Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File:                     mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier:          oOq2oXBtbpZa9hUomEGkQz2i0xKPPAA+6W3kZELmnqY=
Subject key identifier:   F7:92:A9:2B:72:A4:04:A6:72:92:76:49:08:C0:76:6A:DD:F3:78:F5
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer:       /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial:       0190606F916F46175467AFC0CBD9B61FD46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number:          0ED4
Signing time:             Fri 28 Jun 2024 20:00:42 +0000
Manifest this update:     Fri 28 Jun 2024 20:00:42 +0000
Manifest next update:     Sat 29 Jun 2024 20:00:42 +0000
Files and hashes:         1: HAJdnz05mOkeznAsf7_irL_pRsQ.roa (hash: hqadjvwMaB0hkQBtJgNOYlHaGATh+ipy00dIL8fxjdg=)
                          2: UGAK2Vv5vfcj_tqLoCUvojrrljk.roa (hash: dWkfYmwCuxzjtc+jPQuHj1jjKrVCHzu8r1iCqHENxHc=)
                          3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: eowUtiJVC8NgIWqQb3MEKAihzBqa25nRnZUZbcJC584=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:6f:91:6f:46:17:54:67:af:c0:cb:d9:b6:1f:d4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
        Validity
            Not Before: Jun 28 20:00:42 2024 GMT
            Not After : Jun 29 20:00:42 2024 GMT
        Subject: CN=f792a92b72a404a67292764908c0766addf378f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:ca:63:55:1a:07:16:de:df:cf:14:67:d3:
                    e2:72:d7:3b:87:05:a2:3e:06:0d:85:f9:7b:fc:e2:
                    0e:1e:98:c0:0e:32:a2:f4:22:9b:99:80:85:0c:66:
                    1b:3d:a7:51:0c:60:8d:e8:16:95:d2:a4:39:38:b1:
                    6f:89:49:0d:28:7d:e9:bd:62:48:a8:79:87:ba:02:
                    ad:32:9c:f4:26:83:77:ed:70:a1:a0:c5:8f:ad:0b:
                    fe:88:23:b8:a2:2b:41:ec:a1:45:ee:86:dd:2a:05:
                    ac:a9:5a:54:41:72:03:71:89:16:e2:db:fe:ca:21:
                    bc:58:31:7a:47:48:19:be:63:69:09:16:72:3a:99:
                    fd:9d:f8:5a:5d:dc:69:3e:c6:8a:3d:7f:df:32:d7:
                    7d:d7:9f:2f:4a:ee:35:89:7d:12:5e:f5:6c:cc:4e:
                    7e:6c:2e:24:ab:55:c8:84:29:2c:de:e3:4e:f4:dc:
                    cb:03:78:17:e1:f7:cd:e2:df:50:5d:29:c0:ed:37:
                    67:08:5b:b5:2d:4c:57:02:7e:2e:a7:34:81:49:79:
                    64:12:d5:5e:7b:71:4d:b9:17:13:e9:b9:54:9c:6e:
                    a1:b6:70:4d:11:ec:8d:e1:19:7d:84:48:07:35:f2:
                    60:8e:99:8b:24:8e:42:d9:56:a7:1a:bb:ab:fc:cb:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:A9:2B:72:A4:04:A6:72:92:76:49:08:C0:76:6A:DD:F3:78:F5
            X509v3 Authority Key Identifier:
                keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:0e:4e:3a:7d:24:75:6a:a1:f6:03:fe:ae:42:bc:78:ec:
         ae:24:e4:12:f9:72:85:37:67:b4:c1:55:e0:89:e4:89:4d:09:
         d8:77:24:93:f5:91:3f:c1:f9:ee:a5:36:d3:b5:99:d3:af:0e:
         30:cf:df:e7:5c:de:7d:66:6f:9b:6f:55:80:7b:2c:ae:19:14:
         55:77:37:26:ba:8b:fb:56:f3:6f:0f:51:ee:31:9d:d3:15:83:
         cb:fd:0d:6a:77:23:fc:70:38:22:46:01:48:86:cb:69:fe:50:
         98:4d:3a:d3:a6:78:7a:cd:52:32:c8:13:7e:9e:a6:8b:ff:03:
         25:b0:6d:07:82:44:9c:a7:97:df:99:ce:3a:d1:2b:4c:5a:7e:
         bf:98:ff:89:10:8d:2c:72:65:5f:73:d5:77:ea:89:e6:13:7e:
         86:7d:f0:f0:f8:43:59:4b:3c:c2:9e:ca:5c:62:34:15:a0:f1:
         87:b4:32:63:1f:40:27:ca:36:02:a3:5d:f4:2a:44:fd:16:18:
         1b:7c:b9:da:e0:04:37:f4:41:23:5d:a9:e0:f9:c5:40:2f:0e:
         68:f8:e0:75:5a:5e:05:10:1e:79:7a:86:fd:2f:64:73:a8:51:
         92:68:d6:58:ef:1c:ca:a1:32:b8:5a:d6:da:33:49:c4:7a:dd:
         67:94:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:44:07 2024 by rpki-client on console-ams.rpki-client.org