Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File:                     pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier:          v9BvKEL88Ty2AYjwczg+vd+BJxhHDLoa/6EAdF+tthI=
Subject key identifier:   5E:00:C7:1F:96:F8:D9:07:6F:65:A7:A6:CB:FE:61:09:F9:21:8C:D3
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer:       /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial:       018F8938F6E7BEAA88093CB9401F98BCEE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number:          0565
Signing time:             Sat 18 May 2024 01:02:42 +0000
Manifest this update:     Sat 18 May 2024 01:02:42 +0000
Manifest next update:     Sun 19 May 2024 01:02:42 +0000
Files and hashes:         1: X5yOyxMXPhGUfzjiAKfIjnJUTwE.roa (hash: 0QFVj6JJYKea2vH5tJt6265o7SAnnBi0OuODKO4IrZc=)
                          2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: 3bEnyAqjdY/qFXoL3wrNVlNj0iFY+cQ3ov0Tb6oSCtw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:f6:e7:be:aa:88:09:3c:b9:40:1f:98:bc:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
        Validity
            Not Before: May 18 01:02:42 2024 GMT
            Not After : May 19 01:02:42 2024 GMT
        Subject: CN=5e00c71f96f8d9076f65a7a6cbfe6109f9218cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:d7:a3:cf:dc:4b:19:12:93:0c:33:e3:5d:
                    6d:e1:f0:26:a8:af:67:80:37:36:0a:31:fe:f0:b8:
                    d9:8e:eb:ed:3d:81:6d:ab:16:19:7e:cb:e6:c3:40:
                    fa:9e:29:6d:df:15:ad:c6:58:08:79:b4:7d:81:1c:
                    2c:d4:6d:65:e0:86:01:97:e9:36:87:3f:63:7e:83:
                    02:e0:f2:5c:43:89:fb:fa:de:da:16:62:4d:f9:4e:
                    dc:40:ff:47:25:5b:51:3b:4e:fa:88:dd:4f:bc:dd:
                    a7:d3:98:c5:90:37:27:ee:94:1e:ed:63:34:e3:7e:
                    b9:4c:fe:fc:f5:4a:47:ac:b3:6e:e2:72:c7:76:e7:
                    2d:c6:0b:19:56:37:08:63:c1:c8:09:dd:b8:52:7e:
                    71:45:e8:13:72:0f:9f:c3:0e:f4:1d:44:95:1c:d8:
                    d9:c6:dc:17:7b:88:c0:6e:24:08:8f:de:29:16:5e:
                    ac:25:33:d9:64:43:94:ff:cf:73:41:67:df:54:d2:
                    25:02:81:88:ff:60:cf:32:f0:36:23:85:e2:26:06:
                    1a:ff:97:9c:c4:bb:3d:e3:ca:ed:e6:82:ec:14:ec:
                    5d:58:fa:90:c0:81:36:a1:b3:d4:da:d1:8e:0b:a4:
                    47:3d:b4:be:f5:90:3f:2d:58:cb:ff:ed:be:29:69:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:C7:1F:96:F8:D9:07:6F:65:A7:A6:CB:FE:61:09:F9:21:8C:D3
            X509v3 Authority Key Identifier:
                keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:2e:2c:3e:8f:16:a6:ad:bd:63:aa:4e:2d:94:62:3a:86:
         7d:47:2f:2c:24:95:bf:27:49:2d:d5:2c:e4:53:4f:e1:b6:cc:
         7a:d2:fc:27:e2:d8:73:e5:25:5d:eb:5f:d7:04:85:22:7e:3d:
         89:ce:56:19:2b:48:ff:98:d5:e8:19:eb:89:3c:57:ad:65:f2:
         b3:5e:a4:36:b2:fb:3f:93:3d:e5:a2:8a:1a:a3:f6:21:b2:30:
         17:47:aa:a4:56:c1:b1:df:59:0a:11:ce:e1:06:39:fd:c0:ac:
         fc:a4:32:2c:f0:a2:60:f7:43:dd:ef:38:36:62:b7:94:5c:19:
         38:d9:93:ee:f7:ad:3e:f4:e5:07:cc:e5:e0:76:56:4a:8a:12:
         e8:a4:f0:2e:9d:1b:42:54:25:0d:59:24:d1:95:7f:32:73:5c:
         e6:83:d9:96:14:44:65:95:00:f8:11:b9:c8:ec:32:28:ea:2d:
         e2:d9:df:8b:2d:ed:45:32:34:d7:8e:a9:30:f4:14:74:88:15:
         70:f2:4c:d2:d4:13:8d:73:ee:00:00:c1:aa:0d:04:14:7e:8b:
         90:b5:d2:b0:6e:29:2b:e8:52:49:2a:fa:ff:9f:e1:12:f0:6a:
         c4:3e:49:eb:7a:82:ea:03:b6:a9:2b:d9:a5:7e:44:38:a0:a4:
         52:5b:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:06:31 2024 by rpki-client on console-ams.rpki-client.org