad:f0:f1:9c:49:8b:db:cd:81:26:1c:e5:b7:64:4b:9c:8f:95:
         22:ba:b9:74:11:33:85:df:a0:bd:c2:e2:ca:a4:b5:d7:af:fe:
         c8:2f:63:9a:14:0e:38:26:a9:51:15:d7:21:65:36:fc:c5:ae:
         b4:6e:b8:69:b9:26:08:de:f8:2f:ed:c5:9b:c1:c0:da:7c:51:
         35:18:b1:6a:49:93:e1:4c:c7:10:b5:2c:23:52:f3:8f:67:c3:
         bc:a9:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:44:15 2024 by rpki-client on console-fra.rpki-client.org