Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File:                     fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier:          cq7eSdJwlIGNxLHAojz9mA4c/YywWAjQ0xn8dm+9Xbk=
Subject key identifier:   50:C4:8D:B5:72:CC:63:8F:0B:56:D0:76:CB:63:CD:59:F9:3D:BC:FF
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer:       /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial:       01901DEAE77B6C14D8DB075211D67D6472E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number:          0650
Signing time:             Sat 15 Jun 2024 22:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:52 +0000
Files and hashes:         1: UKSF_Fv3CqLh_32l4ChuUDH6Du4.roa (hash: rZ+qNXv0G4X7XJfTY+kMW3aMlnV651iu53nf85Uhvcs=)
                          2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: C3x/TIUd7RqXiHqikoITN6qCR3HBgJ2d8WCPu/JBuKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e7:7b:6c:14:d8:db:07:52:11:d6:7d:64:72:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
        Validity
            Not Before: Jun 15 22:00:52 2024 GMT
            Not After : Jun 16 22:00:52 2024 GMT
        Subject: CN=50c48db572cc638f0b56d076cb63cd59f93dbcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:71:28:03:19:46:3a:57:5c:be:0f:fa:b1:
                    ab:ca:7f:14:32:35:98:09:cc:48:4e:d9:3f:d5:7c:
                    64:3b:d0:7b:cf:84:ed:3d:15:12:33:66:ec:5f:63:
                    1e:7d:b8:8b:d4:fe:68:fe:8d:0f:f9:c6:de:17:2b:
                    5d:b5:b8:d0:0f:9d:95:ae:64:eb:43:51:e5:6b:d4:
                    f6:e7:4e:0b:b1:4d:94:32:ba:65:fb:2f:ff:2e:1b:
                    a3:a6:03:25:62:11:ad:4f:31:20:23:20:d5:b8:a6:
                    9e:45:0c:e9:7e:40:dc:f3:e0:ed:5d:ac:fe:6f:1a:
                    3b:13:61:ea:49:c4:11:2c:c6:ed:d3:94:ab:ce:1f:
                    93:a4:f9:07:48:5c:c2:5d:0c:60:27:b0:7d:f7:d3:
                    5b:67:b8:14:a5:1a:a9:ed:8a:43:3a:45:0a:2f:67:
                    7c:2d:cb:b3:8b:b9:45:ff:f4:48:ba:ed:e5:85:95:
                    ff:b6:40:5f:16:5b:54:7c:19:8a:fd:aa:9e:92:97:
                    97:f8:4a:08:22:29:70:80:77:69:39:1d:54:57:9a:
                    42:df:7f:3c:77:57:f8:4f:13:2a:33:f6:cf:3b:73:
                    94:fb:1b:f7:f4:64:bd:8a:d6:94:8d:be:28:76:9e:
                    47:63:9c:db:05:ec:fb:3f:16:9a:af:e2:cd:5f:53:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:8D:B5:72:CC:63:8F:0B:56:D0:76:CB:63:CD:59:F9:3D:BC:FF
            X509v3 Authority Key Identifier:
                keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:ad:8b:54:ed:b1:5f:22:29:0a:af:9f:e7:70:16:78:ff:
         03:b7:7b:e4:29:63:db:9d:7c:be:19:a1:de:6e:1c:bb:78:b9:
         ff:2a:fe:c2:ec:b8:02:82:5c:da:f3:5a:24:f1:82:da:41:cf:
         49:55:75:c3:90:c3:cb:a4:2d:c6:07:5a:21:12:9c:66:e5:89:
         47:3b:89:5a:ab:09:7b:8f:4b:e4:73:93:1d:85:22:51:b6:05:
         a0:fd:33:17:04:9e:34:13:58:c1:52:c9:d6:c5:33:cf:45:84:
         16:ce:a1:1a:41:68:de:ce:f0:57:76:2e:d9:11:96:6c:5b:cf:
         96:c2:c3:06:c4:19:97:2a:d1:18:66:80:d6:83:54:a4:86:38:
         82:40:24:a8:fb:18:e8:d8:30:63:28:48:5a:e7:59:71:ab:71:
         57:b5:0f:7f:7f:66:e5:f8:37:45:51:3d:dd:31:88:4f:91:09:
         77:88:70:24:99:e9:dd:10:94:30:07:73:14:6f:dd:bf:43:2f:
         eb:10:31:ae:c8:da:36:e9:0e:d7:be:b6:d7:b3:c2:80:47:e7:
         a5:9a:39:79:35:bc:f9:27:68:e2:d7:5d:b0:3c:b4:20:ef:96:
         4e:db:41:70:ad:32:a8:1b:4d:0c:bf:a5:1c:ca:f6:95:a4:23:
         92:07:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:46 2024 by rpki-client on console-fra.rpki-client.org