Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          uAvM8sQEaPUC6k1WeiC6SirRNxgesZjPsMtd6RP/oHs=
Subject key identifier:   E1:25:CA:2D:40:39:F2:E3:73:41:20:94:A0:25:58:9D:90:5A:A6:85
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       018F8823F829E1205DCFA26BDD9449CD29ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          0FC8
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: JcSlolzDnDAw14D_x3HZfugGijk.roa (hash: Z6Cv53qA0QZFsYTSysrlYnk9rmHC3fW7tibJKN2kKvc=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: +h/6ISvSCRRxQhYgR119bWnzpHCXy7tuJe5FWfE6AJg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f8:29:e1:20:5d:cf:a2:6b:dd:94:49:cd:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=e125ca2d4039f2e373412094a025589d905aa685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:d5:5f:00:52:5b:a0:8b:fc:ef:f4:30:43:
                    c6:89:da:d8:5b:c5:cc:2d:f2:56:96:00:79:d0:03:
                    65:35:af:fd:23:8d:e5:21:aa:90:5d:1b:3d:55:91:
                    9a:6c:39:60:71:db:49:64:5d:88:38:1d:66:81:41:
                    4b:de:7e:e8:15:1c:c6:de:a5:06:78:2f:1c:1c:08:
                    a2:fd:92:3a:be:f1:e1:4b:1b:21:bc:a7:86:cb:04:
                    35:de:e2:9f:d2:48:c1:dc:34:72:74:51:19:31:5e:
                    20:a4:bf:61:9a:80:7c:2c:be:17:c1:cd:d9:a3:2b:
                    41:9e:f8:59:3b:d5:97:ea:ab:2a:03:24:f1:87:75:
                    05:b4:ea:d2:80:ab:f0:e8:76:b5:e9:ce:a8:d1:33:
                    23:c3:6d:a6:6e:79:40:62:fa:02:f2:07:b3:da:44:
                    13:d2:78:e1:a2:24:fb:f6:c4:a1:e0:f7:ae:a0:2b:
                    f4:59:d7:96:e6:44:95:1c:57:6f:05:b4:d7:f7:a9:
                    90:d3:3d:65:3e:45:d4:6b:ae:d4:a9:c8:35:27:c3:
                    24:63:e9:4f:63:af:fa:3e:8d:6d:cd:14:32:0d:15:
                    0c:b3:91:74:ec:1b:65:64:00:c9:46:5f:06:03:c9:
                    10:b1:f3:00:de:81:03:ec:77:f6:f8:73:59:78:4a:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:CA:2D:40:39:F2:E3:73:41:20:94:A0:25:58:9D:90:5A:A6:85
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:8f:24:f1:08:1a:28:73:9c:5b:18:af:e2:7a:e8:f9:53:
         3d:1b:b7:8a:d0:2d:24:59:a7:1c:ef:25:51:a7:31:be:a8:33:
         e2:bf:73:29:e9:32:d6:d7:ba:46:81:13:09:e2:c6:61:49:c9:
         4c:b7:c1:a7:e3:25:d8:13:2f:c8:81:46:34:f5:58:6e:d4:7f:
         b3:3c:27:b9:f5:c0:31:cf:b4:72:a0:89:82:be:1b:e5:2c:8d:
         ac:97:4c:fd:22:21:d5:f6:04:97:17:4b:1e:27:06:27:f7:63:
         26:72:d0:a8:65:58:6c:6a:21:53:d4:6a:c7:97:76:bf:08:a3:
         9d:5f:26:8a:35:3f:41:d9:6f:84:d7:80:7c:34:2d:16:cf:c5:
         1c:d3:a8:94:11:66:23:ea:50:2d:5f:8e:d5:48:b3:c2:e8:7b:
         d5:50:db:fd:72:28:5f:99:d4:0a:93:62:f3:c6:ce:45:65:c6:
         b1:8f:b3:03:1b:ca:ca:4b:3e:f3:bb:8d:0d:ba:09:55:c2:16:
         83:ca:b5:18:53:ab:e8:17:b8:cd:85:42:70:36:28:59:8c:54:
         9f:fe:c1:62:33:b6:6c:4d:a2:00:94:7a:35:03:bd:00:14:75:
         59:e1:6c:61:47:09:1b:a4:8a:15:be:26:62:83:0d:83:a9:7a:
         74:40:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:04 2024 by rpki-client on console-fra.rpki-client.org