Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          45Fl4YCjO+Kv9fcrp83JWXp9UanZKHEtD92L7zkVyns=
Subject key identifier:   62:91:B3:3F:9A:04:DC:98:78:9E:53:AE:9B:C0:8C:8C:8E:5B:C9:3C
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       018F8A8029332ED2842500D0BCE51FC0D62A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          08FB
Signing time:             Sat 18 May 2024 07:00:05 +0000
Manifest this update:     Sat 18 May 2024 07:00:05 +0000
Manifest next update:     Sun 19 May 2024 07:00:05 +0000
Files and hashes:         1: 1O7gu2kvuvn7017oTng-dQeTAa0.roa (hash: OT6WrJOyhkhsYl96CZgHLWxPY1slnsd9sVBdoJxdDhQ=)
                          2: 2BfraX45-B3YnX4Y_nUP4OFEobY.roa (hash: xIATUq+DXkZLbwzSJRRz6m9w/TNswrVmRq1S2zMhQvI=)
                          3: 8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa (hash: wouYOr5NL8fihUC73ctUChORb0LZcEgoN1GTY/qNwx4=)
                          4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: bFtydFNUfk3qbjgzlOIjc8w+iuxl6Zo1zebh7ZiHGq8=)
                          5: JPm2yackomAR-H-UrUuFUr7nUKY.roa (hash: fTIKqs9EM7F+9BEEmVXrKB1SEfO0ckO6QpiFnl15vTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 07:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:80:29:33:2e:d2:84:25:00:d0:bc:e5:1f:c0:d6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: May 18 07:00:05 2024 GMT
            Not After : May 19 07:00:05 2024 GMT
        Subject: CN=6291b33f9a04dc98789e53ae9bc08c8c8e5bc93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:4d:d5:02:69:fc:52:d6:b1:09:e7:56:22:
                    6e:55:1b:db:72:10:c9:22:a3:d8:cc:fb:ff:a1:7c:
                    ce:fc:f3:ca:80:ad:8a:8b:07:a9:b5:f2:2d:d1:87:
                    af:b4:e3:02:f1:69:ce:33:e0:e3:cc:c2:b0:cd:07:
                    56:42:cf:89:00:9f:72:b3:a8:c4:11:84:ae:07:90:
                    97:b9:51:54:3d:f1:a0:6f:ef:8d:0c:e1:57:db:d1:
                    f8:60:1e:bc:de:a0:87:1d:27:8e:3b:e0:51:b7:a0:
                    96:7d:82:ef:22:59:7d:ce:ad:d2:3d:c5:ce:f4:71:
                    53:44:99:b4:aa:c0:8f:fe:c2:d1:21:4d:74:4b:85:
                    d5:08:f1:8e:57:8f:11:7a:e0:2d:89:43:9a:08:1e:
                    43:02:76:84:7d:bb:6d:c5:51:fa:7e:1d:27:0e:ef:
                    a4:eb:19:9e:51:f6:6a:62:d8:35:5e:db:c5:ee:1d:
                    5c:d2:ea:53:0e:6c:c2:c8:70:db:4e:2b:b3:48:fd:
                    e6:5a:ea:3b:28:ef:fb:02:8a:ef:39:d7:67:13:45:
                    67:c7:f6:0a:c7:04:43:1e:f3:0e:79:f7:42:c0:36:
                    0b:4a:04:0d:5d:b2:c6:ed:d9:b7:63:4b:b5:58:0d:
                    2c:c1:86:bb:23:97:b3:10:8b:84:01:02:99:85:cb:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:91:B3:3F:9A:04:DC:98:78:9E:53:AE:9B:C0:8C:8C:8E:5B:C9:3C
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:1a:61:78:fb:f7:02:90:35:73:8f:41:ae:be:a5:68:09:
         c3:e7:d4:37:cd:70:d5:6e:d8:a1:12:24:03:63:3f:e7:b3:96:
         51:1d:af:94:92:16:a7:f7:c9:59:ea:f8:26:41:92:d4:31:db:
         55:f6:70:6e:d3:d3:22:01:92:3f:cb:82:af:e0:19:d0:9f:59:
         84:75:be:73:78:56:c2:39:59:12:c0:10:74:af:de:4e:09:df:
         26:d7:6c:6c:ac:34:6c:27:c3:e1:b1:bc:a3:8b:34:72:76:e0:
         b4:bd:a0:3a:3e:0b:d9:58:4d:20:1d:f0:8a:ab:f0:1d:54:cd:
         53:21:d0:c3:76:c6:d5:87:49:49:58:c9:02:df:24:f5:cc:ea:
         f3:b7:cb:86:95:84:e9:de:4a:34:aa:a5:e2:7f:86:04:ff:7e:
         62:30:20:6e:e6:bd:cb:91:aa:e7:9d:68:d0:63:35:09:81:26:
         63:d3:70:50:d1:8d:53:8f:48:d8:95:25:fe:9f:ad:4c:c8:2d:
         1c:e0:16:3d:90:ad:bc:b0:af:c4:1a:20:09:ca:b8:2e:d2:3b:
         25:da:c9:33:65:bf:53:49:5d:1d:01:15:7b:0c:a0:35:28:4d:
         a2:a4:19:69:b9:63:4d:da:05:01:f0:b8:c1:92:9b:df:21:b4:
         cc:04:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:34:55 2024 by rpki-client on console-fra.rpki-client.org