Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File:                     s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier:          RFXYeIbtVaOtZzidSiWzx0yS88tis9/7kGgbDrBzTCg=
Subject key identifier:   06:A6:45:BC:5F:5D:0C:57:26:1C:1D:11:AB:6F:17:7D:31:EF:66:8B
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer:       /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial:       01901D466BAFFCB3A0FA5C8074F4E25EB9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 19:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:12 +0000
Files and hashes:         1: 2qDOfbZICzIhoMUglyR1__Cwbms.roa (hash: bx1v1Pi50TYbZ+MVZAOrYRGwddKYfBE11+6k/7BC85w=)
                          2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: /E2fcB0pcmfN/qOwhm/cxyb7syMx6cti0J7nPh9EkjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:6b:af:fc:b3:a0:fa:5c:80:74:f4:e2:5e:b9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
        Validity
            Not Before: Jun 15 19:01:12 2024 GMT
            Not After : Jun 16 19:01:12 2024 GMT
        Subject: CN=06a645bc5f5d0c57261c1d11ab6f177d31ef668b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:35:d9:a7:b6:0d:db:b7:c3:76:00:38:d7:
                    24:66:ba:8d:ea:af:ad:00:00:14:dc:f1:1e:23:14:
                    a8:47:a0:c0:e9:41:9d:e9:18:f5:af:02:d6:50:47:
                    37:57:0e:bd:17:b1:60:ef:be:6a:d5:6c:ad:3d:33:
                    a5:c8:f6:ee:aa:ad:07:21:7c:f5:43:ce:53:26:54:
                    06:f2:06:85:ab:c1:0b:4f:ac:75:0b:2f:c0:db:d9:
                    a1:2b:a7:54:6b:62:b4:de:30:06:97:54:90:b3:0b:
                    1f:23:e2:37:5e:ce:aa:d9:6d:af:e2:75:17:46:8d:
                    53:20:36:47:d1:c4:55:5d:49:d6:d4:f2:5a:11:bd:
                    42:9b:02:33:9b:ee:1e:f3:ce:21:9b:41:73:ef:14:
                    eb:6b:7e:1c:da:25:c6:9d:ca:08:4f:3c:6b:a3:54:
                    01:60:45:0e:b1:c5:30:eb:ea:8f:15:be:f4:2e:4b:
                    cd:7b:2b:7e:cc:7f:ce:ce:ee:36:fb:5d:2a:c5:71:
                    a3:6f:f8:f9:49:cb:b7:3c:e6:84:9b:43:7d:8a:40:
                    fe:9e:4e:8e:d1:6d:18:95:8c:7e:72:eb:c0:a6:90:
                    dd:74:bc:d2:b9:0f:45:66:ce:d0:56:99:23:23:fc:
                    b4:ef:1e:66:cc:f9:f9:79:20:a9:c0:f4:e8:56:bf:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:45:BC:5F:5D:0C:57:26:1C:1D:11:AB:6F:17:7D:31:EF:66:8B
            X509v3 Authority Key Identifier:
                keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:2a:ab:d6:f5:0e:cc:f8:70:66:79:55:61:7a:f6:b1:75:b8:
         f4:e2:4c:73:0d:26:d7:0e:08:ec:56:34:41:ab:17:0d:53:32:
         23:c5:5f:05:54:04:74:74:29:59:42:8a:96:af:a9:0d:88:35:
         ac:f1:88:26:b8:54:8c:2c:cd:d2:dd:21:a7:65:9c:47:64:81:
         25:45:d4:08:c5:52:4d:20:25:15:c6:06:90:ff:9b:28:1e:4a:
         59:7c:96:0e:14:59:4a:fc:46:34:ad:55:86:32:f3:a8:4c:bf:
         dc:f3:29:52:e9:d2:80:fb:5c:62:32:47:14:7a:86:52:e6:6c:
         fd:c0:46:e6:79:65:ef:ba:c5:65:b4:b9:24:39:a5:46:e4:71:
         6b:16:5b:7f:c9:8f:c6:e0:06:d1:b5:d0:22:e9:50:17:cd:ec:
         5b:59:52:85:23:1b:34:c4:80:ab:35:e2:da:c8:65:82:40:7b:
         13:dd:b2:b3:68:a9:2e:94:05:01:00:e8:25:67:e6:47:78:6d:
         a8:0f:c6:f8:54:6f:e4:b1:90:03:40:aa:61:2f:05:ff:16:92:
         d4:25:a9:ff:ce:ee:32:ad:5f:54:01:2f:97:c5:70:83:5c:31:
         15:9e:69:35:a4:bd:e3:d9:6c:77:06:94:7e:bb:2b:29:d4:fe:
         54:15:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:10 2024 by rpki-client on console-fra.rpki-client.org