Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          BSOYWWDfR5Fq+IdE3JH080R4/guP53Scg5uHx16G3kk=
Subject key identifier:   EC:1D:EB:A8:60:C5:44:75:EA:6F:0B:85:A4:9E:5A:84:20:9C:48:89
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       018F8D138EE30F33CF688EB600A45C15F53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          0BDB
Signing time:             Sat 18 May 2024 19:00:20 +0000
Manifest this update:     Sat 18 May 2024 19:00:20 +0000
Manifest next update:     Sun 19 May 2024 19:00:20 +0000
Files and hashes:         1: 0SZ1oIwim7IAyDckdr-8svkY53M.roa (hash: ZGvsKSC4bj2ZzlPcQEKGf5YPitnOjtrk2jDq8Ky+dCk=)
                          2: Doig4v0YQyUfVWdxp1DgZ9gSTTs.roa (hash: 4xuJKXb6vzGegjMw8Xw+4+4TiS1oxsHqda1u1Q4bY3g=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: g8Pk7nK50BEhRCgr91LtRvGdqpXI1tHoEmN/tazsqRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:13:8e:e3:0f:33:cf:68:8e:b6:00:a4:5c:15:f5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: May 18 19:00:20 2024 GMT
            Not After : May 19 19:00:20 2024 GMT
        Subject: CN=ec1deba860c54475ea6f0b85a49e5a84209c4889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:75:47:48:c5:b6:1a:44:f9:35:e3:e5:31:
                    d6:44:5d:d6:d7:49:11:e1:72:12:67:c3:f9:cb:6b:
                    4b:d6:33:f7:cb:30:e1:d0:df:c2:47:a2:c7:68:0d:
                    28:df:ee:be:e7:11:6d:bc:50:c0:2a:be:d9:1f:56:
                    96:ac:5f:55:26:54:71:36:f0:42:0c:95:be:08:41:
                    08:df:e9:6f:22:9e:93:94:22:d7:6c:3b:c2:81:17:
                    1f:b1:7d:d9:22:bb:15:23:1d:ab:05:cd:94:75:55:
                    14:99:e5:42:9d:c5:97:35:e6:7f:83:a6:40:e9:26:
                    53:75:ef:14:08:f5:41:f9:b3:87:1d:4e:04:cb:de:
                    84:0b:1a:30:35:98:5b:41:dc:6f:4e:c7:15:e3:79:
                    d5:aa:00:f6:3a:11:59:c7:e1:45:63:91:5f:5a:d3:
                    d1:41:f2:70:8b:d9:aa:17:e0:67:63:7d:f1:86:1c:
                    a0:da:5a:d3:93:91:1a:be:eb:fa:69:60:ff:67:e2:
                    b4:46:a7:77:3a:74:3b:48:c2:eb:05:0b:9b:19:c1:
                    6c:c2:cb:aa:98:20:19:e6:59:ad:14:57:ed:ca:ed:
                    b6:68:98:63:b1:13:72:6a:8e:d6:e7:a8:8d:77:38:
                    65:7d:c7:ba:80:26:dd:4a:aa:05:c6:a3:51:cc:2c:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:EB:A8:60:C5:44:75:EA:6F:0B:85:A4:9E:5A:84:20:9C:48:89
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:a5:56:c5:96:83:0f:17:05:24:99:c5:0a:4e:c1:25:f5:
         2c:ae:ea:25:c2:91:80:bb:9c:77:ee:f5:eb:e3:04:30:79:cc:
         e4:ef:2e:7c:04:aa:5b:7a:b3:e6:42:97:d4:d5:21:5a:d6:54:
         64:67:0e:d8:70:64:b6:eb:94:15:c0:19:d2:17:90:12:ef:96:
         86:fb:fb:a2:21:c3:e4:da:48:d4:58:6f:bc:d5:89:5d:52:42:
         7f:4c:da:07:ec:c3:49:28:c5:2c:c3:aa:a8:bf:95:c8:3a:5e:
         18:6e:32:2b:24:7e:1d:00:23:de:82:d7:1a:80:19:48:c0:25:
         ec:71:cb:03:f4:8c:0c:30:e4:48:83:32:32:0b:91:ee:a0:e5:
         5b:42:71:88:10:ba:48:61:e5:bf:6a:3c:80:4a:72:e2:4e:ef:
         37:08:23:8d:68:41:26:d1:70:17:10:eb:00:06:dc:bd:2d:e4:
         00:85:4b:61:51:08:41:ab:c2:a7:e4:76:a6:1e:56:82:ae:ac:
         a8:60:fb:d5:0b:36:2e:77:9b:08:9e:8e:4c:4c:72:d7:5f:0c:
         a6:fb:c3:6b:ea:95:a7:1d:5e:e0:5f:23:82:7b:6d:de:8a:82:
         e1:57:15:dd:49:04:16:a4:a4:b0:5e:b7:57:68:4b:77:b4:d8:
         15:33:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:30:03 2024 by rpki-client on console-fra.rpki-client.org