Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File:                     fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier:          rocswEbwzahDus4Q7G/EC17Yypltt65xvE3uOvgGhUs=
Subject key identifier:   24:EC:08:E4:31:AF:41:53:BE:50:05:31:3F:C1:94:A2:4C:C7:96:8C
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer:       /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial:       01901E59000B128DF879AD71D3FDD3BAA308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number:          0C0D
Signing time:             Sun 16 Jun 2024 00:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:07 +0000
Files and hashes:         1: ZJ9-EKplM2AFUnCS89s4FNXC0q8.roa (hash: fN0oCwdbwbGBk3h9fmGI4oqj4+POczOu/4iHK0UIr+M=)
                          2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: 2HUTzy/lHkzpRl7Elhd+yCIn+wLSZ5movRDdIos3pzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:00:0b:12:8d:f8:79:ad:71:d3:fd:d3:ba:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
        Validity
            Not Before: Jun 16 00:01:07 2024 GMT
            Not After : Jun 17 00:01:07 2024 GMT
        Subject: CN=24ec08e431af4153be5005313fc194a24cc7968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:5a:bd:ee:84:39:25:88:7e:00:29:6e:52:
                    8c:b7:10:3e:54:94:04:99:c9:26:c1:4d:5e:35:ce:
                    2b:44:cf:cf:20:2a:12:c7:ea:3f:fd:9e:a6:5f:b6:
                    d7:85:b7:6a:fc:88:2e:60:8e:c6:00:f7:0d:08:23:
                    18:a9:52:06:b5:4a:c6:31:a4:8a:c7:a6:18:f7:cb:
                    75:97:07:f5:ce:5d:1d:fb:98:3a:7c:69:37:df:e6:
                    9c:b6:af:67:07:35:c7:e6:53:27:e0:4a:7d:e7:14:
                    9b:44:df:7c:8a:af:e2:8d:9e:f4:06:79:b1:cd:15:
                    e1:b5:48:09:5a:2d:3c:d6:3b:51:16:2e:07:6d:9b:
                    4c:39:d6:28:ea:7a:05:4e:a3:fa:da:d9:c6:68:1a:
                    70:40:a0:bd:8a:74:dd:8e:33:38:94:7d:eb:e6:51:
                    e4:0e:2c:9a:0b:4d:c7:a5:2c:ae:dc:70:fe:3a:56:
                    93:9a:4c:d9:5b:9e:2e:dc:58:58:75:38:4b:3d:fe:
                    8c:cf:3d:73:e0:46:14:a3:41:1b:37:52:08:28:37:
                    94:e9:13:1b:73:52:33:9d:cf:41:31:a6:b2:70:21:
                    b5:7c:40:60:66:0d:ff:0f:eb:29:8b:ca:45:4a:13:
                    ca:11:0a:de:ae:f1:c5:dd:26:a4:c3:36:af:28:dd:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:08:E4:31:AF:41:53:BE:50:05:31:3F:C1:94:A2:4C:C7:96:8C
            X509v3 Authority Key Identifier:
                keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:6b:ba:ed:fb:dc:5f:7c:c6:e5:24:2f:6b:6d:b8:25:ed:
         2c:16:61:ce:92:58:4f:6a:71:fa:ca:69:28:ce:57:19:dc:a1:
         31:a9:8f:a7:53:94:06:af:7a:0d:01:5d:6a:b3:72:43:07:db:
         19:79:a6:63:03:02:0f:69:dd:76:ab:40:0e:82:48:1b:c8:65:
         21:51:04:1b:b9:24:2f:4e:e9:fc:e5:81:b6:7d:f8:c3:38:d2:
         fa:d0:eb:d8:7a:ef:12:92:54:18:b8:7b:97:f6:bc:8c:6c:ba:
         f2:e6:89:e7:cb:2a:3b:cb:fe:eb:0f:42:e1:2c:12:ee:f9:25:
         af:0d:da:df:30:01:6b:ba:fc:34:21:2a:b3:44:c7:4e:eb:80:
         44:23:71:f0:83:f3:ec:fa:32:22:38:00:75:f9:79:59:01:ac:
         e9:a4:6b:b9:52:db:7e:0c:cb:5e:0e:cc:a4:5f:5c:3f:58:a6:
         36:94:5a:17:e2:e6:ea:c7:ef:30:a5:52:17:a7:51:5b:d8:00:
         dd:ba:23:dc:9d:3d:ff:43:0c:75:09:bb:3e:63:12:53:5c:71:
         d6:47:60:a5:12:b9:73:a1:8a:52:d6:99:f2:43:37:66:dd:3f:
         29:be:4d:83:6b:f2:38:5a:33:44:99:20:13:6b:c6:92:1e:94:
         72:3f:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:03 2024 by rpki-client on console-ams.rpki-client.org