Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File:                     fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier:          yUKCj54jVkyjcnpqDKEFxE5jQEgC7z3+mDmKygBkhYQ=
Subject key identifier:   2C:AA:FB:02:D9:ED:94:49:EB:FC:C1:81:48:52:10:4C:7B:C2:47:78
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer:       /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial:       01906372B21214F93D4B346BF914B9B0A2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number:          0AB3
Signing time:             Sat 29 Jun 2024 10:02:59 +0000
Manifest this update:     Sat 29 Jun 2024 10:02:59 +0000
Manifest next update:     Sun 30 Jun 2024 10:02:59 +0000
Files and hashes:         1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: ILGhhKH2klWMX+heVHMzXbRiJUjalNrWdm45Zg4++ww=)
                          2: s9WKQnd3NhNHInOPDGp3V3Ued38.roa (hash: tukgbIASc1K2v/SIA39PTNLO6mR0KixlqNuWjqLUG7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 10:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:72:b2:12:14:f9:3d:4b:34:6b:f9:14:b9:b0:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
        Validity
            Not Before: Jun 29 10:02:59 2024 GMT
            Not After : Jun 30 10:02:59 2024 GMT
        Subject: CN=2caafb02d9ed9449ebfcc1814852104c7bc24778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:b8:68:df:62:41:68:35:93:d4:34:dd:b2:
                    8d:55:b0:2f:25:13:65:19:24:bf:9f:b6:98:07:ef:
                    74:64:b9:5f:ba:c4:08:90:89:a8:81:2f:13:2b:57:
                    73:54:b9:42:5a:8f:67:80:1e:e5:fb:6f:5b:33:4a:
                    99:f9:5e:77:e9:1d:51:08:2e:16:92:83:44:d8:7b:
                    4d:7b:64:2d:1b:70:d5:05:96:49:21:06:b6:ff:72:
                    09:2c:6e:3a:ea:ee:8d:6b:52:2b:09:15:6e:d3:83:
                    de:2c:ec:9b:e8:3b:55:be:0e:51:53:a2:5d:ac:7d:
                    39:8f:f3:89:d0:ee:d2:e7:08:ef:28:0b:80:2c:6b:
                    bf:73:3e:d8:f6:d8:7f:2e:6e:eb:fb:a4:3e:3f:e0:
                    0b:95:62:59:cf:35:10:5c:57:49:87:37:43:be:c9:
                    1d:d4:8d:14:6e:ab:0b:b0:74:f6:3d:ab:cd:a3:42:
                    96:96:98:47:cc:75:06:ec:4f:19:47:92:93:b5:d9:
                    76:58:65:f1:33:dc:2c:19:5f:1c:e6:a9:0a:bf:ba:
                    57:19:16:91:46:75:ae:7a:7f:85:0d:e4:1a:b9:0a:
                    2d:ea:f5:19:36:3a:0d:2b:d0:eb:f1:9a:1a:a1:4d:
                    08:be:0d:3d:7f:51:e8:da:82:fa:fb:5c:99:20:a5:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:FB:02:D9:ED:94:49:EB:FC:C1:81:48:52:10:4C:7B:C2:47:78
            X509v3 Authority Key Identifier:
                keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:fc:ca:40:d5:3d:46:87:7e:5b:ee:14:bf:07:c6:fd:f4:
         6f:50:d5:b0:19:7c:f5:03:eb:68:84:45:b2:41:51:05:d2:a8:
         9f:26:ac:88:fb:2c:c3:af:b4:05:a6:bc:9b:ec:e3:91:8c:ec:
         4d:f0:b0:a4:f6:21:f0:c9:f5:9b:11:3d:a9:20:da:51:f6:c1:
         0e:d9:cb:6a:4e:e8:44:ba:4d:c2:26:14:fe:ad:bc:5a:25:4b:
         0f:2b:05:ee:93:3d:fe:8d:04:87:01:1b:4b:5b:0a:10:fa:0d:
         89:cc:2f:a1:84:dc:45:a0:17:84:04:dd:1d:09:93:a7:69:cf:
         e4:51:5d:75:ff:f3:aa:6e:be:58:0a:1c:6a:b6:cf:f4:aa:31:
         5d:27:01:f2:22:65:d6:99:e2:61:90:a8:4e:01:84:89:1a:e6:
         db:90:75:02:13:2b:db:cb:f7:87:d3:a9:a5:67:96:15:89:e7:
         89:62:97:3c:dd:18:a9:21:ef:5a:30:e1:10:b3:85:51:fc:1b:
         82:45:6c:3d:e6:00:15:1f:64:81:d2:a5:ae:64:d8:79:c9:ee:
         47:91:5b:90:1a:be:b2:de:32:0c:5e:cc:9e:43:43:07:a9:04:
         74:2e:52:ca:10:e0:04:11:b9:3c:81:77:6d:88:8e:cc:ef:9f:
         86:23:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 13:10:03 2024 by rpki-client on console-fra.rpki-client.org