Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          qyoEiZDJxfw9x//6Sk8W50zhxGFqNFVySNQX0u6uOLM=
Subject key identifier:   7B:2C:28:02:7C:4C:DD:B1:F7:9D:1E:CB:CA:82:D8:E5:B7:E8:63:E6
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       018F874A9A9F65DB864C8692E84FA136E406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 16:02:44 +0000
Manifest this update:     Fri 17 May 2024 16:02:44 +0000
Manifest next update:     Sat 18 May 2024 16:02:44 +0000
Files and hashes:         1: CZyIBB_sMdRtdDbsy4-MvLAw1OE.roa (hash: tDBMPImX9KcWuPG7MObee5DVuOvuiQWeAn/bqOSe6As=)
                          2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: zrmNnhqUCv8MhOm1+Q81AY/75iu+7tbCznanvkGRK2k=)
                          3: fHWNHAXNZAZXVt-ZFMB3ENVnY9Y.roa (hash: bndX1rUjPM1IInEuSXfoZ0MT9WVnUeyYHmYWrDfUD14=)
                          4: m0mxL_jlvXSiQsscQ_yVMuFDwEE.roa (hash: wiMYUdHwQFM1leb/GcI3OPBou+8q7tUXsUfpSnvhpYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9a:9f:65:db:86:4c:86:92:e8:4f:a1:36:e4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: May 17 16:02:44 2024 GMT
            Not After : May 18 16:02:44 2024 GMT
        Subject: CN=7b2c28027c4cddb1f79d1ecbca82d8e5b7e863e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:2a:e5:e8:52:89:19:ad:8d:b8:ae:77:11:
                    25:3e:a6:3a:2c:1a:4d:ed:60:cf:b6:ca:65:39:9c:
                    57:95:25:96:93:f3:e0:6c:4c:e1:bc:ce:b7:48:5f:
                    d1:b7:43:6e:64:e0:f1:d4:db:7d:4a:7a:21:71:cd:
                    ee:80:fa:aa:69:17:14:08:e0:29:36:85:58:f9:90:
                    16:df:d8:ec:db:18:79:58:9a:2f:6f:de:d2:86:dd:
                    dd:63:90:6f:2e:e9:7d:a8:a8:0e:a3:60:38:d6:30:
                    8d:6c:51:7e:cf:28:a8:a1:e0:82:bf:6b:6c:97:23:
                    90:e6:dc:32:5f:c7:72:2c:f3:6a:10:bd:f1:ec:eb:
                    7a:1e:f7:b3:91:5b:d9:df:3f:af:1a:11:ff:35:ea:
                    7b:da:bc:f3:67:2a:b5:41:e3:fc:4b:64:69:c2:e3:
                    ea:1b:f5:15:95:a8:e6:e0:85:49:b3:48:67:4d:e3:
                    15:89:2a:e1:4a:cf:74:98:40:e4:83:a8:65:fa:bf:
                    a5:24:b1:79:ff:da:71:3b:3c:b2:ee:4c:3a:ed:a7:
                    45:ca:10:d7:50:1c:ce:6c:77:67:94:e2:61:cc:db:
                    40:f3:d3:c9:25:00:9f:83:35:e7:ee:98:21:9f:dd:
                    f9:ce:06:09:de:b0:b4:a0:32:cb:e2:4a:48:6d:f1:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:28:02:7C:4C:DD:B1:F7:9D:1E:CB:CA:82:D8:E5:B7:E8:63:E6
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:6b:7f:90:ef:9a:cb:4e:d5:1c:9e:61:2d:c3:03:b7:2d:
         71:bb:34:95:e6:3b:27:9e:9e:57:f7:7c:14:60:7f:ab:b5:c8:
         c5:03:95:ce:87:f3:93:4d:95:e2:c9:e7:79:46:c7:5f:d3:c8:
         23:d1:c9:a2:6a:9e:38:40:c3:6f:4c:fb:3c:59:00:dc:cc:1c:
         fb:8a:6f:2b:69:60:34:a7:3e:b4:70:9c:51:d6:ca:0f:17:be:
         70:09:29:55:da:9b:9a:8b:b9:2b:aa:24:01:65:29:b2:be:b3:
         d5:96:bc:3e:ac:94:da:2c:7a:7b:49:47:4a:9c:79:75:26:de:
         af:50:12:60:c0:23:57:45:ab:0e:ae:28:4a:4d:4b:a3:b4:a4:
         e7:b0:71:77:2f:28:3b:73:26:cc:2a:15:c6:df:23:47:4f:31:
         65:f6:30:c7:29:51:3a:44:98:2d:52:73:4d:5b:a3:8e:12:33:
         d4:72:04:e8:35:95:b2:b4:42:81:67:bb:bc:ab:3c:fb:a2:31:
         34:35:17:d4:42:09:5c:2c:56:f9:fa:69:c7:43:05:f7:2b:10:
         34:1a:ab:7b:ab:dd:a0:7a:93:d6:d4:84:67:32:a0:30:b1:2c:
         23:aa:5d:9d:67:89:92:dd:c8:a5:56:4a:77:84:cf:8d:c9:bb:
         1a:bd:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:10 2024 by rpki-client on console-fra.rpki-client.org