Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File:                     fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier:          dC7GNqkbhCIJ9Sf4HTWk5J+2toIxLR2azCj6svo/SiY=
Subject key identifier:   D0:84:E8:B7:FD:F4:53:EF:95:91:4C:A8:4B:DA:7B:D2:DF:C4:11:2E
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       01901BFDBBB7159B3D91B8C726F383C1048C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number:          0C82
Signing time:             Sat 15 Jun 2024 13:02:11 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:11 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:11 +0000
Files and hashes:         1: OZJun1Q-CVUcx3YjhwoASyQC3kg.roa (hash: AerFdTKvnElQ0HlH3KxN8PEvtOTqyGZOqgZ1hav9nNg=)
                          2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: b8dSG4LfEGAdYXS3y4TtJ1yP2b8eiA1kXip9sWPaG58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:bb:b7:15:9b:3d:91:b8:c7:26:f3:83:c1:04:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: Jun 15 13:02:11 2024 GMT
            Not After : Jun 16 13:02:11 2024 GMT
        Subject: CN=d084e8b7fdf453ef95914ca84bda7bd2dfc4112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:9a:54:14:48:e0:e6:a6:85:c4:53:54:2c:
                    6e:43:db:b7:56:41:2f:83:08:6d:d3:e8:8c:1e:46:
                    da:47:d8:7e:5e:14:dd:65:bc:03:b3:f6:bd:5e:a5:
                    0c:e4:c2:a6:2c:a5:2c:15:47:89:43:51:ee:d5:01:
                    4d:39:28:f0:23:14:2a:b6:f3:2f:bd:be:86:5d:12:
                    01:c1:ee:dc:9a:4c:83:23:da:60:46:62:82:6b:e1:
                    bd:b3:8c:d8:ca:0a:fc:c9:75:e6:d6:4b:88:b0:c7:
                    45:51:00:6f:f6:e1:13:d9:c8:c3:69:44:00:a9:c8:
                    b9:1b:65:9f:8c:a8:bf:f9:63:8e:fb:cb:f3:90:1d:
                    8c:04:b8:a3:a3:50:65:58:83:c2:c7:e0:11:7c:36:
                    28:9b:26:42:55:4c:b7:51:fc:04:60:3a:86:a1:86:
                    58:f9:95:c1:8b:7c:5e:89:12:d3:7c:40:21:c8:5d:
                    ca:78:8d:4b:40:42:8e:d4:88:8a:f6:20:18:6c:23:
                    3c:81:10:e5:48:2f:fa:d6:d5:54:a0:2b:9d:03:5c:
                    b9:f2:e6:45:36:d8:55:40:37:06:13:9d:6e:6a:1c:
                    d9:a1:f4:0c:24:ba:54:b7:ca:66:84:02:c4:94:7d:
                    0b:ed:c1:a7:24:f2:38:2a:62:8b:56:40:cc:07:e2:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:E8:B7:FD:F4:53:EF:95:91:4C:A8:4B:DA:7B:D2:DF:C4:11:2E
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:20:93:02:63:a3:04:4b:f8:9e:5b:47:cf:f8:8e:9b:52:92:
         87:0e:9a:90:0c:cf:02:62:92:3b:68:10:66:00:28:e8:44:77:
         0f:0b:c6:99:7b:85:60:f3:c9:07:b2:22:20:eb:60:75:00:5e:
         8b:ba:a1:ce:5a:2c:78:fc:19:39:67:4a:46:8f:42:7c:d3:48:
         9a:77:72:2c:43:34:10:4c:fe:28:00:6e:8f:ed:36:18:9a:bc:
         a5:60:1e:7c:35:52:e4:2e:66:91:56:8d:f9:26:15:12:45:d8:
         5f:b1:ac:ba:4f:cd:f8:22:6e:ab:c2:a9:43:59:6e:b5:20:a4:
         cc:31:35:73:f4:59:57:de:2a:21:6d:d6:fa:97:e2:3f:8c:dd:
         41:f8:02:a3:fd:a5:fa:06:4c:5d:80:8e:21:76:ab:02:76:9a:
         a2:da:f4:97:ba:2c:6b:b2:00:5d:42:e0:27:e3:e0:44:37:bc:
         a8:26:33:41:c9:62:a0:2a:8a:0c:d9:6c:bf:bd:62:80:2e:f1:
         41:81:b5:7f:e7:67:b5:90:b8:d2:a8:1b:4a:e6:5c:00:40:26:
         ef:c0:5d:82:fe:dd:c6:58:81:ea:9a:ac:7f:a4:a6:b5:ab:4e:
         b0:3e:09:9d:95:93:62:c7:d8:4c:2d:48:de:63:68:0f:3b:7a:
         5b:6b:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:13 2024 by rpki-client on console-fra.rpki-client.org