Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File:                     pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier:          3R6kmcdqHdrpKELzabmVskkmjkRW2j/9PxxLE2JnpXY=
Subject key identifier:   D7:A1:3B:D0:1E:AB:07:C6:60:07:70:DE:02:00:C9:4D:7E:73:F9:52
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer:       /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial:       018F87488044562D25BA72296CBC1F06AD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number:          0C02
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: gSGg9qtewK0fp84hWq1R2p7K-fs.roa (hash: nUyUdBYDygkUgrfQF+bQKRlZ3pErg5Eg+VQXgaHAOLU=)
                          2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: MDtZt/+shxTmlomUcZe2lZD8X6jo0vvE5sMXVXMLfrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:80:44:56:2d:25:ba:72:29:6c:bc:1f:06:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=d7a13bd01eab07c6600770de0200c94d7e73f952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:6b:e0:2e:d7:c8:51:cf:e3:f9:07:93:3f:
                    5d:72:a1:bd:30:fc:48:e6:66:2f:15:d1:2f:0e:b3:
                    cf:b4:7d:19:82:dd:57:af:e5:42:bf:0d:5a:4e:3f:
                    79:00:71:8a:05:40:84:c6:f9:c1:49:4c:1e:9d:23:
                    e0:61:2a:2e:83:c4:d9:de:9e:85:ac:66:e1:19:d4:
                    60:e2:87:68:b9:16:4d:94:42:2b:16:17:d3:18:b9:
                    00:a6:f5:42:43:ae:ac:af:64:16:56:3c:a0:c0:12:
                    08:c2:96:ed:c5:a5:e2:37:f2:5a:c2:be:b4:d9:5b:
                    91:4d:35:c5:5b:6c:2e:47:1e:a7:f6:9f:21:12:50:
                    60:e2:fe:85:47:a0:d2:49:ba:c0:15:56:f1:a6:d3:
                    83:d5:55:82:e0:50:fb:51:56:d0:ef:87:3c:42:95:
                    1d:ec:e0:66:9b:17:c0:a4:ff:18:fa:30:81:9c:2d:
                    ab:55:bc:70:ce:00:20:ee:59:88:8d:3c:b2:f0:d5:
                    41:cc:87:b1:bc:84:de:e3:c0:17:ea:49:6f:85:ec:
                    b0:4c:aa:02:ea:f1:b2:de:71:7d:d9:ca:68:82:c8:
                    d1:48:f4:9d:9c:4a:27:81:e8:9f:5a:d6:1a:9f:26:
                    94:b2:1d:ea:50:a8:ec:7d:bf:5e:7c:75:92:f3:e1:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:3B:D0:1E:AB:07:C6:60:07:70:DE:02:00:C9:4D:7E:73:F9:52
            X509v3 Authority Key Identifier:
                keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:cc:13:19:18:41:ae:0e:e6:23:49:6d:e6:60:58:53:a6:
         de:cc:2d:f2:fb:cd:ad:eb:87:57:7e:98:63:51:49:87:a5:f3:
         b2:55:54:a7:b1:0c:49:4e:67:db:27:04:a9:1c:fc:70:d8:81:
         78:15:1e:ec:52:43:3b:1e:36:57:66:48:45:19:4e:fb:a1:36:
         9b:48:eb:04:2a:4a:1c:fb:5d:51:09:55:ea:7f:d5:5c:0e:a0:
         74:c1:3a:33:b5:64:73:76:2f:2a:16:4e:3f:25:b7:08:23:ef:
         50:b2:33:62:17:cd:10:0b:5b:60:47:ca:11:27:27:62:ae:7d:
         93:dd:e8:8a:01:1a:99:47:bc:2d:bb:aa:da:f5:20:8b:73:92:
         2e:cb:19:ee:4d:ef:47:6f:37:1d:bf:aa:38:42:d4:79:d1:32:
         d6:80:50:4d:ae:ac:f6:77:d6:83:36:f5:77:74:63:50:e1:fb:
         8a:ed:7f:ad:e5:98:70:b2:d2:72:f1:45:dd:2c:45:db:a4:e3:
         0c:11:dc:64:9f:2d:15:4c:f4:65:90:52:5b:24:f6:9f:e8:b5:
         bb:3b:37:cb:19:19:07:89:37:14:53:86:b5:57:83:b0:bb:d6:
         88:71:16:a8:9a:fc:d8:6f:99:c1:0d:64:21:51:36:51:82:be:
         9e:4d:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:11 2024 by rpki-client on console-ams.rpki-client.org