Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
File:                     rZ7zxbA__FbdMPwdBg0ViPJksrM.mft (raw, json)
Hash identifier:          2ipiK451Q198DDkqBy20wGcPvwktJqQFFO+q6EJMD4k=
Subject key identifier:   BA:C2:74:74:0E:8F:86:D6:1E:A6:91:B4:E7:43:1A:0B:24:31:C6:DD
Authority key identifier: AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3
Certificate issuer:       /CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
Certificate serial:       018FB6EC3FF78CEB9C20E3BF63226FB59D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
Manifest number:          03FA
Signing time:             Sun 26 May 2024 22:01:27 +0000
Manifest this update:     Sun 26 May 2024 22:01:27 +0000
Manifest next update:     Mon 27 May 2024 22:01:27 +0000
Files and hashes:         1: l2GuIY_FWphj2gl0U31gEf0g1kQ.roa (hash: HPG98+n1LY4e2Fj73UDLJRgrZeFnoNd+/qMmycP8EO0=)
                          2: rZ7zxbA__FbdMPwdBg0ViPJksrM.crl (hash: DmFOfbq04DNehEHZLsAGC7B/KXag47fV5+o8kHF0EVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:ec:3f:f7:8c:eb:9c:20:e3:bf:63:22:6f:b5:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
        Validity
            Not Before: May 26 22:01:27 2024 GMT
            Not After : May 27 22:01:27 2024 GMT
        Subject: CN=bac274740e8f86d61ea691b4e7431a0b2431c6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:f6:f7:69:e6:25:1a:79:43:dd:b9:45:67:
                    33:72:6b:dc:ad:6d:d7:ec:bd:1c:87:08:f6:db:f4:
                    c8:0f:e8:8b:5d:71:c3:a9:75:22:3e:00:ce:0b:3a:
                    d6:75:2e:1c:a8:e1:a7:76:64:6b:61:e7:9b:9f:70:
                    13:b5:dc:e4:22:27:c0:2f:00:f8:60:b8:4e:2e:67:
                    69:36:13:8b:7f:1e:67:79:26:b3:01:b7:86:2b:07:
                    33:9a:c5:13:0f:fd:fc:ea:62:05:a3:d0:85:07:ed:
                    0a:c7:79:6f:76:0f:61:a8:9c:d3:09:1a:44:09:15:
                    7d:de:99:02:0e:80:30:0a:04:7c:be:1b:92:1d:b0:
                    3a:91:1b:1b:3b:60:69:71:e8:83:98:fd:5f:aa:38:
                    6f:0e:6a:15:40:9c:ef:46:9d:8b:76:f6:d6:3e:cd:
                    c4:4c:63:8d:a5:f1:ce:75:62:7d:b3:87:2f:59:ec:
                    c1:b1:b3:76:52:2e:3a:51:da:be:28:b6:e0:8c:a0:
                    01:90:aa:85:3b:a6:00:a8:08:a9:1f:dd:1e:b4:13:
                    fe:84:a5:89:11:84:02:7b:57:c9:c5:40:f5:0f:b4:
                    e1:fe:4b:b5:aa:21:f4:bc:2d:fb:a2:34:c9:35:aa:
                    ff:a4:ab:ff:67:e0:33:39:ca:82:41:c0:dc:66:65:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:74:74:0E:8F:86:D6:1E:A6:91:B4:E7:43:1A:0B:24:31:C6:DD
            X509v3 Authority Key Identifier:
                keyid:AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:70:db:98:55:cd:c7:6e:67:61:a1:04:7b:9c:45:63:3d:
         ea:f1:6f:ff:0c:71:b3:9c:3c:cf:a8:c7:f2:ce:7b:10:3b:ae:
         b9:9c:53:a2:90:64:6b:fb:e1:76:fe:0b:dc:6d:01:5f:5a:21:
         7e:67:e7:fd:6a:58:42:a7:b0:4b:fe:a0:15:d5:e8:b7:02:26:
         c2:ba:36:25:0c:e8:0a:7a:44:e6:cc:e2:a8:1e:8b:e3:18:00:
         de:52:27:31:c8:20:2a:b8:c0:02:29:4a:68:e1:36:d3:c8:43:
         cc:f6:f3:44:88:ca:da:ff:89:16:77:9e:1b:30:c5:04:53:d8:
         14:4d:46:48:b8:ab:cd:d3:db:b1:4d:1e:fa:f2:90:a0:5c:e3:
         31:37:c8:2d:6f:59:d8:a8:7a:3d:5d:a0:db:28:dc:02:f6:d2:
         c5:20:7b:2a:d2:21:2f:8e:3a:13:e4:d5:69:a0:bc:60:c4:30:
         b6:95:4c:c2:0b:1c:fa:68:68:bd:aa:53:d9:6c:82:bb:c1:86:
         03:05:6f:b2:b9:2f:6b:b1:e5:66:97:2d:bc:dc:ec:5b:ad:43:
         a8:ab:c7:c9:86:d2:57:33:0e:7c:20:4e:d5:52:dc:6b:7d:6e:
         5a:53:78:4a:79:69:9d:65:77:d2:d1:ad:bb:f5:03:0d:57:81:
         3f:08:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:18:14 2024 by rpki-client on console-ams.rpki-client.org