Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File:                     n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier:          UKHSfAEZWDEIM4IWsR0/3WRwvLEb8x42Y6TAn1RCSUE=
Subject key identifier:   36:40:EB:98:C1:54:5A:56:4A:2A:0B:A2:3E:4A:A2:4C:E4:30:D3:C3
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer:       /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial:       018F87ED71AEDF72EE346902EAA5561866BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number:          1021
Signing time:             Fri 17 May 2024 19:00:36 +0000
Manifest this update:     Fri 17 May 2024 19:00:36 +0000
Manifest next update:     Sat 18 May 2024 19:00:36 +0000
Files and hashes:         1: X3Q71_Akqfn1AutEVf7vkgYT5oc.roa (hash: 1sb1sUdPFsm4IlT1ai1hAsxyGwqbEPuZ3W3TZnL/vOQ=)
                          2: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: TIM/XUhzKLkVe3R/R+pRzVBsPNUmAndG2PHqZS2BqRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:71:ae:df:72:ee:34:69:02:ea:a5:56:18:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
        Validity
            Not Before: May 17 19:00:36 2024 GMT
            Not After : May 18 19:00:36 2024 GMT
        Subject: CN=3640eb98c1545a564a2a0ba23e4aa24ce430d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:ef:c0:74:c8:97:c3:e5:7d:6f:80:a4:7e:
                    fb:ba:62:81:ea:d0:aa:e5:24:28:32:8f:6b:6b:0c:
                    76:3a:75:d2:36:ee:d8:df:e1:77:32:e3:0a:16:60:
                    c9:1e:27:0c:b5:5a:f1:dd:a1:e3:5b:91:13:92:ca:
                    bb:4e:be:c6:b1:a9:7e:f4:a4:7f:dd:91:1b:f1:1f:
                    e6:d5:e6:0a:6b:03:06:b5:c4:74:46:24:dd:6c:ba:
                    fd:e5:e8:42:c2:2e:da:31:c1:1d:64:fb:29:7b:cb:
                    6e:66:11:85:e9:cc:65:81:ab:01:b0:f1:ad:fb:0b:
                    9a:00:f5:6a:fc:36:d4:39:0a:76:c7:1c:b8:c7:24:
                    3a:4f:1d:14:89:4c:3b:b2:2b:b6:33:53:f9:4d:28:
                    1b:63:c7:e9:db:cc:43:65:c2:ac:4a:42:a2:af:34:
                    91:a5:1f:1d:0c:90:17:08:60:31:2a:db:7b:73:2d:
                    f5:78:96:68:a7:e8:02:fa:32:e9:d8:e1:be:05:08:
                    35:33:6d:0a:6b:28:dd:5d:9d:8d:10:cc:93:04:4a:
                    57:c6:ba:22:d0:cb:ed:90:3c:aa:e0:ce:42:cd:d5:
                    93:97:8b:64:19:79:45:1d:a1:ed:e6:c5:74:2f:95:
                    e2:7c:14:80:7d:ce:22:b9:69:d5:22:f6:de:74:32:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:EB:98:C1:54:5A:56:4A:2A:0B:A2:3E:4A:A2:4C:E4:30:D3:C3
            X509v3 Authority Key Identifier:
                keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:07:cd:5c:e7:88:ce:14:4d:9f:d0:78:38:88:f2:43:ea:
         3a:2e:ec:38:a5:23:c6:98:93:84:1c:37:7b:eb:c8:e4:63:32:
         05:fb:bb:0c:17:82:73:0a:26:e5:51:4c:eb:72:b9:d4:c1:14:
         74:aa:ed:a4:44:c6:74:e4:89:3a:9a:8a:00:8c:ce:0c:34:68:
         a0:50:14:2c:47:c2:76:8b:f6:e3:a5:89:ba:aa:5e:64:7b:87:
         f9:d6:0f:37:b2:0c:2e:ab:32:c6:92:0f:f0:df:81:11:52:51:
         46:a2:3a:fc:09:54:6d:6e:48:5e:fa:8a:3c:99:f9:b0:35:c6:
         69:b6:fb:51:d2:34:6f:da:52:68:f8:d0:15:21:f7:24:72:d9:
         6a:e5:9e:7b:b1:1e:f9:ec:05:05:13:2b:6f:19:a0:a3:5a:8d:
         2c:55:3b:18:0c:cd:24:06:5d:fe:81:82:d1:58:4f:a1:0d:5b:
         38:97:75:97:a9:19:2f:d9:6d:2a:06:6e:ea:0c:af:89:7b:1a:
         98:22:1e:c3:bf:6f:3d:56:9b:6c:de:d6:4c:49:6a:bc:4f:71:
         62:f3:25:74:80:c1:63:0a:92:f3:5b:c9:e8:56:39:2f:46:21:
         f6:12:d1:b6:2f:08:07:e8:7d:1a:2b:a5:ee:00:34:56:28:f8:
         ea:6a:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:50 2024 by rpki-client on console-ams.rpki-client.org