Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          mNGF6ogw+D+/QM3NlHvmzetO4wD+NXBXhiFsLJB3ma8=
Subject key identifier:   DD:1E:95:8C:EA:13:8C:94:76:DA:B6:B2:BC:89:CF:A2:0C:A2:9D:20
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       018F83D9D7563E61116309EE0BAF9F32051C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          8D
Signing time:             Fri 17 May 2024 00:00:42 +0000
Manifest this update:     Fri 17 May 2024 00:00:42 +0000
Manifest next update:     Sat 18 May 2024 00:00:42 +0000
Files and hashes:         1: LBbvLSAUlEuG01rn5vP0JXY9KXY.roa (hash: ha+9ZI2lrny2NKu+Mi6OEqV8WZ3Wr1xJK3RHW0oAa/4=)
                          2: M5avupBoG4ZnMItchDzfP1XNufs.roa (hash: 00Yc8FeK5s++MrLFXhqwsNitSHhHTgpK5QgWnPs/mCo=)
                          3: YuMXvy_LCmr_ye1cim7RQj7lOKI.roa (hash: DVH4Y32ek8o9A73j4/n91w2wrdS5sz4XtEeISxuj8vs=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: 32/5kpiaezJBgPOGQWsr1qpVmg5dYH+ZiBaXM2B7nAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:d7:56:3e:61:11:63:09:ee:0b:af:9f:32:05:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: May 17 00:00:42 2024 GMT
            Not After : May 18 00:00:42 2024 GMT
        Subject: CN=dd1e958cea138c9476dab6b2bc89cfa20ca29d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:95:3e:f8:98:cb:f4:91:70:88:06:ff:9a:
                    8e:8b:c1:d2:2d:7e:fd:91:40:f2:f5:40:90:b6:a1:
                    1c:9c:df:4d:3b:00:11:15:71:cb:2b:03:60:71:de:
                    ca:ca:16:a4:32:7a:1c:8d:09:19:c4:bb:fe:4f:92:
                    b0:27:68:fd:8c:9f:dc:ef:7b:cb:1e:45:02:16:a7:
                    02:a2:69:e3:7c:51:fc:82:ed:ba:4e:16:d5:27:e7:
                    5c:7c:90:61:89:a0:56:2c:e2:25:1a:de:1f:96:1f:
                    5e:09:aa:5b:27:8c:a0:2e:49:ad:05:d2:6d:ce:20:
                    c5:be:91:44:ea:92:bc:e2:74:a6:c3:9e:fc:58:38:
                    3a:9c:08:0f:b5:80:fe:75:2e:b6:23:6d:9a:f2:5c:
                    30:d6:1b:8d:0c:f0:56:43:4f:6e:53:a8:f8:87:d6:
                    83:2b:8e:d9:43:b2:a9:98:99:9b:50:10:4d:93:42:
                    6b:65:31:10:76:dc:8e:1e:9b:bc:15:d5:e6:f0:01:
                    19:00:d8:84:cd:fd:ed:b7:dc:c7:6c:e6:d0:0b:10:
                    f5:d5:49:37:d8:1e:bb:d4:95:1c:9c:ab:5c:3c:e7:
                    2d:5a:e1:e5:39:00:ca:db:b0:17:09:9d:31:b2:29:
                    9b:e3:80:9f:fb:ab:dc:1a:10:10:5c:d5:45:c7:12:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1E:95:8C:EA:13:8C:94:76:DA:B6:B2:BC:89:CF:A2:0C:A2:9D:20
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:de:b0:fd:14:13:13:57:9b:36:dc:1a:05:85:f3:90:e5:af:
         78:38:2a:e9:36:24:44:37:f2:4a:aa:42:63:8d:4a:12:83:c7:
         f4:65:b9:e4:9b:2e:ae:83:2d:1a:c2:0f:35:51:cc:62:50:83:
         f2:df:6d:4b:13:4d:b8:95:9c:74:f8:e1:dc:0c:26:e5:1c:5a:
         fe:68:48:b5:7f:8c:c4:d9:cc:99:55:f9:20:7c:ff:62:f2:8a:
         3a:4b:82:80:13:32:f2:57:29:9f:91:f9:71:07:8b:72:54:c1:
         5e:9f:66:37:9c:8d:f7:d4:88:4d:90:79:da:5e:4c:7e:7b:f4:
         36:df:f6:86:84:79:d7:3f:7b:3a:c1:1b:65:82:05:3e:a8:bc:
         2e:4f:c4:d1:f2:2c:4c:d0:d8:e7:7e:0b:eb:bf:72:3b:ff:55:
         05:4a:9c:ba:62:a9:25:70:ca:ca:82:d3:01:77:f5:9f:58:4a:
         af:a4:6e:f3:40:9e:45:3c:d2:80:70:a6:a3:33:ab:9a:03:d6:
         2b:b9:95:62:19:87:7b:5a:57:87:87:ab:e8:ad:01:99:65:8a:
         38:18:0c:92:eb:fb:f5:7a:42:b1:69:b5:5c:76:ba:14:03:e3:
         a6:43:c6:ab:f0:02:95:b6:f5:4f:03:2a:2a:50:bb:7f:d9:5f:
         0c:97:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:15:36 2024 by rpki-client on console-ams.rpki-client.org