Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          m0uVT1YE6tLg2OF1/wteMD9EtaT+ZqLVv6FAqMYWT1w=
Subject key identifier:   4F:5D:58:08:56:B7:4C:90:87:8C:F6:80:74:59:88:46:81:B4:A5:53
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       018F219349136E4EBA4820D186DEA5B1CF5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0A74
Signing time:             Sat 27 Apr 2024 22:00:51 +0000
Manifest this update:     Sat 27 Apr 2024 22:00:51 +0000
Manifest next update:     Sun 28 Apr 2024 22:00:51 +0000
Files and hashes:         1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: FvSr5GCsnld+PJ1d1v1zbpwLEypFOhtFP5XJWwBgLrY=)
                          2: 5Dsuy3pwInf0DO5B0RNoed9MF2I.roa (hash: vhO85IJ6xa6a9MizAeI699B1jJv37rgdlwh9Hh3mWV8=)
                          3: MsrsF8pu_X6hSowibd-lhWOOCKA.roa (hash: JCLDVY9xV2IE9hzTIL0wKWXYDNMHsEQ8mpgNNxEAizw=)
                          4: PqPhveYy0qAF5pRRh7YlWU1Vr5s.roa (hash: X2YQZikzOdeTk3yTemCPklb4t7/SGCGC1DNnbU2fgTQ=)
                          5: hMfGc-wEmzwrPDdW6aT_41YgbMM.roa (hash: hfZoUykf7x20R9zDmcTdYwgvkk0Tql+VrdNsCl+LJjY=)
                          6: sZu2vx-WnN_r00ooyD4IdUOlHRc.roa (hash: JlxQXKYvhYVQmWIu9JlWwtoYNo30aW2OsvkzrpvaECw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:93:49:13:6e:4e:ba:48:20:d1:86:de:a5:b1:cf:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Apr 27 22:00:51 2024 GMT
            Not After : Apr 28 22:00:51 2024 GMT
        Subject: CN=4f5d580856b74c90878cf6807459884681b4a553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:cd:66:da:e4:df:04:73:ea:ca:f3:00:02:
                    79:40:29:fd:2d:ef:58:60:6c:9c:6f:e0:19:97:ab:
                    55:7a:c3:cc:f3:d0:80:c9:eb:17:2b:ed:81:62:fd:
                    a3:1d:0c:09:a6:b0:31:66:6c:e2:cf:a7:36:04:d1:
                    1c:46:99:e9:bf:4e:2b:d5:9d:9d:66:0d:2c:3a:d5:
                    f4:47:a3:ac:93:fa:a1:4d:35:4f:16:1b:f5:ff:29:
                    a4:5e:ff:8b:5c:11:9b:03:31:64:01:93:c7:ac:b8:
                    94:f6:1f:ed:f8:41:b7:43:3c:a4:01:22:f8:62:2d:
                    40:f1:ad:3c:dd:b8:eb:62:5f:c4:cf:98:11:af:f3:
                    25:79:33:53:3d:aa:3f:7a:2d:a0:0c:96:88:fd:e3:
                    15:76:b7:18:b7:e1:a7:05:40:4a:99:43:2f:3e:96:
                    de:c3:9f:42:16:3d:27:b1:c5:65:d9:8e:a4:2f:2e:
                    e1:8c:47:48:f0:2e:8e:4c:ec:a3:c4:90:6d:c6:c7:
                    04:64:f3:cc:80:e1:d9:b7:62:29:6c:b1:1f:e1:0e:
                    ab:56:97:9f:72:33:22:78:ef:b6:42:a4:1d:47:7e:
                    65:3d:2f:b8:82:58:66:a9:bc:bc:ba:0b:5d:a8:3d:
                    68:44:45:af:e7:4e:4e:22:c0:e2:47:92:d0:0f:55:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:58:08:56:B7:4C:90:87:8C:F6:80:74:59:88:46:81:B4:A5:53
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e5:31:a6:9d:61:18:18:f3:15:c5:0e:52:e7:c0:e5:8e:cb:
         e3:4c:96:2f:2e:21:cd:2e:ad:2f:71:36:23:92:fe:d0:f4:3f:
         0f:c4:55:39:6d:24:9c:be:92:8b:91:48:b9:e7:43:c5:6e:22:
         4c:30:d7:17:54:26:3f:e4:66:6e:f8:5d:e3:01:6d:db:6d:39:
         9b:81:1f:5f:e2:97:17:a0:00:7f:29:43:bf:06:18:6f:a3:8a:
         23:d9:52:23:e1:45:eb:01:f3:1e:c0:c8:57:39:bc:e4:b0:13:
         00:1b:2a:e5:db:18:e3:78:5a:8c:3e:89:03:fe:12:aa:06:c2:
         08:d9:7d:a4:93:d7:9e:8c:59:66:fb:f1:24:56:dc:6b:56:63:
         40:19:cb:b2:34:82:8f:64:bd:5f:5b:8f:b3:d7:33:f3:65:12:
         d4:f4:f4:29:f5:6f:88:17:d7:8e:b9:65:ab:ee:66:15:d4:22:
         09:73:15:d4:c3:a9:c1:bd:19:01:bc:9a:33:65:0a:11:3c:33:
         58:b6:51:e3:01:d9:82:3f:c9:76:f3:a4:0b:b2:5e:43:a5:28:
         5a:e7:f2:9c:1c:71:69:f2:06:2e:29:a5:ad:9b:28:9f:91:9d:
         a9:a7:c7:a9:46:bf:83:17:48:e9:b4:3d:c9:40:f6:dc:51:f3:
         6d:46:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:25:52 2024 by rpki-client on console-ams.rpki-client.org