Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File:                     XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier:          HjjXICpcjQu3AnaIqNc024jRiVy9eXga6IUfvhXC8Pk=
Subject key identifier:   F7:3A:FC:26:A4:00:DC:BA:D2:5B:13:3B:78:C8:C6:9D:1C:E5:1E:93
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer:       /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial:       018F8A497325D3ACC80B825385362BD72219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number:          0660
Signing time:             Sat 18 May 2024 06:00:20 +0000
Manifest this update:     Sat 18 May 2024 06:00:20 +0000
Manifest next update:     Sun 19 May 2024 06:00:20 +0000
Files and hashes:         1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: OaQsebwa2H90miESVK41Om5XzWn8LRWblDrJ25b+BVA=)
                          2: nNjYfWH4ZKvN9tM6WZw9fzKIMGE.roa (hash: /34OAhU2qXeFNZwKL0A5oNJLdBT3r2t/hDdx/MPeI5s=)
                          3: wbBdIZ72KmkGPINWNX-dv5PQlvI.roa (hash: RyHYhPLqMM0Zs8CjVO4mQya9Yecue77o/Ld42R+L3ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:49:73:25:d3:ac:c8:0b:82:53:85:36:2b:d7:22:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
        Validity
            Not Before: May 18 06:00:20 2024 GMT
            Not After : May 19 06:00:20 2024 GMT
        Subject: CN=f73afc26a400dcbad25b133b78c8c69d1ce51e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:ab:28:a9:b5:40:51:bd:51:59:55:b5:8f:
                    bd:9d:f8:14:f0:62:69:95:dd:e2:31:fe:cb:2a:1c:
                    1c:eb:69:26:a5:ce:1c:bb:1c:0d:06:00:4c:de:c0:
                    f2:17:98:ed:7a:d4:4b:a7:7c:15:3b:f3:d3:47:59:
                    92:e1:d2:83:f7:3b:ab:04:b7:56:49:af:4d:6f:b6:
                    d7:0a:b6:83:42:0d:bf:10:a7:ff:f5:c1:04:1f:fc:
                    fc:7b:29:b8:40:f1:4f:cf:14:6c:3e:e1:1e:10:66:
                    26:54:94:cd:53:31:d0:06:f1:70:ea:97:ae:06:10:
                    8f:51:b5:51:2c:c1:5f:3a:d3:65:3c:c6:95:fc:05:
                    6f:3e:98:30:de:59:d5:65:ea:8a:a5:b5:68:ed:a7:
                    09:bd:88:e1:91:49:ec:79:67:a4:cb:c9:72:b0:ec:
                    92:91:7c:84:82:44:5d:45:8c:f2:4a:05:0d:74:3c:
                    7d:55:e1:89:34:d5:1e:d2:ae:fb:9b:d7:31:27:a2:
                    ee:57:e8:c1:d3:14:96:bb:fb:ce:80:b6:53:7e:d8:
                    a0:b9:00:73:03:8e:8c:49:b6:07:b0:24:b3:83:5f:
                    b5:6e:e4:d2:9a:78:5d:f4:8e:24:91:e2:e5:a2:59:
                    65:a1:39:8c:84:17:83:e3:2f:d9:28:7f:bc:89:b3:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:FC:26:A4:00:DC:BA:D2:5B:13:3B:78:C8:C6:9D:1C:E5:1E:93
            X509v3 Authority Key Identifier:
                keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:42:fa:0a:25:1e:cc:83:a7:65:fd:16:83:58:7c:32:08:
         1b:54:6b:0b:0b:0b:26:14:ce:02:7f:6e:e1:28:6f:a3:97:8a:
         28:02:42:ae:34:df:ad:91:35:7a:1e:24:bb:53:85:2d:0c:0d:
         39:fa:19:7c:e5:e6:1a:23:27:2f:68:fb:c3:52:ba:67:36:4f:
         65:88:d5:9d:d7:47:96:f3:3a:79:65:48:3f:3a:d3:73:29:b9:
         29:97:4c:dc:f3:b4:65:57:6d:a9:34:c1:c0:9b:4c:75:22:1b:
         ee:48:4e:8b:a3:e9:50:90:b1:00:28:8a:e8:29:58:82:75:d7:
         98:d0:01:a4:fb:e3:36:1d:f5:53:7e:ad:86:96:57:43:20:96:
         2a:77:00:28:80:fe:f1:ad:e4:40:c6:4a:80:6e:cc:4b:ec:54:
         08:40:3e:b1:91:8a:e8:38:04:9b:af:a6:03:08:e2:d3:54:f0:
         af:c6:11:43:51:a0:88:dc:97:52:82:06:66:92:78:3f:ec:8c:
         87:83:9a:02:06:3b:f0:f8:fc:ca:a9:4c:53:9d:b0:0c:47:58:
         a9:92:41:04:c6:25:1b:43:3a:85:55:4d:d8:3e:f3:69:40:ed:
         42:7b:4e:cb:dd:96:9d:cf:63:0e:b1:a2:3e:fa:d9:c3:c9:7f:
         c4:e6:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:46:09 2024 by rpki-client on console-ams.rpki-client.org