Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File:                     _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier:          +e8Fv+kYuoxb/DVd1RsxQyubJ7yShBmOKaKKmyhGsJk=
Subject key identifier:   78:07:E9:DA:59:CF:0E:0A:20:8B:DF:68:95:62:55:3E:CE:D8:A3:43
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer:       /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial:       018F8635DD0596771B389CA94E4A848E710F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 11:00:27 +0000
Manifest this update:     Fri 17 May 2024 11:00:27 +0000
Manifest next update:     Sat 18 May 2024 11:00:27 +0000
Files and hashes:         1: Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa (hash: PN+83qFZFe92WADNYTMyioPjaLzaD+tY+B3dC6HqQ0c=)
                          2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: EG8zRBkojrzWTt/d/TuHUiMab5Phpg0yRSg24kc94D8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:dd:05:96:77:1b:38:9c:a9:4e:4a:84:8e:71:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
        Validity
            Not Before: May 17 11:00:27 2024 GMT
            Not After : May 18 11:00:27 2024 GMT
        Subject: CN=7807e9da59cf0e0a208bdf689562553eced8a343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:31:42:76:6b:a7:77:a3:c4:a9:48:48:97:
                    85:47:dd:76:a6:75:53:72:f7:90:5d:b2:80:b8:9e:
                    86:43:91:11:d6:4d:af:24:04:6f:64:cb:d8:43:08:
                    36:70:44:3e:e3:4c:ea:68:ab:2a:9a:15:b8:57:f7:
                    00:0b:75:a4:41:0d:7c:78:bd:ff:19:73:53:c1:b1:
                    f9:c3:f6:e7:3d:aa:7b:fd:e0:78:43:23:76:71:dc:
                    bc:2c:41:34:e1:3e:32:ff:be:ab:a7:f5:6d:12:a7:
                    4d:2b:cf:5a:8f:4b:52:0b:c3:c7:26:40:a3:1e:9d:
                    47:61:6a:26:32:b6:98:f1:aa:16:f4:4b:ee:60:99:
                    b8:76:36:06:8d:14:23:8c:79:a2:51:35:f3:ea:e3:
                    70:8a:1e:98:cc:e1:c4:a7:a1:14:03:3b:58:6d:b2:
                    06:76:d4:99:d9:67:64:08:3c:36:db:43:74:84:22:
                    ac:f6:a2:77:6d:e6:08:cc:69:f5:d2:5d:13:df:02:
                    0c:e7:39:9c:1b:47:e2:10:18:06:d7:8a:12:0c:5c:
                    0b:ad:40:d7:7c:6b:f0:43:1a:20:19:0d:a0:86:b5:
                    32:8c:39:4c:9d:28:ba:9c:37:a1:06:08:28:35:7b:
                    54:89:5a:8a:c3:0f:20:9c:96:8b:fe:8e:3f:f9:49:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:E9:DA:59:CF:0E:0A:20:8B:DF:68:95:62:55:3E:CE:D8:A3:43
            X509v3 Authority Key Identifier:
                keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:db:ac:f6:c5:c8:fa:37:f6:eb:39:17:bb:b2:30:96:82:
         41:b2:88:02:5a:b9:c0:83:fa:8b:a4:0a:6b:1c:e7:ea:6f:75:
         2f:10:5d:10:49:d5:7c:d4:42:09:2b:fb:3e:dc:d0:ee:80:71:
         a9:1c:02:5c:3e:2f:ab:b3:80:3a:8b:61:07:4b:e9:a9:90:df:
         93:df:29:bc:d8:69:c1:d4:bc:41:23:f2:1b:a0:23:80:e4:c1:
         a5:41:88:2d:c1:41:f0:5f:c0:23:6b:a1:c4:1a:66:e8:a6:46:
         9e:bf:82:6d:d5:81:e3:98:06:26:19:b6:fe:b5:28:c7:46:5b:
         11:bc:21:83:ba:dd:93:0e:70:ed:6b:1b:47:2a:5c:9d:af:bb:
         68:04:0d:77:5f:dd:bd:9a:32:6f:67:07:d7:28:91:1b:48:c8:
         b8:30:22:9c:49:93:05:03:48:03:63:8e:c3:fc:7b:43:c4:54:
         71:43:a5:63:7e:75:eb:33:68:60:07:25:d1:19:d4:2e:0e:af:
         b1:5d:61:02:ee:06:27:16:33:07:4d:bd:ac:e2:2b:98:1d:33:
         ea:cc:27:61:25:4b:a5:1f:8c:b9:b5:35:53:02:f1:09:99:87:
         fe:e8:b0:f5:87:f6:77:e5:eb:d4:7b:4d:af:6e:70:23:f7:32:
         d9:2b:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:24 2024 by rpki-client on console-fra.rpki-client.org