Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          fKKItkE+54wHQ7ZUkI7MVcA9BbQX3ZXKOpKg4dpYKtw=
Subject key identifier:   70:EA:21:29:66:39:DE:C5:7D:E6:94:24:E1:B6:36:5A:FF:13:41:03
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       018F5A397BF1CC11D1C456176E0DADFBD7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          0A38
Signing time:             Wed 08 May 2024 22:01:07 +0000
Manifest this update:     Wed 08 May 2024 22:01:07 +0000
Manifest next update:     Thu 09 May 2024 22:01:07 +0000
Files and hashes:         1: 3Q-fRC3mcMCjO-XzNDaI8p6NXQY.roa (hash: A2LrEGEFNDMylOdD3M9/KzlVIw+oUrv9pD8QraMoyIo=)
                          2: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: JBF/7z7cgc3erhBLZxRPQVPQxMSV9oiophL5QD5hD7A=)
                          3: CpLkKYBksC8zUs6zYeEVCwei3V8.roa (hash: Fb/va4I7uYZ+1AwJX0iZb5/VG6/T6uSRO9R6/17i+OQ=)
                          4: bLNpMNkvk0YXTrsGo_sbVIrjvs4.roa (hash: qOsCKvOUAPO0FC1itc1nzqHCocvbz7tnf4bTEnR4tzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:39:7b:f1:cc:11:d1:c4:56:17:6e:0d:ad:fb:d7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: May  8 22:01:07 2024 GMT
            Not After : May  9 22:01:07 2024 GMT
        Subject: CN=70ea21296639dec57de69424e1b6365aff134103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:55:19:bb:10:7b:8f:3b:e0:33:85:36:57:
                    d4:f9:6a:f9:c9:c2:3e:d8:c0:97:1a:d6:99:90:47:
                    d2:22:89:7c:0c:f7:23:b8:f8:cc:86:84:5d:ed:81:
                    26:5e:72:ca:59:4e:4a:a5:20:39:85:f8:7a:05:c3:
                    25:1e:f2:46:fa:51:fa:7a:b6:8d:1e:b1:c0:1a:3e:
                    bb:e1:b3:52:e2:be:a6:80:57:ca:de:2c:23:5e:95:
                    85:d3:1f:24:36:44:ed:84:ed:d4:e5:8c:34:4d:d2:
                    90:06:f4:71:be:c6:f1:49:74:09:60:ce:32:4c:74:
                    e3:1d:03:d5:46:65:db:a5:52:dc:e7:94:ed:54:88:
                    bc:e9:0b:25:2d:aa:96:56:ca:8f:01:11:4e:85:8f:
                    a2:5f:3a:62:a8:20:ff:2b:1e:1d:1d:56:53:74:4a:
                    46:a5:2d:7b:6f:98:84:73:61:9e:04:ba:b6:d2:d0:
                    87:38:56:5d:a3:bf:b2:8a:0b:a1:de:06:59:c8:82:
                    aa:8b:5b:5d:de:ff:1b:aa:ac:cc:2a:a3:ee:ea:f2:
                    d9:bd:b1:ce:68:65:2e:0f:d6:ff:a2:78:af:0e:65:
                    5d:81:d9:36:43:98:0b:af:9f:df:0a:cf:14:2e:61:
                    16:3d:ba:41:5c:f9:af:83:b8:b8:6e:2c:0c:77:cd:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:21:29:66:39:DE:C5:7D:E6:94:24:E1:B6:36:5A:FF:13:41:03
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:78:b3:d2:7b:07:40:7e:3d:35:5b:95:84:b9:97:e1:69:
         3a:d4:17:93:e2:83:b2:4d:ff:43:63:3f:1c:75:5c:4e:ad:03:
         df:64:fe:15:0a:6e:8d:1d:83:d0:91:de:86:5e:a4:15:d0:83:
         ce:98:fb:f5:2f:a1:24:1a:7d:71:85:6f:2f:d3:9d:18:5d:a0:
         23:a5:19:ae:60:11:57:a7:5e:aa:28:c9:2c:97:16:a2:bf:9d:
         2a:a4:62:f8:1d:b6:bd:29:ca:d7:51:77:dc:3e:78:2f:08:1c:
         85:99:aa:69:52:15:cb:c8:9a:80:aa:ec:92:4f:4d:5f:14:c7:
         e2:6f:93:c4:7f:70:18:7f:cf:ab:ec:85:8c:97:69:0d:70:ca:
         64:0e:6e:be:df:82:7e:30:6b:91:8b:af:de:24:1e:ef:60:ad:
         4d:d1:8c:42:3c:79:cf:d1:7b:0a:0b:7f:6d:78:88:e5:f2:a5:
         a5:41:35:12:93:32:e9:db:86:f9:f4:76:c4:26:7e:fa:a2:1b:
         67:cc:ed:d2:ad:82:d8:df:78:92:79:d5:37:4b:f2:c4:b4:87:
         ed:bd:ed:f4:dd:24:3f:b4:d0:09:7b:66:ea:bd:38:31:ca:6d:
         19:7e:05:32:23:88:20:22:38:70:af:c2:ab:fb:5a:2e:37:da:
         26:14:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:02:58 2024 by rpki-client on console-ams.rpki-client.org