Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          /AhhMR2MXUBpeoZ3OEPo2xLr3/FZzJzfga3SfVkL3GM=
Subject key identifier:   80:42:50:DB:76:0D:1B:AC:E4:AC:6A:89:A5:1E:B7:6B:A2:18:02:CF
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       018F836E023C3FB78656F85FAF737CB7C720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0259
Signing time:             Thu 16 May 2024 22:02:55 +0000
Manifest this update:     Thu 16 May 2024 22:02:55 +0000
Manifest next update:     Fri 17 May 2024 22:02:55 +0000
Files and hashes:         1: PIbnZqZtkGC1kAkmHHnCO8dy-9k.roa (hash: QVNlPxSwQrF/EceHbZ1zIaz49yBfwI1L2Hfp6aRAL2o=)
                          2: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: YA+frLM3VeEZhQLqUGzvpdMG3Z8mHyR0XKOwt3uIEl8=)
                          3: kau2fek8Qno47rIqlvYeRan8xYs.roa (hash: m2KvBrcyRGjwUDM5vzjThL/g2tvPVNICNRbcGiZBirk=)
                          4: ynv1tiewBipE48vBhIcTLOZ5sgE.roa (hash: rJ8xPc/AbyXshJ4L9y1QoaK0ETvLQ1NszqnwN8Mg0SE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:02:3c:3f:b7:86:56:f8:5f:af:73:7c:b7:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: May 16 22:02:55 2024 GMT
            Not After : May 17 22:02:55 2024 GMT
        Subject: CN=804250db760d1bace4ac6a89a51eb76ba21802cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:85:47:6b:37:62:28:a8:48:cd:40:d1:23:
                    4f:95:30:ad:7c:17:0c:76:0a:58:50:4d:af:e5:e1:
                    f4:2c:15:7c:38:79:c0:b3:0d:c2:92:32:06:89:0a:
                    5b:9d:63:35:74:7b:47:3b:7d:5c:9b:d4:9a:e8:7c:
                    08:a4:b7:4a:5b:a0:e3:96:b1:6f:84:ec:2b:8b:d5:
                    b0:71:36:cd:19:9a:a9:74:c0:66:8d:6d:ae:ac:b1:
                    35:17:5f:fe:f9:01:60:3c:4c:14:56:f7:8f:02:f5:
                    dd:dc:44:41:15:37:7a:89:e5:64:40:2b:17:7f:cb:
                    8d:f8:e2:ae:52:d1:39:13:75:2c:bb:b8:d6:f7:ba:
                    b1:6a:f3:ed:58:72:e7:9e:f5:95:19:57:e7:34:d5:
                    ec:6e:b6:7b:69:62:47:f7:9f:eb:0a:d6:c2:83:b6:
                    84:7b:2b:70:0e:cc:be:00:21:64:82:e3:11:20:aa:
                    98:21:58:7f:0d:8a:88:fb:8b:df:27:b2:48:66:2e:
                    24:67:45:ce:cc:fe:7c:bf:cf:fb:e9:0f:50:e6:c0:
                    7a:a6:9d:f6:f9:d1:72:fc:34:85:2d:ad:53:ae:f8:
                    60:8c:d3:ff:f4:43:6f:ec:54:0b:e3:9f:27:a2:46:
                    c5:bc:e2:bf:6f:5f:38:15:f1:d7:fb:04:a7:aa:b1:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:50:DB:76:0D:1B:AC:E4:AC:6A:89:A5:1E:B7:6B:A2:18:02:CF
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:d9:c6:e4:d9:9c:22:cc:03:8d:ce:f7:7a:8a:86:a1:eb:
         88:a8:ef:b6:5b:a5:97:0a:da:ca:d4:1a:72:e4:84:32:8c:e5:
         05:c0:48:1d:ac:61:34:35:78:57:b4:47:e4:fa:27:d4:56:6a:
         8a:1b:64:46:78:9a:5a:15:6f:59:6c:24:89:76:45:11:fb:35:
         90:04:77:f1:02:0c:a0:c2:70:db:4e:09:a2:7d:c8:fa:c8:ea:
         95:2a:47:36:03:c2:29:cc:4d:c8:b0:9f:b3:08:e8:50:1e:84:
         94:12:42:27:cb:43:59:bc:f6:05:c1:a5:fa:25:3f:cb:83:a5:
         f8:c2:bc:b2:0d:b2:67:f8:7c:9c:ee:d2:da:ec:cb:a0:2e:12:
         c3:b3:75:8a:34:f3:a2:9e:ca:b9:29:23:5c:dd:d0:17:4c:47:
         66:9d:6a:b4:25:cc:6c:8e:74:f9:51:24:a9:34:57:95:79:1b:
         ae:95:68:18:d9:a8:b2:fe:cf:f6:6d:62:1b:bb:cd:5c:2c:43:
         5f:91:ad:16:a6:9d:58:2c:16:06:13:b1:5c:0d:30:7f:20:cf:
         35:c4:4c:26:58:0e:aa:ba:b0:a4:55:37:27:e1:5e:89:e0:d2:
         f0:e5:09:07:dd:f8:44:60:8f:05:f4:50:87:dc:9c:10:d9:36:
         36:00:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:13:51 2024 by rpki-client on console-fra.rpki-client.org