Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          q4ix7gs5VTZXF4RXUnUso2bsu1Z+9xZxP5jHsEZThF8=
Subject key identifier:   52:E3:81:EE:2E:9B:EF:D2:C5:86:63:95:BF:81:62:C0:12:0F:51:52
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       018F43B1A83EF9508BA62F83DE525215FC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          0803
Signing time:             Sat 04 May 2024 13:01:07 +0000
Manifest this update:     Sat 04 May 2024 13:01:07 +0000
Manifest next update:     Sun 05 May 2024 13:01:07 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: naMOZsQ6Q7fbd0q5bIaw1TNtRUg18VJW0vdI/WTBCB0=)
                          2: 5hhXfwDoyhNwubKlN-S_5SiN1wA.roa (hash: B2qahgtASolDcQWQmzP7gHy/KJZ9IEaf5GJAqgTsalI=)
                          3: H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa (hash: LaqPCqcF3EwmHexW3TUl2zzFnMUsLV/B4H24KnZEUf8=)
                          4: PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa (hash: 7uifEdtUhGjbBCe4GxaPPMBWRWkTShjwXrsUDYc3GCk=)
                          5: b6lQyYLpABoCwjSUXAJur7_bPK0.roa (hash: +E1xVFbG1LCDjB4tEpqyWrUKYsPtpeZRICkKHyjwr+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:a8:3e:f9:50:8b:a6:2f:83:de:52:52:15:fc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: May  4 13:01:07 2024 GMT
            Not After : May  5 13:01:07 2024 GMT
        Subject: CN=52e381ee2e9befd2c5866395bf8162c0120f5152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:41:c5:8c:41:34:26:8f:0a:01:36:d1:e2:
                    9f:eb:d9:f1:15:47:d7:55:63:ec:01:e1:ee:9e:de:
                    1c:e5:cb:35:94:be:03:c0:10:24:68:f6:53:17:a2:
                    ce:fc:f2:97:51:4f:ad:90:76:10:76:fc:34:0f:72:
                    dc:b7:d8:2f:a8:5e:4b:9e:52:19:ff:a8:0c:84:04:
                    4b:46:a8:2d:bf:9f:b3:2f:49:94:8c:a8:42:2f:47:
                    40:54:ce:8f:27:00:ac:f4:68:aa:bb:40:18:ae:65:
                    ef:f5:f3:11:40:d0:47:8b:82:cf:7c:70:37:67:7c:
                    2f:d5:c9:3c:05:6b:d0:3a:20:bf:e2:8f:d8:52:05:
                    ba:2a:e2:81:b5:3f:00:db:60:aa:9b:7e:b7:0a:8f:
                    53:48:41:e9:71:29:ba:fa:6b:dd:15:40:dd:42:ca:
                    36:32:b9:c6:ab:3c:b5:57:2b:c7:51:da:64:25:14:
                    f1:a9:08:4e:a0:71:74:f0:4d:dd:95:70:d6:eb:46:
                    09:52:35:fc:7c:36:88:97:b7:b2:6c:c0:7a:9f:da:
                    f9:c4:a9:94:27:0a:5f:d2:c0:47:98:a7:1a:29:35:
                    e9:fe:2c:34:6b:38:1f:07:21:c6:0f:42:4d:ba:f8:
                    ad:53:9a:48:40:0b:d4:af:d5:51:f4:8c:43:65:6e:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:81:EE:2E:9B:EF:D2:C5:86:63:95:BF:81:62:C0:12:0F:51:52
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:49:7c:e6:f6:55:56:a2:af:af:af:81:0d:f1:19:54:ca:c0:
         ad:64:c5:5d:a8:21:bc:b9:c7:7b:79:17:6a:81:2a:ce:35:41:
         6e:04:29:92:9e:a5:cc:89:7f:44:5c:6d:c5:cf:95:3b:46:69:
         f2:73:93:4c:54:e8:1b:51:6f:7d:6a:dd:7b:44:3f:99:ce:08:
         83:32:22:d2:a3:1a:cd:9a:2e:02:db:73:cf:92:04:6a:47:8e:
         a0:6e:04:17:12:3c:63:3a:10:94:a8:e2:d0:ea:58:34:1d:a2:
         f8:02:95:24:de:79:74:32:d0:94:70:9a:3f:93:19:38:62:af:
         64:c4:8d:38:fc:87:4c:e9:96:8b:31:40:38:9a:f3:41:2a:7c:
         cb:b8:1c:4d:59:ae:73:88:80:ce:4a:1e:b8:1f:74:f7:f5:e7:
         cf:fe:fa:2a:61:2d:f9:d5:b2:f4:c8:eb:8f:7d:f9:76:14:4a:
         b3:6b:b7:18:bc:1e:bd:2a:20:98:df:32:c1:9a:b6:f3:d4:11:
         d6:2d:e7:8d:39:73:79:bc:f8:dd:a9:9b:ce:56:e8:74:bc:83:
         33:3e:4c:93:92:6c:bc:91:9e:e4:f7:ff:e7:b8:e3:96:57:fe:
         96:7c:62:c4:e2:c9:00:1e:3e:12:8c:7f:a0:9d:77:5f:2a:7a:
         57:9c:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:00:15 2024 by rpki-client on console-fra.rpki-client.org