Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File:                     pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier:          uBzJKgvos5AozIWccKJhCCoYOI66A6/+nXwqbl2sWkc=
Subject key identifier:   56:38:1B:76:69:0A:AD:65:5D:43:3B:3E:6E:91:EB:00:4F:1D:CA:E7
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer:       /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial:       018F8749A34C18BDA32E1DF59D8832D589FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number:          0CA1
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: ePPzEQvc5NxH7B5bOyDy1WJs_t0.roa (hash: QYv5AaCdTjg8f7cQgcohGmKEU25ncu4OF2Sae26p4J0=)
                          2: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: +pX6oo6ZwXRjLG8M1HpkmjEqqLOWezapzhk7UMsz7PE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a3:4c:18:bd:a3:2e:1d:f5:9d:88:32:d5:89:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=56381b76690aad655d433b3e6e91eb004f1dcae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:c1:cb:28:17:94:9e:ba:b8:50:df:04:0e:
                    82:b6:3b:5a:98:d8:3a:94:36:cd:b1:8e:1f:0b:ac:
                    64:90:b9:ff:67:c9:7a:79:45:b4:d2:3a:37:47:0e:
                    cb:0f:40:c2:d0:16:50:fa:8a:87:1b:ac:cf:4d:3c:
                    00:be:7e:ac:2c:4c:60:03:8a:34:bd:1a:59:76:6a:
                    7d:4f:05:2f:e2:be:1f:b4:78:5e:49:4d:0a:43:e0:
                    17:6e:8f:3e:16:1a:ea:f4:8e:ee:db:80:7c:e4:ea:
                    0e:ba:f0:5b:09:3d:61:ad:b3:b9:2e:59:65:53:7c:
                    8f:ae:55:f8:57:35:5b:87:6d:30:53:c1:d2:db:4b:
                    c1:7d:1f:a7:51:f6:78:0a:8e:f3:9e:05:6f:11:31:
                    67:88:2e:9f:c4:24:10:23:79:20:76:61:05:82:e3:
                    0c:aa:f6:9b:dc:92:b7:57:40:93:7a:10:2d:b5:f1:
                    c3:4f:04:8c:fa:5f:dd:21:71:e2:d7:9f:12:5e:33:
                    d0:e6:4d:af:da:15:ec:0e:91:10:1e:f4:7d:a0:ac:
                    9f:ba:77:60:1a:18:76:5a:5a:04:bd:68:d5:ca:8a:
                    20:79:65:8a:c3:12:8c:d8:3b:f1:a3:ca:7d:14:c0:
                    a6:12:2b:95:ca:d8:b6:03:6d:ab:00:fb:cc:cd:5d:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:1B:76:69:0A:AD:65:5D:43:3B:3E:6E:91:EB:00:4F:1D:CA:E7
            X509v3 Authority Key Identifier:
                keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:52:5c:f5:2c:79:1a:b4:21:6a:0b:03:7e:18:12:19:da:
         56:a3:02:40:3f:b4:df:dd:cc:b2:74:9b:b6:53:34:40:0e:f2:
         b7:22:99:94:bd:aa:c1:24:08:f3:b1:77:8d:f5:d9:1d:d7:cf:
         00:30:0c:59:bb:c3:75:67:f4:4c:67:12:81:c2:1f:8f:46:8f:
         24:78:7f:4f:e2:aa:4c:26:33:fe:64:7f:6c:25:76:bd:dd:4b:
         ea:0a:fa:b9:c3:78:fa:3c:0a:84:96:4b:d5:71:cc:53:c1:f2:
         10:17:bc:3b:16:9a:c3:af:d4:6e:cb:9f:8c:87:f2:75:cf:e0:
         10:75:b8:01:a0:ee:d2:a1:9b:b9:04:64:56:f1:cd:93:4b:4a:
         a6:bf:ff:fe:43:58:8e:9f:02:1d:a5:58:43:e5:11:90:1d:d9:
         08:1b:5e:21:9a:28:ef:bd:d9:4f:49:32:fb:d7:ee:5d:04:4c:
         84:b8:82:51:12:55:03:07:ec:49:76:26:eb:4a:fa:d7:0a:2c:
         98:48:9e:cb:09:fa:7a:20:da:a1:3c:36:24:f2:ee:ce:04:dc:
         7f:ab:51:e2:80:08:0a:60:20:32:66:ad:c4:3a:70:d4:9f:97:
         93:c5:67:1c:83:4c:8d:7e:ee:05:db:e4:e7:bb:70:34:7f:99:
         07:af:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:57 2024 by rpki-client on console-ams.rpki-client.org