Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File:                     x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier:          LrastHML/a/xqCAUh9yAslYUBaxWyM/1c149FHpxf5U=
Subject key identifier:   A5:FB:EC:A9:61:BF:63:FD:4C:8E:DD:C0:F9:8D:B6:57:CF:DA:22:06
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer:       /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial:       018F874ACA1D1DD2BB7049FFD48DCC2B95AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number:          02C1
Signing time:             Fri 17 May 2024 16:02:56 +0000
Manifest this update:     Fri 17 May 2024 16:02:56 +0000
Manifest next update:     Sat 18 May 2024 16:02:56 +0000
Files and hashes:         1: m9COSkNEnhcaG7Ntn6mY8sI0eMQ.roa (hash: IVaCn1GyxeXya5hn+fN10DYDWdF0aOA3i7ia5M+j4eM=)
                          2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: i3HwpSk3ovHHHw6sPSDLUznvG8q1LuDZtmKuFmAxBHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ca:1d:1d:d2:bb:70:49:ff:d4:8d:cc:2b:95:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
        Validity
            Not Before: May 17 16:02:56 2024 GMT
            Not After : May 18 16:02:56 2024 GMT
        Subject: CN=a5fbeca961bf63fd4c8eddc0f98db657cfda2206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:a6:7c:04:98:b1:c0:12:1a:c9:8f:23:f8:
                    cb:7c:cb:97:12:42:80:cd:b5:41:be:76:8e:95:1f:
                    06:c7:58:7f:4b:76:eb:ae:4f:63:5b:74:c3:ad:24:
                    f1:fa:f1:ab:78:1e:d5:33:90:83:b0:e4:a0:52:60:
                    6b:26:0b:b5:2c:c4:d2:fa:2d:6d:da:f0:bb:0a:20:
                    e2:11:97:05:6d:e4:c3:65:7f:e3:05:38:bc:d2:bd:
                    b2:f6:1a:99:83:68:05:72:0a:4e:68:ac:fa:c9:4c:
                    80:e0:dc:af:e0:14:d0:b2:df:2b:ce:ce:8d:f1:bb:
                    2e:a6:cf:66:ed:60:e8:0a:4d:62:62:f4:15:c1:39:
                    66:54:5f:9b:f1:a4:78:b4:00:d3:a7:14:24:f5:b0:
                    4e:ca:f3:27:99:cc:91:94:ed:da:3d:72:57:02:13:
                    71:c4:bf:56:bc:1a:3c:34:40:fd:07:ce:f9:77:8f:
                    c1:9b:79:8a:62:4f:da:10:86:d3:53:2d:06:22:97:
                    4d:0c:89:22:4c:0d:e1:62:11:44:79:15:30:28:84:
                    b9:4c:57:ee:6e:37:06:cd:69:9f:37:54:da:86:88:
                    13:77:ae:dc:b3:ba:8c:f8:ce:0c:67:ac:2c:83:e9:
                    bb:ff:9c:c9:ea:05:a0:af:15:35:2f:41:7f:6f:7d:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:EC:A9:61:BF:63:FD:4C:8E:DD:C0:F9:8D:B6:57:CF:DA:22:06
            X509v3 Authority Key Identifier:
                keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:fc:65:43:02:30:61:5e:8e:d7:5a:2f:6b:70:07:91:62:
         ac:a8:61:cd:ae:7c:b4:f1:83:3c:d1:2c:19:e7:94:a0:02:cc:
         4d:36:51:60:1b:d1:a5:e3:b6:2e:42:71:be:d7:65:09:3d:24:
         4c:a3:03:de:42:a4:1c:41:94:ef:1c:96:df:0e:ba:d2:d1:8c:
         b5:a6:d2:c0:1b:09:48:d3:86:61:a3:e3:44:00:15:84:c4:ae:
         33:a3:90:d0:ac:93:74:6b:06:a3:49:83:ad:6e:db:d4:4b:d9:
         5c:a9:e4:6f:ff:6d:34:76:6e:b2:7d:17:84:80:d9:13:da:00:
         70:af:d3:0c:ae:c3:62:00:b5:6b:32:ff:88:32:dd:ad:a1:87:
         da:e5:f5:a9:68:77:77:57:05:56:4b:49:dd:64:23:9e:af:6b:
         61:c9:40:93:d4:ac:3b:cb:a1:a6:1d:9c:78:df:32:91:09:79:
         e1:46:87:d6:b3:94:03:87:d0:7d:bd:af:ea:94:d4:3e:e7:20:
         54:af:9c:a5:13:30:75:a2:29:10:7d:36:97:6c:21:e9:46:31:
         05:11:9b:b2:a1:9d:ac:ca:87:e0:d9:cb:b3:9d:dc:c5:8a:75:
         44:0f:5e:6b:8c:a5:de:1e:f4:f0:19:b2:46:91:ce:a8:ff:e2:
         a7:91:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:49 2024 by rpki-client on console-ams.rpki-client.org