Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File:                     ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier:          /7hBwwTecfYwKKWcdRlPIdzGErLF43cWWVWAwVpx9y8=
Subject key identifier:   8B:16:89:9C:D1:2B:9A:FA:A8:54:25:3C:46:EB:15:05:A1:1F:01:87
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       018F3663CD1E8CC4D975A8722E52FCCD4EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number:          100C
Signing time:             Wed 01 May 2024 23:01:01 +0000
Manifest this update:     Wed 01 May 2024 23:01:01 +0000
Manifest next update:     Thu 02 May 2024 23:01:01 +0000
Files and hashes:         1: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 1bx3EMjMzveJB1MF/sIZOv/tuX4vV/pR2olK6RtAcCM=)
                          2: If0vZeAVvOUSIdBUjOK2TTFK8hQ.roa (hash: Ei6TJyzqPmV9Mm2D2yZDcDzEZpVT5/jEamzRFRfKysQ=)
                          3: M2NmvdhSM3EX3n7mklEywVTyVrw.roa (hash: EiNDORA1jr02kWYXyuVqjP/9QzFPy9+u0jJrIsRG5fo=)
                          4: T2qfLLU9KQyUAlmJSK7KQS-pddo.roa (hash: Cz1dMQNLlsBc0Xb75loL8VmjgxXubhSEr7yDuQswKjY=)
                          5: Vk3XJjpD-uxE-BvjbWpWm9I_Pf8.roa (hash: DPxf9v1qmqDryq5R6cYrdP0GsIPt4dSzgx6Jhue3Umo=)
                          6: ZGBSnZxA4fFcUaEtN0TUBKVqLAQ.roa (hash: c45BknisxSFH655MQtd+R+oVFYpYNIbLQHLlyOXbFmk=)
                          7: gaRHHpOwIzb4VxGEtIE2qFy_axE.roa (hash: 1P/OoQyiSVYg3Ww8WwS5vn5A/nwsH8xBI+tUJj+zk6M=)
                          8: leYTYCy3aogj89mep7XJJoBKGW4.roa (hash: UkMAKVigxaaz3RN/hYrVZvsSmJeYkaHUAQpMEo0AYq8=)
                          9: lrqYyB4TxtmHyjXyTk_yCzC3iGA.roa (hash: wFSfw7/2QlGtJmIz4DxRT8rxRLgy9E53NEkIsAj2N1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:63:cd:1e:8c:c4:d9:75:a8:72:2e:52:fc:cd:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: May  1 23:01:01 2024 GMT
            Not After : May  2 23:01:01 2024 GMT
        Subject: CN=8b16899cd12b9afaa854253c46eb1505a11f0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:ca:7a:9f:36:ef:73:8b:4d:08:56:26:6d:
                    c7:41:a7:69:53:2f:2a:c1:3b:da:b0:27:78:70:23:
                    64:f7:e3:f6:eb:4b:f9:85:eb:90:51:3d:17:ef:fa:
                    c1:87:10:68:d5:b8:ea:37:78:4c:77:6a:d0:8d:a5:
                    82:2a:18:26:44:98:98:54:c5:22:76:5d:8a:b2:bd:
                    db:67:8b:5d:8b:60:fa:eb:34:52:16:98:8a:82:e9:
                    31:f6:79:47:33:85:94:c5:48:5e:26:5b:ab:c7:96:
                    18:25:5a:9f:76:aa:d2:07:92:aa:f5:81:b5:be:6d:
                    7b:63:7a:a9:a1:ea:d4:1f:45:d3:31:34:3c:6a:d1:
                    d0:cc:50:48:fd:3f:e6:45:5d:17:15:e7:47:71:43:
                    53:86:c6:e7:92:57:09:f3:a1:20:d4:13:da:50:94:
                    f2:67:55:bf:b9:d6:ac:88:ba:75:83:b0:dd:37:5c:
                    6a:f8:d9:b7:17:71:9a:6c:c2:a5:71:5c:67:59:0b:
                    98:ef:a3:92:2a:2a:c0:a6:3c:bd:0c:5a:04:9a:94:
                    1e:0b:22:20:e7:74:73:7c:29:54:b4:1b:75:a9:88:
                    20:35:9f:e4:ab:5e:93:33:4e:1c:52:12:0b:a7:09:
                    0e:0c:97:fc:32:f7:3e:2d:02:64:98:9b:2b:1f:4b:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:89:9C:D1:2B:9A:FA:A8:54:25:3C:46:EB:15:05:A1:1F:01:87
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:60:f9:52:6e:dc:89:51:10:1c:fd:f0:4e:b6:12:a3:13:5a:
         a5:d5:9f:00:86:e1:ef:75:a6:32:ec:e6:34:43:72:3d:f4:ed:
         f1:98:04:11:ea:74:bc:b0:42:57:e6:c7:57:a2:1f:7f:f7:41:
         9b:dd:91:fa:a0:d2:ae:22:69:0e:2c:2e:42:19:34:ca:15:cb:
         d2:18:00:09:ed:3f:b3:8d:7d:51:27:d9:e4:65:d6:89:82:42:
         6b:0d:40:dd:e7:0a:51:81:7c:92:69:3d:d4:2d:38:35:d4:92:
         bd:3a:17:8c:6e:83:f0:d4:09:82:06:d2:ad:08:0e:32:8f:db:
         08:b3:29:d2:3c:ef:2e:a8:34:a8:2b:25:e7:f5:7b:e2:4a:2c:
         83:57:93:b0:6a:25:cb:32:a4:1f:73:30:6a:1c:8e:5f:e1:7d:
         02:18:b3:ab:fc:45:82:01:b9:c9:db:4b:27:b2:18:d1:ef:76:
         e7:d2:37:a6:85:cb:f8:77:12:84:34:f5:f0:72:7c:9e:0b:58:
         55:16:51:ad:5f:3a:4a:09:d9:77:ff:fd:f7:8c:06:9a:b3:60:
         8c:3d:43:ac:42:67:ad:b9:3d:31:56:91:47:79:48:1f:71:4b:
         a5:bf:27:27:e7:1d:53:6a:fb:93:fd:ec:3f:49:76:69:00:93:
         0b:36:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:02:33 2024 by rpki-client on console-ams.rpki-client.org