Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File:                     dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier:          Eob2rQC0QoNC/TqhW8DuaP4DnIMyN8a2ZaIiFz0Fy+U=
Subject key identifier:   E3:8C:5B:1E:9F:1C:F0:48:AC:9A:FC:79:D4:BD:6B:E7:7B:E9:C0:11
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer:       /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial:       018F874B0D84C6743A67A940E692C7C191B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number:          02AE
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: 57hLRygFsxtg7_097xo5DZC_KeE.roa (hash: Jq6PQlVPP00nEQGukkPyEbjRMqVcIIMQSf1z4y90Ilo=)
                          2: 6N7Ml25-ORZUiA4RzpwwTiq-Z54.roa (hash: 5JwhRWdbPObakPkuMHCpmF0VdmALpAsg19OrfuVoWnI=)
                          3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: uVWDKjQ8+TVk8Z9nAYIEZ2n3/Gkv8P9HIsVpTnSqHJs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0d:84:c6:74:3a:67:a9:40:e6:92:c7:c1:91:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=e38c5b1e9f1cf048ac9afc79d4bd6be77be9c011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:d9:47:cb:41:fe:03:29:ff:69:5b:55:b1:
                    b6:75:81:32:f6:68:2f:6f:10:09:70:05:38:23:cd:
                    23:38:e6:fd:94:78:a2:16:d8:21:31:5e:f5:73:87:
                    48:a4:f0:10:8e:86:2d:96:ab:18:da:df:6f:dc:9d:
                    aa:89:04:51:62:79:e4:96:72:5e:f1:94:7b:4a:81:
                    32:ec:13:c5:1d:c6:38:f2:df:df:cf:5d:32:37:85:
                    6f:df:ac:17:bb:a6:3f:2e:f0:87:19:82:1d:20:52:
                    fe:76:e5:c0:2e:90:2d:94:e7:84:fd:4e:fb:d0:3a:
                    4f:c2:6c:41:9f:73:44:44:ef:ac:86:63:19:af:ca:
                    e4:59:b2:73:c3:20:9d:a1:e5:eb:ac:70:9a:5a:b7:
                    ac:a0:3a:9b:41:b1:98:7e:0d:82:ee:ae:d0:b6:18:
                    18:b0:e2:d9:de:f7:c4:1a:79:62:d3:c3:0f:5f:78:
                    a3:48:f8:02:c9:b6:b3:eb:c6:5d:36:3a:ae:7e:70:
                    3d:2f:d4:51:fc:96:71:e9:0c:57:3e:0b:44:6d:a3:
                    87:8f:0b:42:1e:12:d4:e3:1d:07:7a:fe:d6:4f:bf:
                    d7:7c:ad:2d:8e:c3:70:67:df:4f:d4:31:e6:6d:a1:
                    bb:e8:09:8e:8c:fd:98:fc:e5:ce:4c:b3:c7:af:10:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:5B:1E:9F:1C:F0:48:AC:9A:FC:79:D4:BD:6B:E7:7B:E9:C0:11
            X509v3 Authority Key Identifier:
                keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:84:29:dc:16:76:f9:d4:17:fb:2f:64:d8:d5:e4:55:a1:
         97:c3:7c:07:e0:94:87:af:f3:e2:ea:46:18:c3:c2:9c:43:e3:
         2f:7a:1f:5d:77:69:ee:ec:ae:f4:8a:18:ce:58:90:69:46:ec:
         14:f8:f3:b6:d0:a4:ed:48:4e:de:e6:ad:56:77:18:98:3a:72:
         bd:f3:ba:b4:42:38:f2:fd:d9:a9:35:b5:6e:c9:58:ab:2c:b7:
         00:c1:54:22:76:f3:1c:d6:0e:50:dc:f7:ff:e9:fc:a9:90:bf:
         4a:cc:27:50:10:e6:21:69:99:ca:b7:4a:f6:ce:58:9f:dd:91:
         54:7d:86:54:29:06:e1:02:62:b5:b3:6b:63:17:08:d7:37:62:
         1d:fe:c0:4c:e1:2f:0b:83:b9:42:f8:e4:8b:e0:7e:74:fb:df:
         72:5d:7c:d9:91:9f:d0:d1:4d:10:84:99:27:aa:91:35:34:16:
         b4:1e:28:0d:29:da:56:89:77:79:cf:3c:b5:1c:64:1b:18:48:
         9a:c0:87:a6:86:92:37:47:b6:4b:e8:19:46:3f:b1:bb:f7:49:
         bf:3e:93:da:1c:21:85:a7:7e:36:89:06:cc:95:05:20:a2:ae:
         c5:3e:a3:02:99:4a:c7:56:10:7a:45:64:3b:7d:41:48:9e:cc:
         93:de:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:29 2024 by rpki-client on console-ams.rpki-client.org