Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          xuL8UDxT+3jRmjjUfkoULFOcNe0EOQtllJKZb4HopJo=
Subject key identifier:   73:A9:21:5E:5F:CF:95:F6:14:1B:DE:E4:8E:32:E9:A2:07:68:BF:04
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       018F43B31BDA62472FC116431C944EA3B6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 13:02:42 +0000
Manifest this update:     Sat 04 May 2024 13:02:42 +0000
Manifest next update:     Sun 05 May 2024 13:02:42 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: Q2Y+7EnSqMGwgiDoU1nzpNtU+feWYKKUYredn3nen4w=)
                          2: OabrQ2IG7lLzi3tra4eQ4todayU.roa (hash: VPrC0JD2TisAWXeKTrKUyuS77BkygEhO3sB4dcYCmXo=)
                          3: a-uF0ilFX531YVGrPM7y8uBk-ds.roa (hash: OLwGjo8Ivg3l2qhjIXae48nuQn2TfLVjpKnrP6a5RzE=)
                          4: arUKsDh34NtQa4oR_LAFMry96TI.roa (hash: +g8HHyvS+oRYOYohx/a0Du7yjuboBje5JAYjpsAld9A=)
                          5: qEamaLnnc3q2Bms9cK640GFRmW0.roa (hash: V+ZZOjO93mvCrcxmQJOEClrhvKm/LHfQtEtH/Pj8XJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:1b:da:62:47:2f:c1:16:43:1c:94:4e:a3:b6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: May  4 13:02:42 2024 GMT
            Not After : May  5 13:02:42 2024 GMT
        Subject: CN=73a9215e5fcf95f6141bdee48e32e9a20768bf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:c9:c3:31:3f:6a:6e:e9:48:2f:d1:c0:03:
                    24:3e:4b:0c:c7:b3:b9:6f:66:55:66:b1:07:f7:f6:
                    56:95:1b:05:21:05:26:95:61:08:55:6c:ba:6a:c9:
                    9d:45:5e:df:07:8d:6f:95:d6:1b:84:25:fe:d1:8d:
                    7c:11:53:97:da:68:3c:62:19:88:f4:49:a9:7b:58:
                    10:f1:ef:b8:89:85:d1:e1:02:ca:e7:f6:ad:1b:09:
                    92:82:ab:41:90:7d:49:b3:0b:c6:10:27:9a:19:69:
                    6d:19:59:f1:99:34:11:82:f5:4d:d6:20:bb:23:e6:
                    28:ac:6c:bb:41:42:6f:fb:1c:1a:d8:41:f2:f9:74:
                    9b:b0:12:55:7a:10:82:13:fe:61:11:fe:86:da:aa:
                    b9:e1:74:47:18:80:13:ac:17:3b:71:c1:be:88:b0:
                    90:00:4b:89:e0:50:e4:ef:8e:84:b5:c8:51:de:eb:
                    cf:13:ec:ab:83:95:3e:c3:87:fc:c5:da:67:9e:5b:
                    56:8e:47:bb:5e:18:e5:b5:33:45:52:09:10:24:0f:
                    ea:80:53:8e:4d:36:b8:4d:d1:ad:f5:07:e6:44:d0:
                    8d:fa:0a:c6:0b:ef:f1:d7:45:bd:08:f5:1a:8b:e6:
                    fe:c5:6a:c8:df:98:88:1a:ec:a8:66:36:33:e8:4b:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:21:5E:5F:CF:95:F6:14:1B:DE:E4:8E:32:E9:A2:07:68:BF:04
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:42:58:fb:33:35:f6:5d:2b:da:9c:f7:5f:8c:27:ad:81:
         45:98:47:f6:b6:f1:7e:60:c5:3d:5f:2d:34:9a:76:ea:c9:22:
         b9:bc:66:8a:91:ea:3f:7a:e0:a7:53:8c:c8:ff:ad:a7:e3:5b:
         6a:b2:77:29:ca:db:96:32:83:33:7e:d6:1e:b8:7e:cb:5f:ba:
         b4:f3:0e:00:66:59:56:ca:3a:a1:f8:cb:35:91:7d:a0:16:8c:
         e7:b6:51:3b:9f:80:29:1a:21:6c:35:34:cf:23:0c:be:3c:b5:
         fd:3c:af:16:f0:00:4f:c2:b1:78:ab:4d:3f:fd:84:db:e2:7d:
         31:14:37:8d:34:1b:f3:82:5e:0b:8c:30:a0:54:a5:20:6a:cd:
         b6:90:f7:33:d1:8c:b2:eb:4c:8b:22:8a:57:68:60:11:40:59:
         8b:4b:49:c2:d2:00:a9:3c:80:84:1d:93:73:00:b1:de:20:85:
         6f:15:8d:96:a0:bf:b2:53:e4:a4:29:d3:a5:95:04:36:ae:04:
         7f:8e:04:16:63:3d:9a:ad:c2:57:ee:84:1a:a1:63:ae:1a:3e:
         94:2a:e3:b2:92:4b:e7:28:40:e2:af:32:11:1e:78:8e:0a:9f:
         85:4a:85:d2:e3:21:68:82:b7:2a:cd:5c:1d:74:76:78:aa:16:
         2c:96:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:00:31 2024 by rpki-client on console-fra.rpki-client.org