Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File:                     ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier:          DPKWHu55IlMLJfmhkaaCbXG5Sl9Z/KvPfTTMYHJ/zMo=
Subject key identifier:   63:35:2C:2A:CE:F7:88:0A:8B:03:AD:CD:78:BF:C7:5D:3A:6A:3D:88
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer:       /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial:       018F87B6CE6C66E0D63C9CD3C3FF6BBDE644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number:          09E5
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: 1-XCqISZJPfKDpFkpalYSd6LpAoY.roa (hash: qUtLSGTTd9gqoQAspn2hpA3niynFE7ux4oURcpo7Ujo=)
                          2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: rSyDjbLkzKZsxenGYXdBvcPBYoqmI/IoR1N7tOEx+fE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ce:6c:66:e0:d6:3c:9c:d3:c3:ff:6b:bd:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=63352c2acef7880a8b03adcd78bfc75d3a6a3d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:e1:c8:b9:43:3a:49:ea:f1:b4:f1:c0:57:
                    14:ee:8c:2b:69:33:2b:fc:d4:de:6c:2b:46:1d:cc:
                    39:29:9c:51:bf:d9:ce:af:4c:f8:ff:78:bf:d9:58:
                    d9:9d:69:9d:d7:d1:c9:d0:29:49:e1:00:2f:ef:32:
                    e7:68:a8:b4:68:dc:23:72:3e:18:0b:35:20:9e:56:
                    f5:f9:66:f8:0a:49:7f:b5:74:56:1a:44:db:34:fc:
                    a3:49:a6:e2:0f:18:dd:75:09:c0:97:60:d7:b4:b4:
                    be:92:dd:d7:3f:bd:26:52:ab:80:ac:0f:65:f5:64:
                    7e:54:bd:9f:37:35:c9:9e:1e:29:9d:91:e3:13:37:
                    7d:4f:98:f3:24:79:c4:52:84:ad:e7:73:01:4d:86:
                    e8:94:1f:0f:ed:fe:68:00:63:17:28:83:7c:fe:5b:
                    a6:7f:b6:e7:e0:6e:50:2e:3b:6f:44:33:2d:97:36:
                    6e:b9:91:7b:8e:97:74:aa:21:55:0a:ac:e4:75:b5:
                    d7:d9:16:4a:34:07:a1:55:ee:99:b0:0c:ce:53:b7:
                    47:89:72:2f:0f:10:3d:ed:ae:a3:ae:92:ff:15:5a:
                    b3:d4:38:92:16:49:0a:67:80:cd:ab:d3:1b:dd:12:
                    79:d7:cf:ac:04:36:59:b2:d2:7f:3e:32:ee:cb:e7:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:2C:2A:CE:F7:88:0A:8B:03:AD:CD:78:BF:C7:5D:3A:6A:3D:88
            X509v3 Authority Key Identifier:
                keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:93:b8:22:8c:ab:76:48:20:d3:b7:06:e1:e6:03:61:03:bc:
         a1:c6:2a:a9:fd:74:bb:0b:49:2f:d4:a3:80:b9:6c:21:95:3e:
         29:31:d7:fa:c4:f8:3b:1d:7b:06:98:39:a5:15:38:eb:f7:34:
         69:12:74:28:c0:fb:f0:8f:7e:8e:8a:00:f8:e0:69:f7:11:15:
         0a:2c:f3:5c:67:78:9e:3a:a3:48:ae:27:0f:c1:e7:e5:6e:eb:
         57:be:bb:1c:db:24:62:e3:d4:bc:71:fc:f6:8c:61:f0:c5:53:
         4e:1e:a9:43:cc:ca:92:5a:49:76:61:2e:94:bf:0d:89:5e:19:
         a8:d1:01:a4:ac:ce:70:f3:d2:bd:5e:14:e8:d0:b9:bd:94:19:
         3a:45:40:48:71:81:e8:f8:09:6b:ce:b9:79:30:83:f4:c2:e0:
         0e:9c:29:c1:c1:a5:22:b7:42:01:16:c4:1f:f7:b9:bf:75:03:
         3b:a0:b4:2d:3a:a5:90:4b:68:65:73:ff:f0:bd:78:ee:7b:3a:
         bc:c2:59:8e:72:23:6e:ef:bf:e9:c9:74:3a:1f:db:40:b4:a6:
         40:a7:27:d4:61:4e:bf:9d:ab:bd:78:24:1b:17:2b:7e:3b:fc:
         b5:7d:08:ba:53:ed:63:a9:f8:89:81:17:ec:ad:2c:06:70:50:
         64:a1:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:46 2024 by rpki-client on console-ams.rpki-client.org