Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File:                     fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier:          egl6uw+TlXSkop88RPZAJUzKOXpapZY6mjQFfUNgw0Q=
Subject key identifier:   C8:89:FD:B7:5B:00:05:85:AD:B3:A3:56:2E:1B:C2:17:22:FE:FA:B6
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer:       /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial:       018F87B6A70D3318ECC55817431E1DE607F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number:          06AD
Signing time:             Fri 17 May 2024 18:00:45 +0000
Manifest this update:     Fri 17 May 2024 18:00:45 +0000
Manifest next update:     Sat 18 May 2024 18:00:45 +0000
Files and hashes:         1: IAfBziMaU66_Xb5SBotkp2ndqKk.roa (hash: wntJhwdcYjuQyr6ftd3Emi4bK8ywHMy1zTR/403FOz0=)
                          2: eNA9fHcxBVU3GmdkGqIC-7BFGpw.roa (hash: JGHmRK914JnyPTz8POCgJPQ0GaykO6Q37VyQ8ft9QwQ=)
                          3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: d98p2nz0Yg/KsW7rPYw2FOqquPq4jwVczJQqfEDBulY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a7:0d:33:18:ec:c5:58:17:43:1e:1d:e6:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
        Validity
            Not Before: May 17 18:00:45 2024 GMT
            Not After : May 18 18:00:45 2024 GMT
        Subject: CN=c889fdb75b000585adb3a3562e1bc21722fefab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:b9:c0:72:42:c5:00:7d:7f:56:ab:8a:33:
                    9c:23:d9:d1:34:ae:26:fc:81:61:ad:02:ee:b8:fc:
                    f6:e8:0e:21:5c:50:df:cc:04:85:56:c0:33:cc:80:
                    94:23:db:f2:eb:23:85:46:9f:8c:67:a8:8a:f0:dd:
                    18:93:d4:31:4d:9a:91:a9:55:b8:d7:3c:ee:ed:5f:
                    90:33:02:95:fc:61:08:55:e9:c1:f4:fa:a6:d8:e3:
                    7e:ff:c6:53:ae:a6:0e:7e:09:cd:f8:8a:2c:1e:83:
                    a7:dc:e4:01:ef:22:10:62:fc:65:2c:93:67:0d:bf:
                    ce:7a:c8:b7:8c:81:82:a3:9e:a4:8e:3d:9e:ba:7a:
                    be:9c:8e:11:e3:cc:42:94:3a:1c:57:8a:34:de:b1:
                    f6:fe:e4:a5:62:9c:a7:bd:c4:68:7b:f2:5f:a6:d8:
                    a9:29:27:a5:93:a7:d6:30:3f:6d:87:80:11:be:b7:
                    cf:dd:34:d3:f3:d2:c2:fc:96:c7:28:3a:4d:fe:a1:
                    58:c3:4a:d5:4a:d4:11:ac:32:aa:c4:14:ee:61:1f:
                    5a:3b:9e:bd:8e:16:03:6d:7f:11:84:2e:d8:ca:e3:
                    ec:3f:d0:b7:95:34:fb:91:1e:b1:9e:6b:b2:d2:e6:
                    d6:ea:20:3c:ce:5d:fb:dd:3b:60:c5:61:4d:4c:a7:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:89:FD:B7:5B:00:05:85:AD:B3:A3:56:2E:1B:C2:17:22:FE:FA:B6
            X509v3 Authority Key Identifier:
                keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:45:a8:e2:61:67:fb:b1:2b:72:35:e5:46:55:f6:26:9d:b0:
         af:9d:16:90:c2:0c:5c:d1:a7:fa:07:c7:2f:17:12:0d:b1:68:
         12:01:72:a5:3f:24:a8:8e:fd:77:91:3b:f2:79:7b:74:f3:5f:
         21:f3:ea:b7:ca:05:38:18:33:f3:68:54:86:27:2e:d2:61:7b:
         87:da:11:1e:50:f7:a2:a3:db:d2:f3:4c:b5:b3:d3:ea:9d:17:
         f0:25:57:24:55:24:29:31:b6:b5:6e:a7:65:10:ac:38:e0:4b:
         b8:7d:bb:6c:99:7b:21:43:d0:8b:ba:c5:07:43:3a:86:93:37:
         0b:48:b2:c9:37:3a:02:2a:ca:d9:e9:d2:6e:ee:16:81:78:df:
         61:a7:7d:2d:fe:2a:f8:b6:8d:31:33:0d:b2:86:b0:68:59:f2:
         1c:28:4f:e8:5a:e5:90:1f:c2:fa:c0:05:d2:be:04:ea:2c:c7:
         76:85:91:ca:1e:2d:ff:eb:46:f0:d2:c3:18:f3:04:38:b6:3b:
         e1:e4:15:86:04:15:1d:9e:4a:85:1e:cb:33:fb:5b:f0:f3:b0:
         4e:0a:02:ba:61:91:03:8c:0b:a5:d3:aa:75:da:f8:9a:6c:66:
         e0:98:e8:59:f0:e2:2d:5b:5e:32:a9:2b:7d:2f:c0:d0:06:d6:
         94:d8:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:31 2024 by rpki-client on console-fra.rpki-client.org