Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          e20xC3VfUJBJMtaAlv1e1Lfq2GEWTkzsruIhOckL2KM=
Subject key identifier:   C2:14:AC:5D:10:AB:AE:7A:89:9C:2E:94:BD:1A:1C:42:77:42:D5:8D
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       018F874A44AE75B511B1C8C7018F424E3814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          0F50
Signing time:             Fri 17 May 2024 16:02:22 +0000
Manifest this update:     Fri 17 May 2024 16:02:22 +0000
Manifest next update:     Sat 18 May 2024 16:02:22 +0000
Files and hashes:         1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: YGar7NnIkqdQTZ++oBOe5E1247pjC87CMeMwcUd/7bY=)
                          2: s18d2DfVg2tuXgeI9Lzj83paPKM.roa (hash: yZIog1NH0ROthJvxGZq2+SWoRxKk/qizXdssQ5en6s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:44:ae:75:b5:11:b1:c8:c7:01:8f:42:4e:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: May 17 16:02:22 2024 GMT
            Not After : May 18 16:02:22 2024 GMT
        Subject: CN=c214ac5d10abae7a899c2e94bd1a1c427742d58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:b5:56:b6:5d:ad:33:58:2a:5c:29:b1:6d:
                    52:4f:87:1f:b6:72:c0:c7:a1:0e:1c:e9:b0:a8:b6:
                    22:59:7c:be:8a:17:44:39:89:b0:d2:1d:dc:28:2c:
                    b9:c6:fb:63:06:50:f4:a5:ae:0e:af:e2:04:a1:98:
                    32:98:fb:ee:96:fc:21:0b:fa:16:7a:2b:b4:90:c0:
                    94:7d:fa:2a:df:2f:ba:e3:d7:db:16:61:95:f0:70:
                    04:fb:fe:f6:2b:cb:34:5d:a8:79:65:14:56:56:58:
                    71:6b:e6:43:27:9c:97:28:21:dc:23:40:4a:73:87:
                    a3:4c:18:5a:36:6d:68:fa:ab:82:f0:fa:34:ae:45:
                    b6:5a:4f:e6:c7:dd:95:69:60:eb:e4:7f:dc:24:bc:
                    44:dd:a6:ed:e2:14:44:36:d1:e3:8b:cc:5d:ff:13:
                    41:c4:96:af:84:59:61:c0:b7:12:e7:ed:d1:0a:22:
                    20:e4:b4:21:95:dd:dd:cc:b6:fe:e4:e1:f4:75:61:
                    bf:50:8a:26:9a:4a:19:3d:7e:f0:e0:5f:8f:04:bb:
                    b3:69:a2:99:7d:0e:5d:c2:63:1a:1a:13:c1:c3:a0:
                    49:86:e4:30:b2:37:06:e3:23:2d:cd:c2:aa:c5:3c:
                    c5:3d:85:eb:12:0a:0c:42:d1:f6:dc:cd:82:6c:53:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:AC:5D:10:AB:AE:7A:89:9C:2E:94:BD:1A:1C:42:77:42:D5:8D
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:32:ca:60:2e:85:d3:df:d8:9c:b0:84:97:55:01:01:1e:9e:
         a4:3b:43:4c:09:2c:f2:90:5d:39:de:be:ae:ad:dd:79:8d:f5:
         69:43:19:89:8b:2f:48:f2:46:6f:52:4b:1d:08:57:9c:eb:47:
         df:90:06:e2:a7:75:a7:85:b8:bc:e7:0e:1e:c4:4e:f0:53:bc:
         7d:1d:f6:62:05:1d:b6:1f:e6:c5:c6:5d:01:bb:54:6f:b2:00:
         cc:cd:8c:e1:bd:c7:09:a6:de:5c:87:42:d3:f4:22:73:2a:ee:
         f6:54:7e:24:8c:93:12:c8:75:69:0f:9b:34:50:d8:84:3b:16:
         19:65:e5:94:fa:bb:d7:b0:e8:7c:02:da:22:b8:c9:e0:4c:d9:
         59:c1:66:0b:1a:5f:f0:e9:8c:90:76:4a:fb:0a:fc:78:c0:77:
         32:db:37:5f:d1:93:2d:e7:b9:24:db:14:9a:43:15:0e:d2:33:
         de:af:03:c5:1e:45:7a:2d:c7:25:41:38:32:e0:7f:79:ad:ef:
         5a:a2:6d:32:85:d9:10:2c:a9:9a:8d:d1:d7:4a:dc:8a:0f:0a:
         5b:21:06:b6:40:a1:08:22:51:9c:21:43:94:fc:e2:2b:84:dc:
         13:c5:50:f0:60:7d:5a:4e:3e:6f:cc:98:23:c8:6e:44:ab:72:
         28:50:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:16 2024 by rpki-client on console-ams.rpki-client.org