Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File:                     z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier:          4400cFrsxyTJGjVvMiSUM4AFNUeqxg0Y7Hf0h3gRvaQ=
Subject key identifier:   1C:98:32:AB:80:ED:76:A7:17:47:C5:F0:BF:75:91:1A:B3:F4:87:0B
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer:       /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial:       018FB045982FAD6C887E13ABD8B2B44411D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number:          0FAE
Signing time:             Sat 25 May 2024 15:01:41 +0000
Manifest this update:     Sat 25 May 2024 15:01:41 +0000
Manifest next update:     Sun 26 May 2024 15:01:41 +0000
Files and hashes:         1: PjbT4l8vBGSO-Ehkdg0CoTthO2c.roa (hash: aqkyW4Rv+6ZTF5V2ZKhEtWJVnMuuo/8xR+5anG3ZvcQ=)
                          2: QGlg7eXzfeN-0yS3zaoJ-Vtw4I4.roa (hash: V0wALnZUInZ66287ITtd8CJ4k4oQphB6/doOc0gnlqs=)
                          3: ge2coh4D34ab3VLG7Zx5_Z14Vok.roa (hash: YGKdXqL+ERRMvYsIhU0nhjN0K0NKpJSomNWh5UiJx+E=)
                          4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: UgdmRQE/SyHwVZ8LDrjTNCda/YPc/TmMKOJOkfRXs50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b0:45:98:2f:ad:6c:88:7e:13:ab:d8:b2:b4:44:11:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
        Validity
            Not Before: May 25 15:01:41 2024 GMT
            Not After : May 26 15:01:41 2024 GMT
        Subject: CN=1c9832ab80ed76a71747c5f0bf75911ab3f4870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:56:2e:00:3c:3e:8c:ec:98:7e:bc:e6:6b:
                    ee:bb:05:b6:43:49:c0:16:34:b8:35:44:6d:0f:76:
                    ea:d7:94:ba:c3:29:ae:3c:cb:ed:3f:f6:7a:cb:d5:
                    55:e9:75:63:2a:1e:68:a3:e7:67:c1:b9:85:0e:2c:
                    34:d4:39:1b:e1:a8:c3:c6:c4:d5:b4:0b:83:fe:5d:
                    dc:d0:59:18:6b:9e:f5:b5:05:b7:06:eb:9a:4d:94:
                    4a:1e:d4:9c:bb:44:d2:c7:3b:85:85:89:ad:70:04:
                    ea:e7:8f:ff:8c:85:a5:f6:14:ee:20:e6:4d:5e:82:
                    08:41:97:d0:ea:20:87:b7:cd:05:5f:40:e9:be:d8:
                    f8:2f:50:fa:08:e2:e5:c6:aa:5e:a3:20:b0:79:e6:
                    01:01:1b:f6:26:4f:af:a3:7b:72:d1:1c:53:cd:8b:
                    a2:1f:91:3f:63:ae:9b:f5:7f:55:a2:df:e3:82:c1:
                    1a:0a:19:ea:74:55:4e:5b:29:15:0d:4d:44:73:18:
                    9b:48:8b:f7:e4:47:66:09:97:8c:b9:5c:9a:29:8e:
                    0a:5c:1d:b0:3a:a2:2a:ad:be:21:ad:dc:6d:16:65:
                    16:d5:98:2f:4d:7c:af:29:6e:14:3d:31:c6:f0:12:
                    8e:a5:30:d4:a6:ac:f5:4f:8b:7b:c4:98:43:e7:0a:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:98:32:AB:80:ED:76:A7:17:47:C5:F0:BF:75:91:1A:B3:F4:87:0B
            X509v3 Authority Key Identifier:
                keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:c6:85:f5:02:60:5f:a7:f6:b5:4e:ad:37:c1:bb:18:e3:
         d1:eb:fd:77:71:5c:77:7b:bc:6a:f7:6c:38:69:79:8f:f3:e9:
         14:fd:a9:9d:8b:d5:74:be:73:f8:3e:c3:64:d4:12:5d:ad:18:
         96:dd:57:92:c5:a9:3b:ca:52:7e:4a:58:dc:bb:1f:9b:63:64:
         13:4e:ee:2a:11:3f:7e:b5:4c:e1:3d:42:b9:22:87:0a:38:34:
         22:76:9d:b6:32:47:43:73:3d:0d:d5:3a:bb:7a:a7:6a:31:23:
         89:b2:24:14:00:0b:1b:1a:cc:c5:84:d7:90:39:bf:a9:60:d9:
         a1:b9:c0:a7:a2:25:74:aa:93:d6:77:84:18:c4:1c:8b:b1:95:
         35:69:4a:61:5c:65:94:64:82:73:8b:5c:98:2a:99:11:5a:a0:
         df:54:57:04:a9:fc:e0:42:a3:5a:3d:2d:73:0b:1a:e6:05:3b:
         9c:78:8a:7e:e4:9e:2c:50:a9:d3:b7:49:21:0b:11:83:5e:cc:
         0f:ef:3d:d7:15:4e:34:c6:89:67:58:0a:5a:dd:36:77:74:4d:
         fc:bf:68:8b:03:be:ad:8f:0d:fb:a4:45:7b:cd:12:31:87:b5:
         85:61:86:60:79:05:16:6b:96:f3:6b:3f:9f:5d:56:7c:3b:58:
         83:5d:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:48:58 2024 by rpki-client on console-fra.rpki-client.org