Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          yrlqjLFJhGD/tWY72XbsugjY6Q5p7SNnr7GN0urxPOQ=
Subject key identifier:   D3:1D:D8:68:E1:C6:85:0B:F5:6A:4F:E8:3D:AC:18:A6:8A:FA:D7:B3
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       018F874AD2EB5FFBF34E8DD7C790F2EF0F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          0ACC
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: A14cA0AuNc3roHwTS47YSjESwJk.roa (hash: NpH6jv0EuNj8+L3YFs4pxsbp9rptDsLxZsIwm6Csxx4=)
                          2: L1C-ryV_cxTKzB2_-3VP76iDww4.roa (hash: C/1YSRmWRyKzUpt0I1CWW05dqBU1epvKDtFMmYa6xPw=)
                          3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: v8bAxGxhAPRbfO5rbFBh1ldK8tYaztWTIFK4uE7qkBs=)
                          4: j0_pJ-9yv5JkalmBmhNNHbDthxI.roa (hash: QtDJ4M7dm78++jaQvdQXFCezqmW1TlKkBXhgDtJp/ew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d2:eb:5f:fb:f3:4e:8d:d7:c7:90:f2:ef:0f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=d31dd868e1c6850bf56a4fe83dac18a68afad7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:32:0f:d9:ce:ce:1c:50:2a:4b:c3:95:19:
                    79:93:eb:42:20:ac:5f:e5:04:7e:42:fd:b9:fd:2a:
                    49:b1:7b:a5:30:41:fb:8c:71:96:44:7f:8e:d6:bf:
                    60:b2:e5:09:fe:e7:d0:3a:2d:f3:8c:6a:4c:33:ae:
                    ee:93:d8:f3:34:91:9b:c9:97:29:ce:2e:11:72:37:
                    a0:b7:57:b4:4d:46:b2:c2:b2:de:b1:0f:09:6b:81:
                    a5:a0:2f:8d:8e:d3:c1:83:a2:42:b6:2b:50:71:ff:
                    ff:2a:e7:a4:6f:3d:04:c1:f6:f6:95:7d:81:6f:42:
                    37:be:dd:5c:71:e5:16:d0:ad:a1:bb:86:d5:01:05:
                    b1:e5:2e:96:51:dd:b4:7b:d0:d3:dc:07:36:f2:e1:
                    44:ee:d1:c2:e3:b9:78:26:37:3d:e5:a2:cc:49:f9:
                    c8:b8:3c:8d:40:23:dd:d9:f6:8f:a1:0c:be:89:d0:
                    3d:91:a6:14:6b:46:46:14:c1:ec:8c:a1:51:21:d3:
                    61:be:ea:42:ff:bf:2b:97:8b:bf:46:d2:1d:77:28:
                    ac:7d:ae:f9:e0:98:21:2d:e2:91:77:04:05:ee:17:
                    ca:a8:82:25:9a:79:ce:96:d3:df:db:1d:84:c2:ff:
                    2c:08:54:d1:7b:85:e8:da:90:21:82:d9:01:e5:3a:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1D:D8:68:E1:C6:85:0B:F5:6A:4F:E8:3D:AC:18:A6:8A:FA:D7:B3
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:53:fc:29:67:8b:2e:c2:ef:62:fc:c8:54:04:53:34:cd:
         b2:43:71:ad:8f:10:eb:3d:4d:20:b0:19:b0:94:0c:2d:44:2d:
         82:93:1c:81:5f:f8:d5:77:77:e4:ae:e3:9a:49:7f:a1:18:9a:
         7a:1b:4a:17:6d:b0:7d:0e:2a:b3:b8:fc:d5:29:d3:dd:31:0a:
         93:a8:43:db:ee:8d:0f:71:78:66:4c:75:dd:df:3c:3c:97:b7:
         3d:fb:f6:a2:a4:a4:33:7e:90:35:eb:a1:9d:61:62:8f:45:c2:
         e3:01:98:80:6c:5b:23:80:55:91:db:c3:39:40:09:9c:cb:4c:
         d1:2e:0f:ab:bc:56:e2:2b:4f:5d:ba:4c:75:d3:f4:63:51:99:
         e1:6f:9d:c7:96:52:96:82:87:f2:b2:29:a4:3d:ac:63:49:bb:
         e0:57:d2:33:be:a4:74:5b:a9:7a:fe:b2:f8:7a:d8:be:38:13:
         f7:b4:64:8f:03:47:bd:c5:47:ec:9a:6e:d0:1d:18:6f:80:51:
         75:c7:46:e4:e5:eb:87:e0:c1:08:c0:1d:5c:2f:fd:dd:19:bf:
         39:68:53:47:47:f8:69:23:38:a0:94:09:e0:f8:3f:e4:ea:d0:
         96:87:27:b3:ff:8b:23:33:41:5b:60:92:e0:ad:53:29:4e:7d:
         26:98:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:20 2024 by rpki-client on console-fra.rpki-client.org