Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          nT+3jZqAi5OSW+Vu0/rvmoF0UuiVxYJYQQAPIntYcmM=
Subject key identifier:   A3:E5:18:90:68:7D:C0:A2:08:9A:4D:C5:C3:42:49:16:C1:55:6F:83
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       018F6B2D7D86FC29A1FE379DB6619C597E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          0338
Signing time:             Sun 12 May 2024 05:01:34 +0000
Manifest this update:     Sun 12 May 2024 05:01:34 +0000
Manifest next update:     Mon 13 May 2024 05:01:34 +0000
Files and hashes:         1: GHWgTmJB4ox0z-AGKc5u2VSFUJA.roa (hash: 0ggJQzV+uHfKEqYKS30amJXOLyHsX+qCa0pzPfRoEn0=)
                          2: JvC2JdG3hfGkVUXNDNobvLTMzuQ.roa (hash: 2hlprpvYwqwIpcyRe97Fy9yGjH4FCEn/iX3+4+BHBLE=)
                          3: NqPglleMUwtYjtPPgWKBhGv0J0A.roa (hash: bc96Aln0ufgPi+6ht9qWlWj0k+707bA2jx+0QAcDr+0=)
                          4: Veed7dXpGrwofh0EisgTMSFLiJA.roa (hash: NRWS36ZC81+Ibj9b5rXheOabzS9qCiKttzBn9fhTFI8=)
                          5: ZYBYmnx-zL7Urj21PqdVUMoCJkc.roa (hash: dXNfzOe6WH3EtHIBjmHXPqT2idloUXYUKTZizZFC+BY=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: GXAAlUGH1D6E+zie47mlTNxuVOIBZBSb4sWs85ShhMo=)
                          7: xPq4nT5mCky-O6nW4jIbLS2uXU8.roa (hash: f5Vnjb4y+984XKiHNaEkMZr4A0l9r731kc/WCmYDVdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:2d:7d:86:fc:29:a1:fe:37:9d:b6:61:9c:59:7e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: May 12 05:01:34 2024 GMT
            Not After : May 13 05:01:34 2024 GMT
        Subject: CN=a3e51890687dc0a2089a4dc5c3424916c1556f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:22:6d:6b:50:f6:5d:74:db:0f:1d:d5:f7:2a:
                    1f:ed:ee:1c:ad:21:94:f6:91:9a:b7:e7:62:36:51:
                    42:a8:6c:2f:ce:79:4a:0c:e9:ea:f7:a2:0f:39:1d:
                    a8:7f:dc:66:97:65:b7:82:3d:c2:60:40:4c:c5:df:
                    07:fc:db:c6:dd:43:7b:41:4f:16:a7:e2:b9:62:a1:
                    9b:f0:95:ba:49:02:57:5a:ed:4d:56:d4:32:08:13:
                    4b:c2:c7:e3:3d:1a:c3:54:10:cd:6c:ca:ea:6e:ad:
                    76:0d:47:44:7d:d7:16:aa:4f:9c:d9:0a:c1:36:75:
                    7c:4d:dc:8e:fd:b2:58:3b:29:e2:e4:8c:27:aa:cc:
                    a3:c9:35:fb:8f:7f:35:b9:db:2e:03:86:30:e8:b4:
                    6b:cf:5c:dc:a7:92:a2:c3:db:8d:d1:36:98:3d:52:
                    97:20:5b:e8:de:db:32:cd:34:73:21:28:1c:1f:96:
                    4f:fc:64:73:14:db:54:18:9b:6c:1d:dc:ab:05:41:
                    00:64:e9:e9:df:26:cf:ad:a9:1c:83:d9:16:6b:c7:
                    bd:18:bd:46:22:53:f2:4f:c1:ea:2b:a2:ae:f7:d3:
                    ce:1b:ca:06:bb:c7:d8:f0:07:ef:00:45:d9:96:2b:
                    53:aa:00:b8:06:27:e4:97:b4:e1:12:be:81:31:73:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:18:90:68:7D:C0:A2:08:9A:4D:C5:C3:42:49:16:C1:55:6F:83
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:ff:54:f1:2a:8d:09:77:10:ef:f6:0a:08:13:5f:15:b6:
         a1:0e:42:80:ae:ce:78:89:ea:8f:14:d2:57:52:08:9b:77:d3:
         cb:03:3c:05:dd:d9:91:f5:d0:02:e6:12:03:8c:a4:f3:64:3f:
         0f:09:0b:cf:fa:b5:e6:cb:0a:1c:06:90:f7:c0:76:c8:39:30:
         a5:13:c3:dc:f4:ad:cd:01:38:30:6e:c3:de:1f:f0:f3:6e:b2:
         9e:78:55:74:58:7c:02:b9:29:65:a2:4a:ae:4b:57:8c:e2:4c:
         2c:7d:85:cc:d6:29:5e:ef:a2:85:0a:50:c6:af:50:d8:41:39:
         84:20:e7:3b:77:13:02:ed:db:42:bf:9b:9c:cf:8c:2d:73:d0:
         b3:54:8c:4c:15:f0:1b:1b:58:4a:56:69:aa:29:41:85:2f:3a:
         3b:5d:6b:3a:2a:f6:ea:a1:9d:a5:ef:8e:4e:5d:7d:96:5a:13:
         f9:db:82:32:8b:37:b4:d8:28:93:2a:12:54:0b:0d:5e:fa:12:
         78:90:df:2e:fa:6a:57:ea:12:56:9a:f3:aa:19:ad:ff:5a:84:
         3a:6e:d0:be:02:51:04:29:b6:6f:3d:02:55:e9:04:18:9e:2a:
         a6:de:ae:b1:42:e5:7d:59:17:7e:ad:7f:4e:00:09:58:0b:5e:
         db:f5:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 13:54:37 2024 by rpki-client on console-ams.rpki-client.org