Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File:                     MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier:          z/9Q+dG4F93RZuDMjYFnOPJaf0SiCK6s1w14pFZ68tM=
Subject key identifier:   7F:CD:D1:57:EF:6C:1F:6B:3E:51:04:6D:F7:97:E7:27:67:BB:BB:0E
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer:       /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial:       018F7C209E33B5DC17A7F7925BA5667D27FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number:          06FB
Signing time:             Wed 15 May 2024 12:01:03 +0000
Manifest this update:     Wed 15 May 2024 12:01:03 +0000
Manifest next update:     Thu 16 May 2024 12:01:03 +0000
Files and hashes:         1: Fi7SZcUGu06SKRZ19fcZSIsOmDI.roa (hash: VdyN5w5MVqNkqDOVXu1lj3umjOqN33Ra5x47OFocpXA=)
                          2: HDG7qNHEGWTSrQjWLeGZzCtQRFg.roa (hash: Dbdj+iLa6BznFabVJpoQj+HP21ak9l2CkTxCr8pJ5S4=)
                          3: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: Lh6MKJkeCJgi1u+Cn6W4v/XA3WhdC8c+NIUlfbQ3BfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:20:9e:33:b5:dc:17:a7:f7:92:5b:a5:66:7d:27:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
        Validity
            Not Before: May 15 12:01:03 2024 GMT
            Not After : May 16 12:01:03 2024 GMT
        Subject: CN=7fcdd157ef6c1f6b3e51046df797e72767bbbb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:fe:10:7d:b0:73:24:2b:e3:56:37:21:5b:
                    15:9c:5b:ac:07:cd:be:8a:97:f4:ad:c2:95:c9:a7:
                    af:fb:ca:db:b0:51:54:c0:c5:b4:0f:a8:a9:18:97:
                    f4:42:ef:68:05:f5:d3:3c:6e:26:3d:bd:6d:a2:21:
                    7c:5f:61:67:e9:0c:fd:25:81:b5:fa:48:bb:7f:14:
                    cc:1d:34:9f:d5:c0:1d:71:0c:29:66:42:df:42:35:
                    35:44:82:65:cd:09:56:4e:9e:c9:f0:91:f0:9f:6f:
                    6f:31:d5:fd:5f:16:23:87:9b:11:6e:22:fa:0e:cb:
                    9b:ac:d5:df:2b:ae:76:a4:f8:ad:3f:70:a5:35:f4:
                    92:cb:57:07:68:da:27:98:a8:12:3c:77:a6:2e:ec:
                    94:9c:98:16:49:50:05:be:07:1a:9a:33:19:7e:de:
                    66:5b:c9:d4:c7:a4:0d:0e:51:33:c3:6a:d1:fa:50:
                    1f:0b:62:87:82:d2:59:52:2d:2f:da:e4:eb:53:92:
                    32:4a:21:62:98:7b:3d:72:ed:27:c6:02:6b:2d:da:
                    1c:7e:d9:23:f9:48:ed:75:bb:b6:08:91:e2:f4:cc:
                    15:6a:b6:14:9c:f4:5b:d3:77:88:4f:30:d4:97:cc:
                    99:71:94:2f:fb:b2:d6:04:05:a6:06:69:14:b7:c3:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:D1:57:EF:6C:1F:6B:3E:51:04:6D:F7:97:E7:27:67:BB:BB:0E
            X509v3 Authority Key Identifier:
                keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:90:ef:2a:f1:f0:5b:2e:a9:c7:3c:64:e0:c4:57:71:48:
         47:5d:6c:81:5b:ae:fb:91:f8:95:30:5d:4d:ee:89:3f:c6:f0:
         a6:cf:d2:76:e4:af:4c:1c:cb:44:9a:68:bf:c1:6c:b4:34:7e:
         57:2d:09:20:c0:49:3c:b5:b6:c7:71:b2:96:f9:eb:5f:68:2f:
         93:d6:2e:4c:41:df:fa:13:80:38:cc:9e:2c:4d:a8:00:1f:e5:
         dc:57:25:75:df:6d:c9:c4:bc:82:ce:3b:6f:01:dc:3b:78:f0:
         a4:40:0f:d9:21:fe:68:1c:d0:03:00:b0:d3:7e:28:33:18:29:
         8d:6d:0b:2f:5f:c8:ed:e6:78:3a:ad:04:15:86:de:ee:9a:b7:
         2f:ba:cc:3d:80:8e:27:97:53:ab:d6:a2:80:95:dd:16:35:a6:
         af:98:20:72:46:e5:f5:68:53:d6:55:c3:65:61:5d:b0:25:22:
         10:ae:19:29:62:d2:14:d0:e2:76:08:75:25:36:42:77:e1:58:
         8e:1b:5a:18:ae:58:5b:3e:5b:fb:5a:d7:bf:4b:0e:00:70:c4:
         39:ca:a5:3c:7c:98:65:0a:59:2c:56:81:58:6b:df:1f:b9:15:
         20:75:e1:19:55:77:81:ad:fa:93:ba:20:61:a4:c8:e8:3e:2c:
         2f:24:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:15:46 2024 by rpki-client on console-ams.rpki-client.org