Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File:                     n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier:          fQxV8nzMGNdsKMG5ExbiJf6t5/nVD4M0JWnTQiz/SOQ=
Subject key identifier:   0C:88:59:F4:AF:D0:8A:23:85:E3:5F:91:C3:69:9F:FB:D8:D6:A1:C5
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer:       /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial:       018F8748F34B6AA5F5D36980BD663EFBC02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number:          0956
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: QfwDngGIs_IdurRodzcuFmQn-D0.roa (hash: NIlgQITEz7KpmVXjb06feTcRExSKkCH7TWnEOwG95iA=)
                          2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: SFZw5WnfaOraxs7+K/DUG8TshFXEQcvquemeEl9Y5aw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f3:4b:6a:a5:f5:d3:69:80:bd:66:3e:fb:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=0c8859f4afd08a2385e35f91c3699ffbd8d6a1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:0f:34:ed:a0:ca:72:d5:45:26:00:c3:06:
                    2c:42:4a:ca:5a:c7:67:a9:43:08:1c:3b:1b:57:bb:
                    e9:08:51:f7:42:b1:14:fb:30:f4:16:3b:27:3b:cc:
                    ab:63:23:8c:3b:3d:f1:e0:fb:cb:db:19:f3:14:12:
                    0f:18:b2:2c:0e:da:f1:9a:7f:ad:24:03:9f:5d:a8:
                    40:90:4c:e2:44:97:a4:b8:24:4d:dd:6c:df:df:73:
                    72:0f:2e:b6:5f:4d:06:bf:fd:ee:b6:82:ae:50:c1:
                    8a:1a:80:6f:4d:72:d0:17:59:1d:5b:e3:e1:28:58:
                    c1:0b:9c:c4:d7:90:6e:b9:f9:e8:79:46:95:66:b7:
                    83:ac:b0:2e:49:68:2f:32:57:8e:ac:55:bf:73:13:
                    3b:fe:b8:f3:ca:d2:e9:72:91:38:2d:19:03:d8:f5:
                    5f:4b:d8:dd:b2:49:9a:00:dc:3f:74:4e:8a:ce:d0:
                    0a:99:6b:1f:33:6c:56:6b:9b:73:16:b5:c8:54:e0:
                    94:99:58:7e:d2:21:ab:6d:ba:6e:9a:ab:d7:29:a8:
                    93:5a:1b:76:b4:76:9e:6f:ef:60:35:10:92:10:c6:
                    a8:0b:de:e8:98:6d:50:26:9b:a3:15:e3:32:4d:b7:
                    dc:4b:33:fb:c9:11:17:3c:67:34:d0:ee:f2:60:01:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:88:59:F4:AF:D0:8A:23:85:E3:5F:91:C3:69:9F:FB:D8:D6:A1:C5
            X509v3 Authority Key Identifier:
                keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:8b:84:c7:22:f4:16:cb:91:69:88:6e:a4:d0:49:7a:d4:
         b8:cb:cc:64:91:ea:df:e6:6d:a7:69:3c:85:2e:1b:df:e7:da:
         41:83:18:c6:ed:a8:3a:15:f8:cc:79:81:31:89:cc:5d:16:d8:
         84:2c:df:2d:62:2f:94:09:e8:51:b7:cf:0a:9c:91:44:3a:6c:
         16:77:c7:07:5a:25:27:7b:5a:98:da:01:2f:37:93:c6:8d:db:
         86:63:64:f0:da:5d:c2:af:90:5a:ea:88:67:90:b4:a0:a5:d0:
         ca:ef:2a:e4:b5:ba:5d:7c:00:65:0d:0d:aa:1b:4a:9d:a1:1c:
         66:98:f7:e3:9b:70:c8:8d:7a:a9:c5:8a:b4:df:c9:bb:5e:cb:
         4a:4d:49:4a:90:3a:cc:e5:7c:d1:86:f5:7d:d2:f2:7f:af:27:
         e9:46:ae:77:8f:bc:19:08:dd:6d:fc:79:c1:0c:bd:58:46:57:
         84:c5:b8:4f:22:a0:65:10:69:1c:68:ab:92:00:4c:3a:10:40:
         b3:3f:8e:5d:20:33:fb:19:37:b2:f4:be:03:77:21:e0:1b:fa:
         e2:2d:64:14:2f:95:4b:75:4e:2f:53:1c:c1:20:70:3b:a7:b5:
         32:c0:e5:cc:34:86:9a:cb:49:d4:6f:90:35:ae:c4:33:df:de:
         5e:88:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:04 2024 by rpki-client on console-ams.rpki-client.org