Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File:                     g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier:          H4rYQ68sjVnSJ4KMzLXqV4glEFPGdYQtSdfR7Mn4zE0=
Subject key identifier:   75:AB:57:A7:BA:9D:BD:C3:E5:CD:BB:BB:4B:BC:B9:79:7F:D6:63:E6
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer:       /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial:       018F874B2932AE92FF762961674C9F915F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number:          0B10
Signing time:             Fri 17 May 2024 16:03:20 +0000
Manifest this update:     Fri 17 May 2024 16:03:20 +0000
Manifest next update:     Sat 18 May 2024 16:03:20 +0000
Files and hashes:         1: J6WYl1HdJYfipFWQM4P8txdZBNg.roa (hash: n33kmY0bPpWyxN93ufYybRAuK95cCDHq18g+Q/m8lEc=)
                          2: TNTP2XN5pIbJKS7fNWa3AV5PPnA.roa (hash: YEqotVC5Ge8Q07BEkYGF88JPICqtgEMgpqv5zl9Lwx0=)
                          3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 3hMTi/aPPxfeZG94+ATm2rVQScbpHcHQgpp6O8bJ4us=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:29:32:ae:92:ff:76:29:61:67:4c:9f:91:5f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
        Validity
            Not Before: May 17 16:03:20 2024 GMT
            Not After : May 18 16:03:20 2024 GMT
        Subject: CN=75ab57a7ba9dbdc3e5cdbbbb4bbcb9797fd663e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:6d:29:32:96:df:e6:4f:3f:cf:e0:50:28:
                    a7:a2:c3:4e:66:f7:25:a0:82:55:d2:00:8f:b9:2b:
                    90:c9:be:38:70:44:f6:58:dd:04:f9:70:f5:a2:16:
                    e6:ed:f0:c3:5c:af:89:ce:bf:38:e4:1c:84:4b:47:
                    e1:7a:2d:a0:0a:41:22:0f:07:35:38:69:ad:4a:66:
                    ab:9d:3d:48:73:5d:05:5c:3a:d8:cd:9e:8d:44:28:
                    1e:42:f1:c1:64:dd:d2:c1:52:63:6b:85:be:bc:c8:
                    3a:08:b1:71:5d:73:ef:58:d5:6f:42:6d:ab:ae:82:
                    23:7e:ed:93:b8:b6:7c:bf:c9:56:46:e9:92:e0:58:
                    b6:1a:a3:35:18:6c:69:e4:e6:29:f0:a9:1e:4a:79:
                    9d:86:59:6a:a2:12:a4:53:f7:22:52:61:ab:1d:a3:
                    13:58:83:7d:18:1c:3d:74:75:dc:d6:0c:d1:59:c7:
                    2e:24:34:12:11:dd:f5:b8:a0:dc:9d:59:db:82:78:
                    8b:d0:98:65:9b:32:88:8d:36:91:dd:a4:8b:79:fa:
                    1d:3e:59:d9:07:fe:a9:31:f0:25:bd:6a:28:18:c4:
                    c5:5c:49:2d:09:0d:a6:82:16:80:de:6f:72:d1:d6:
                    91:5e:27:22:82:af:e2:22:e0:42:04:41:13:28:19:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:57:A7:BA:9D:BD:C3:E5:CD:BB:BB:4B:BC:B9:79:7F:D6:63:E6
            X509v3 Authority Key Identifier:
                keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:85:a6:10:c8:59:01:ca:82:a2:7a:59:b9:56:a4:e4:9d:ac:
         8e:7b:84:51:84:da:46:bd:5a:93:0a:45:53:a3:8b:09:79:82:
         d5:25:4f:42:8b:a6:07:31:8a:bf:61:82:06:4c:50:35:c9:ff:
         f5:e6:58:e4:96:cd:e8:d2:fa:db:51:97:5e:80:6e:8d:37:c8:
         40:b4:a1:17:40:25:d1:95:90:a0:ec:bb:99:60:62:72:fb:89:
         ca:94:56:63:de:02:15:1b:a8:36:5d:f4:7a:5c:98:2b:a0:5a:
         e2:fe:62:e0:39:70:f2:c4:da:c3:ab:65:30:79:25:d9:4b:d6:
         30:23:0c:fd:0d:69:a8:06:d5:42:8c:52:76:65:45:72:a8:90:
         48:3d:d0:08:83:d3:19:29:3b:bf:fd:95:aa:fc:68:57:5a:71:
         80:0b:69:a8:21:75:12:ec:b7:63:7c:23:bd:8d:f3:a9:72:84:
         a9:ec:4c:3f:a8:ec:68:2b:bc:21:c8:48:77:c9:9b:a2:ac:42:
         d0:9b:97:b4:0a:e9:3b:58:84:ca:2e:af:5c:5f:e5:2f:00:5c:
         e8:95:26:c4:84:20:69:a8:56:81:4b:6a:d8:c0:e9:09:89:bc:
         9e:18:91:e8:28:41:a0:d9:85:72:2b:bb:55:0f:36:69:85:39:
         ac:c9:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:28 2024 by rpki-client on console-fra.rpki-client.org