Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          bvUBq6dJ13QHxUBAQ5mwqH14s9G4sXAon9Raq9k8MZ4=
Subject key identifier:   6C:F3:AD:12:02:49:95:6C:8E:4B:60:3F:92:B8:F1:5E:D1:19:F3:99
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       018F441F9A545D9758E4BEB7C8948959D543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          07E7
Signing time:             Sat 04 May 2024 15:01:12 +0000
Manifest this update:     Sat 04 May 2024 15:01:12 +0000
Manifest next update:     Sun 05 May 2024 15:01:12 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: p90lfbGjjjUdUDyKAiYo4CEfgdo5jvjUlHXLjiMokRU=)
                          2: LNxITSD8taFVvTseW3nyAyO02-s.roa (hash: kZ1X+Vv0P5PQRsuRZcvn4zOre1sAmO4Le2847090tOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:9a:54:5d:97:58:e4:be:b7:c8:94:89:59:d5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: May  4 15:01:12 2024 GMT
            Not After : May  5 15:01:12 2024 GMT
        Subject: CN=6cf3ad120249956c8e4b603f92b8f15ed119f399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:7b:94:b8:bc:70:0b:19:bb:ac:e6:75:26:
                    49:95:95:2a:80:af:e7:f9:8f:56:82:e4:76:5f:4f:
                    b9:c5:49:f2:1c:93:7d:cf:71:31:45:1d:2b:7f:b9:
                    53:64:8d:fc:68:bb:de:83:eb:17:b0:d6:14:2b:40:
                    1e:05:0f:ef:9b:25:41:3e:0a:0b:04:e7:fc:96:f2:
                    d2:ca:5b:6e:21:87:34:dd:43:0f:22:f4:54:0d:cc:
                    dd:16:13:31:ae:ae:10:44:39:ee:06:6f:0e:cf:e1:
                    57:06:9b:c6:22:f4:89:93:e6:6e:ab:7a:c8:c6:0e:
                    a6:3c:a1:61:ee:81:14:2e:10:0e:f6:45:b7:34:70:
                    48:9f:8c:25:2b:8b:e0:cc:d3:2b:33:40:6b:f9:a8:
                    f2:a1:2d:b3:98:d4:e5:47:26:66:c0:5c:71:5c:f5:
                    97:52:79:2d:da:2c:a0:07:bb:64:d9:61:d8:e1:d6:
                    14:57:2f:dd:e1:b3:31:e5:00:51:d4:10:6b:a9:f1:
                    14:bb:30:be:b3:4c:c1:91:ce:a9:df:c9:ca:4c:f2:
                    8a:56:18:00:3b:a9:39:37:dc:cc:7d:28:2a:52:01:
                    06:a3:e2:0b:8e:1c:af:22:e8:d9:c2:10:93:37:9e:
                    14:0a:1f:f4:a9:35:14:59:5f:8d:e0:c6:d7:9f:e1:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F3:AD:12:02:49:95:6C:8E:4B:60:3F:92:B8:F1:5E:D1:19:F3:99
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:01:50:ad:56:83:13:ff:f4:b1:98:75:e3:cd:09:11:a2:
         e8:10:f6:ca:41:04:e3:35:32:a2:95:62:7f:47:1d:4a:c7:98:
         c4:3f:d6:b1:d1:33:d9:b3:0d:af:11:a1:90:e6:d6:1b:52:0a:
         4e:d2:d0:81:6b:54:cd:26:5e:07:c5:35:e1:8b:ce:97:b5:5a:
         2e:38:b9:15:bc:dc:cd:32:ba:01:3b:64:78:6a:eb:38:5b:ac:
         39:ce:c4:1a:7f:5b:83:02:00:c5:b0:29:4c:be:68:fc:51:05:
         75:ab:b3:50:77:58:b9:18:18:b2:55:0e:a2:3d:10:8e:24:8a:
         8c:b8:ea:17:6f:cd:b3:69:96:17:c8:8c:71:43:82:5b:79:77:
         86:ba:c2:3b:43:88:bf:8d:49:e8:45:09:3b:b5:26:31:f7:e0:
         e0:0a:23:81:1f:cc:01:fd:9e:eb:16:ff:2e:2a:81:17:bb:f1:
         54:dd:db:d9:7f:d3:86:b2:2a:8f:97:b4:0d:2d:60:ca:62:c5:
         69:45:2f:10:18:e8:a5:ac:bb:01:47:0f:2f:86:d8:0e:0c:2e:
         15:bd:ad:a5:50:8f:30:9a:20:bf:15:15:b2:31:b4:ef:0d:fb:
         c7:4f:08:39:26:66:bf:22:43:57:b2:e4:4b:eb:66:a4:dd:5a:
         87:f2:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:43:32 2024 by rpki-client on console-fra.rpki-client.org