Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          8dcLBoyfMbiGg4aPcWBIVY+kzESgMi0I04iIdfnITsI=
Subject key identifier:   2D:43:64:D0:F5:82:6E:AF:D3:83:86:AF:0D:7C:AB:73:C3:35:E5:FD
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       018F855BCCF9B2A9A55FABD4E69AA1260A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          0CA4
Signing time:             Fri 17 May 2024 07:02:17 +0000
Manifest this update:     Fri 17 May 2024 07:02:17 +0000
Manifest next update:     Sat 18 May 2024 07:02:17 +0000
Files and hashes:         1: CRyrdHGWGPfxSFw65Gh5qcZ2om0.roa (hash: VrLdw9d6sWpTxjyCAxNSA3DZrBNLZR6ZIZTTIXPdvvA=)
                          2: Puem_96wYOSw2mFTq7LOivvDtNY.roa (hash: lmu5UepFd776I9aoYxGH4diD04ZmEyWcdqzAP8sVdaA=)
                          3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: BI2HIB2k53FJXXhXj0SxgSMYv23+jNN4mPpfh2ROzFA=)
                          4: uSDEYQAyBLV-Dx8YeBoj1SH_T4Q.roa (hash: F3hGwgLsrBrgcK/3zHaE7dZ/i14+lFP9y4VngM5clVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:cc:f9:b2:a9:a5:5f:ab:d4:e6:9a:a1:26:0a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: May 17 07:02:17 2024 GMT
            Not After : May 18 07:02:17 2024 GMT
        Subject: CN=2d4364d0f5826eafd38386af0d7cab73c335e5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:ab:de:ac:a7:ee:59:c7:4e:3b:82:40:6b:
                    bf:55:8f:d6:ef:c4:04:c6:d5:27:75:29:1d:60:6c:
                    8c:8e:b8:ff:6b:a3:cb:94:ed:4f:30:f7:63:e9:89:
                    46:df:e1:d6:f0:be:e9:c1:67:30:6a:e5:d0:dc:b4:
                    b3:b7:b9:85:6d:bd:96:04:05:35:67:8f:46:2f:cf:
                    31:9b:af:20:18:03:3e:7c:78:30:e5:8f:65:62:62:
                    db:3c:36:6b:6f:c3:45:3b:d5:48:cf:06:b0:c3:ab:
                    c9:bb:da:11:bd:f5:67:d9:fa:86:6b:b0:00:e5:c2:
                    19:24:52:1a:af:4b:e9:2f:dd:9d:14:7e:28:56:20:
                    f1:2a:61:02:0e:2a:be:ac:4c:96:83:53:1f:2b:f7:
                    04:8d:1f:41:1c:e9:97:7a:7e:f8:48:06:2b:cf:cf:
                    ef:a1:82:aa:31:60:b3:7b:81:f6:5d:75:50:99:7f:
                    34:1f:64:73:92:d1:14:eb:ae:ee:72:c4:3d:36:f1:
                    fc:6f:49:f1:99:82:a1:bd:dd:92:c8:f3:b9:33:0b:
                    f5:04:8f:64:18:5d:a5:c6:c4:d7:d4:b0:b1:45:b0:
                    00:f7:44:16:94:cd:9b:1b:53:3e:f5:82:55:85:b9:
                    11:31:f3:8b:b2:4e:3f:8d:c6:6b:26:45:3f:88:3f:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:64:D0:F5:82:6E:AF:D3:83:86:AF:0D:7C:AB:73:C3:35:E5:FD
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:e6:e9:b4:55:10:e9:b3:3d:dd:be:74:a4:95:fc:40:2f:
         9e:fa:06:fa:75:9f:6b:f3:b6:a7:c2:68:d2:d6:b2:da:7f:4b:
         b9:f6:a4:7e:62:af:e7:f6:1e:7d:ff:47:cc:02:81:88:b4:b3:
         57:95:2c:89:22:33:a4:1a:1e:57:d2:f4:48:c8:fd:d7:8c:ac:
         67:c0:21:21:c8:05:7f:8a:5a:76:5b:7a:a7:a2:75:3d:b0:c3:
         65:46:f8:dc:42:d9:50:df:c0:6e:ca:ca:77:fd:3d:1e:cd:fc:
         7f:40:9d:b6:2b:8f:d3:57:79:0f:d8:0e:e1:37:d5:4a:23:19:
         65:48:1d:54:a2:df:20:46:7d:a9:64:8a:33:7d:af:9d:1d:a7:
         a7:80:9a:94:11:f2:21:e8:12:da:35:e3:77:75:38:35:7b:a3:
         10:6b:53:0a:ed:af:ad:45:a6:06:23:08:7f:d8:1b:d2:c2:51:
         fe:9b:06:5f:7a:1b:09:e1:df:1d:72:29:64:db:e1:93:ed:02:
         b9:51:2b:b0:e9:ff:1f:d5:a5:2e:23:b2:07:d8:13:19:7f:b9:
         be:83:7e:b5:ee:37:27:75:37:a4:1d:82:42:0f:10:bf:21:e7:
         58:24:74:55:c4:a0:4a:22:dd:09:57:16:bf:de:bc:2f:df:e4:
         03:7b:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:18:28 2024 by rpki-client on console-fra.rpki-client.org