Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          IoKFBtSDE/h1EzQO/atnY5oygRN5QIx9m2JVp2wF8/k=
Subject key identifier:   2F:45:03:2F:76:7A:A0:41:2E:B1:24:D0:FA:2B:A5:8B:A4:7D:04:25
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       018F99182F60F40DC49F049B65E3D65B971C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0977
Signing time:             Tue 21 May 2024 03:00:50 +0000
Manifest this update:     Tue 21 May 2024 03:00:50 +0000
Manifest next update:     Wed 22 May 2024 03:00:50 +0000
Files and hashes:         1: 64HlaXHTy3clBlQZlkFZu9u7VpY.roa (hash: qnfCoo1Vd7wDV2LStZZ4q3lu3WFCYo52MkWnIYOWpQo=)
                          2: HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa (hash: 2qqjz/7uTV0/B37gAhdhLBIlqgpKYw5vco/nYCd4SuE=)
                          3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: Pa6mZ2nnq8QyG4RnVN5UJZHABFa0ee7Tu34xZDGQlMg=)
                          4: V9-OPp5CO_ZOLNufwo_oAmWq560.roa (hash: pjQ5z3g7zdtnKAhc8wOA/UKKekNBmjlMTC9ALfutZfY=)
                          5: tbP8hxJL4cY2T6FM1_Fpl_us5a8.roa (hash: gvIWNc4+6W8cDMjHk61tsdScna3D3kjj7DAdDPqu7nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:18:2f:60:f4:0d:c4:9f:04:9b:65:e3:d6:5b:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: May 21 03:00:50 2024 GMT
            Not After : May 22 03:00:50 2024 GMT
        Subject: CN=2f45032f767aa0412eb124d0fa2ba58ba47d0425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:58:92:39:5d:65:7e:cb:2d:ee:23:17:7f:
                    0d:10:55:08:92:5c:41:0d:7d:61:fe:d8:0f:61:11:
                    e1:0d:b6:71:d9:ac:71:2d:30:10:1e:79:a7:aa:00:
                    18:5d:3f:5b:65:4c:f4:a0:da:48:70:01:36:24:45:
                    d4:32:40:86:3f:c9:b6:3e:98:7a:74:34:d7:bb:ab:
                    6e:15:83:14:c1:c1:56:18:23:b1:7a:28:c8:b1:a9:
                    dc:78:d6:b0:2e:fe:c9:0d:de:02:5a:96:6a:0b:fd:
                    25:5e:39:c4:52:aa:a5:d6:b8:15:a6:38:2b:07:b4:
                    0b:24:1f:52:73:c4:f0:e0:44:4c:0f:cc:39:4e:c8:
                    b7:10:84:e9:46:72:c3:8d:f2:3b:83:03:51:5e:2d:
                    84:1e:2c:ed:fe:c2:69:ab:9c:bf:08:4d:23:e6:33:
                    d8:66:60:d3:40:4b:ee:fa:b2:14:aa:5e:5a:7b:48:
                    50:74:54:ed:69:06:76:7f:b1:c2:9d:a6:d6:45:7e:
                    78:49:6d:b1:1a:d3:72:fa:d4:24:3c:ee:8a:f2:b3:
                    c6:ba:9c:c0:54:cd:1a:c7:ab:c8:a4:ca:7d:df:99:
                    6a:14:ac:28:46:0d:21:86:7d:5b:05:73:b1:7c:3b:
                    dc:32:33:7b:64:56:4c:54:03:bf:ad:09:5c:d7:08:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:03:2F:76:7A:A0:41:2E:B1:24:D0:FA:2B:A5:8B:A4:7D:04:25
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:ea:c9:21:d1:ec:56:32:42:70:c2:b4:92:d2:ac:ee:ba:
         bc:f2:1e:8e:51:60:2b:2e:10:be:50:ef:7c:2c:15:54:ea:76:
         9a:c5:3b:92:0f:f9:a4:46:24:41:e4:4d:15:a6:4c:d5:ca:72:
         ca:7f:f9:56:e0:ba:82:d8:ee:16:15:a6:b0:0f:fb:f9:43:0e:
         ab:e8:3f:0c:35:a1:29:5b:86:8d:de:9b:16:af:08:e4:f8:1d:
         7a:8b:a0:63:05:6a:cf:a9:a7:79:61:3a:20:88:c8:ae:cb:f3:
         c4:0f:d9:8d:d2:72:66:ea:a8:ec:41:51:b4:4c:92:d6:37:41:
         5b:ff:df:6c:e9:c3:de:f9:21:b0:a3:91:91:fe:b0:ca:f8:29:
         72:3d:11:46:e5:5b:24:66:4f:52:5e:f9:e1:5a:1f:a8:82:44:
         76:db:de:92:38:f6:f7:ac:60:66:62:de:28:78:80:60:4c:c7:
         33:51:c8:4d:f8:09:be:81:6b:3d:f1:26:d7:81:9a:bb:dc:4f:
         26:2d:cc:0b:68:92:69:11:74:95:16:6b:f4:9f:ae:3d:fb:69:
         99:82:cc:68:30:37:47:1e:e3:a5:b5:47:44:f9:46:f1:c0:50:
         4a:93:98:af:70:d1:d7:07:2b:e9:0b:48:d6:6c:df:12:2e:2b:
         a7:f7:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:49:52 2024 by rpki-client on console-fra.rpki-client.org