Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File:                     S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier:          AQ1XNLOmDQgjXW6rPgweaKOuRKXhrcyAX5f4pDKKkFI=
Subject key identifier:   C1:0F:55:BF:35:1C:A0:3E:ED:A7:DA:8E:17:5F:0C:D7:3A:6E:CC:4F
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer:       /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial:       018F88FFBE3B73F6451FA430FFBE716DE4A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number:          7C
Signing time:             Sat 18 May 2024 00:00:12 +0000
Manifest this update:     Sat 18 May 2024 00:00:12 +0000
Manifest next update:     Sun 19 May 2024 00:00:12 +0000
Files and hashes:         1: FU1B4H1gdLJJNXlTWnSMMlGMnAA.roa (hash: hL0J1W9dyKx6iCtZ6Jw/B155ULtW4QczHC1mKDffVVM=)
                          2: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: VrWKL59p7DKjCdHPsmYeG29gxkDZQnCCXXdhQOg8ExA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:be:3b:73:f6:45:1f:a4:30:ff:be:71:6d:e4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
        Validity
            Not Before: May 18 00:00:12 2024 GMT
            Not After : May 19 00:00:12 2024 GMT
        Subject: CN=c10f55bf351ca03eeda7da8e175f0cd73a6ecc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:ff:5d:5c:96:f3:a2:c4:e2:8f:f8:d3:a8:
                    97:66:4c:37:fb:8f:e7:bd:c2:86:f5:48:78:82:60:
                    51:5d:fe:2d:95:ed:05:d9:44:2e:77:60:a1:56:9a:
                    e0:33:a6:16:15:fc:55:5a:78:2f:c0:87:99:2e:1b:
                    a8:07:0f:b5:38:ab:9b:ff:45:fa:94:4d:d4:bf:4f:
                    18:24:37:3f:70:d3:11:28:65:33:a0:6f:4f:9e:35:
                    4f:b7:88:f0:d7:24:08:5e:56:d8:8d:97:0e:fc:67:
                    3a:28:cd:3e:a3:84:a9:67:25:87:66:53:3b:a9:40:
                    9d:e0:97:86:fb:94:da:16:1f:81:2e:31:33:46:d7:
                    91:ce:b4:9b:2d:77:87:06:48:bd:e1:1f:b0:56:b9:
                    09:8e:9e:16:46:af:0b:69:36:40:a3:3e:ee:2d:93:
                    5a:eb:cb:fc:80:b1:8b:d9:dc:20:da:53:78:b3:07:
                    9f:38:e5:50:78:25:3e:23:bd:e6:66:e5:08:1e:d4:
                    50:29:7d:2c:c8:11:95:90:7c:67:a7:9f:ab:12:a9:
                    eb:4a:56:b3:51:d7:aa:6f:6c:23:5c:f7:3e:a1:7a:
                    e3:d6:ea:8d:fe:c8:f4:d2:9b:c0:b0:9d:2d:e7:57:
                    ec:75:90:bc:78:68:fe:1b:b3:05:47:32:17:ab:1f:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:55:BF:35:1C:A0:3E:ED:A7:DA:8E:17:5F:0C:D7:3A:6E:CC:4F
            X509v3 Authority Key Identifier:
                keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:ad:21:1d:04:84:71:18:34:a3:5f:fe:f7:90:85:d0:ca:
         18:37:0c:09:0e:ac:37:93:52:53:ee:21:83:93:dc:e8:92:66:
         e1:95:11:d3:0d:b3:20:b5:54:26:a0:23:45:cc:2f:32:4f:13:
         6c:e3:15:a2:f1:21:f0:13:37:c0:84:25:e4:8a:e6:42:05:47:
         65:c4:f8:80:21:ec:d7:2c:e5:95:87:ac:e4:f5:97:3d:e3:98:
         d3:a6:45:1b:b0:08:12:e3:25:ed:0c:a0:f6:e9:01:04:b1:df:
         9c:95:61:09:e5:8b:dc:64:a3:a8:b7:c0:65:de:91:f3:93:33:
         cb:00:bd:6d:54:cc:b6:e8:9d:f0:cc:4e:29:63:a0:4b:d5:17:
         dc:a9:d4:9d:43:48:4a:2f:af:4c:eb:7b:ee:d0:34:11:39:26:
         52:a9:8a:1d:03:fe:e9:67:cc:c8:78:53:a7:59:f4:17:e8:b4:
         2e:b5:00:e1:9f:5a:63:33:aa:32:d1:37:e9:29:fd:17:c4:83:
         96:81:9f:13:33:41:b2:f8:a8:15:31:65:de:3f:a1:07:d5:ee:
         16:c5:21:6d:58:52:cf:dc:0b:3d:3a:d4:1d:39:7a:cd:da:57:
         ca:fc:85:ba:9e:cf:83:8a:7c:1f:ec:1a:af:0b:e8:ab:6d:f6:
         95:06:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:46:48 2024 by rpki-client on console-fra.rpki-client.org