Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File:                     ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier:          vpcbj6ez3T211gPSEeS+icQZwPf37RYy36spYDh8ms0=
Subject key identifier:   D6:3A:8B:F4:EF:2A:60:06:B3:AE:12:D0:D3:80:2A:C8:7D:30:59:10
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer:       /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial:       018F885AFD57ED299205DC90DB24C8C99D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number:          020B
Signing time:             Fri 17 May 2024 21:00:15 +0000
Manifest this update:     Fri 17 May 2024 21:00:15 +0000
Manifest next update:     Sat 18 May 2024 21:00:15 +0000
Files and hashes:         1: _oFgKnKG6rlkEnhDwrnF72tENn4.roa (hash: GUmpKx2ceeL1MK1GSocjlwFbL9I6RK7GVkcF084YvxU=)
                          2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: yTM5BzAihXi6uxCr959I35inl60zfciTRTfcNF4sWWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:fd:57:ed:29:92:05:dc:90:db:24:c8:c9:9d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
        Validity
            Not Before: May 17 21:00:15 2024 GMT
            Not After : May 18 21:00:15 2024 GMT
        Subject: CN=d63a8bf4ef2a6006b3ae12d0d3802ac87d305910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:0d:54:e0:88:5b:34:98:ad:a7:2f:35:34:
                    e0:1f:cd:9e:66:a7:c7:2e:37:45:0f:fb:6e:c6:88:
                    2f:cb:01:91:50:5d:8e:db:c7:b4:1a:86:3e:22:11:
                    7f:76:37:eb:ca:da:48:0d:57:f7:66:fa:ae:31:03:
                    01:8d:bc:2b:44:1c:1d:91:2c:9f:95:97:6e:05:17:
                    7b:93:10:4a:d2:0c:ab:16:6e:e2:4c:05:fa:fc:c7:
                    b8:73:83:f0:19:40:f7:0f:93:73:32:89:34:d3:13:
                    e2:85:98:35:1e:78:ea:3a:a5:8d:75:04:2e:31:a3:
                    67:57:c9:a9:df:de:4c:6b:7f:61:de:40:67:b4:6b:
                    10:45:b0:20:ac:e5:80:7a:f3:35:69:ea:a3:c1:4c:
                    0d:f6:63:d5:09:6f:7d:13:3a:66:d3:c2:cc:43:89:
                    2b:3e:4c:85:db:3f:69:50:28:3d:b2:aa:b0:e9:33:
                    37:c8:1d:88:5d:e2:82:f7:27:9b:d9:76:33:24:d5:
                    e3:18:c4:63:80:e6:1a:8e:4d:9e:b3:97:fa:10:8e:
                    33:1a:5f:c9:84:f9:e1:38:0e:1d:db:d8:7c:bf:32:
                    9a:85:46:ce:1a:9e:e6:9d:0a:58:77:1f:88:8f:94:
                    c8:7d:ef:22:b9:1f:69:54:20:d3:14:d2:8b:30:77:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:8B:F4:EF:2A:60:06:B3:AE:12:D0:D3:80:2A:C8:7D:30:59:10
            X509v3 Authority Key Identifier:
                keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:c0:ad:e8:32:ad:25:e0:35:d5:fd:bf:99:77:84:24:6f:
         ca:68:4d:91:14:2b:f1:a2:5d:5e:ad:6f:61:5b:a5:d5:ef:2b:
         6d:68:f1:7a:eb:1f:7a:1e:84:26:f1:80:e2:ba:3d:15:a5:20:
         a5:8a:5a:88:97:39:73:4b:83:ca:41:60:23:60:3e:30:ee:40:
         72:03:f2:62:91:01:17:71:30:98:cc:a8:2a:a2:6c:52:30:70:
         8b:7b:63:56:97:f4:87:1c:70:c1:36:b1:99:fd:a2:c2:83:d1:
         e8:c7:77:22:7b:19:89:fd:c1:72:7b:59:82:e6:e0:63:0c:27:
         33:2b:72:7a:dd:8b:13:47:3f:e1:e7:5d:94:38:bc:d2:a2:fd:
         a4:df:60:c1:e7:eb:39:a3:56:17:d8:40:72:ea:10:de:df:3a:
         4f:21:3e:31:40:33:e2:0e:6b:d4:d8:a2:c1:e9:1f:df:e8:f2:
         e3:bd:45:32:8b:fe:6c:90:5c:fc:23:f1:06:77:9b:b8:45:0c:
         be:fa:f7:a5:8f:fd:06:43:cf:46:1b:0c:e2:66:f2:5f:c0:cd:
         ae:54:2c:b8:86:d4:38:cb:de:af:7d:b2:32:55:31:47:f5:17:
         0a:5a:85:7f:ae:19:5d:db:f2:5b:0e:07:a8:10:0a:10:d1:bd:
         9e:35:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:04:54 2024 by rpki-client on console-ams.rpki-client.org