Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          JqiBsXqnljtyFB59rhf0P9+hZsjb062FO65YWyhZYl0=
Subject key identifier:   39:7F:86:D7:58:F6:2F:20:7E:11:11:7D:34:6B:A0:51:0F:AA:E6:2F
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       018F2C8576491C5516687AA32A1318F40870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          07C1
Signing time:             Tue 30 Apr 2024 01:01:35 +0000
Manifest this update:     Tue 30 Apr 2024 01:01:35 +0000
Manifest next update:     Wed 01 May 2024 01:01:35 +0000
Files and hashes:         1: 1nj4HGwg5MuYEbOWVgTH5X2QDQA.roa (hash: qftarU6yG2nJ3oAJOkWVrCfg4dwpOkoLKwJnQuLLSiY=)
                          2: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: o5ilfLhCuFSvsGqH5cdprgmrUPsDWZcGp5sk12sPndA=)
                          3: TAjHyQW0K7AVEPxjSwPGBFLVZyo.roa (hash: QR+SqU31+u/QsNyEE0ZlBd2nwtEIdtntoWdL37RPx2c=)
                          4: Z5X1p3a4s0ndZCuSM-4yVDfeUhQ.roa (hash: zoOS0mMzuF4j4DqnLeQsCOmgdlXtPzN9Tnv1spdp8t8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2c:85:76:49:1c:55:16:68:7a:a3:2a:13:18:f4:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Apr 30 01:01:35 2024 GMT
            Not After : May  1 01:01:35 2024 GMT
        Subject: CN=397f86d758f62f207e11117d346ba0510faae62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:51:16:90:f6:af:2e:95:7b:c5:47:e5:3a:
                    26:84:8d:3d:35:24:a3:cb:c9:13:17:fa:f4:56:6b:
                    17:8d:48:21:c2:33:ae:8e:73:26:e3:26:bc:a4:0c:
                    31:02:9f:ed:d4:db:0c:5a:1e:62:1f:ed:17:de:8c:
                    89:db:51:b4:98:0c:34:c3:3a:0d:ba:53:e8:7c:aa:
                    03:05:a4:09:f7:21:1f:64:85:e0:15:2d:d1:19:17:
                    65:b7:9b:f9:0c:10:65:9a:80:68:1b:a6:82:f0:0e:
                    1e:93:b0:b7:2a:a7:f4:cc:0b:2a:f6:0b:df:4f:ff:
                    56:2c:8c:0a:8a:76:6d:4e:b1:04:ad:a2:82:3f:91:
                    12:da:93:ad:ca:5c:e0:cc:12:17:fb:2b:a8:12:f0:
                    69:04:a5:25:95:ed:53:1a:87:b5:6a:e1:fc:b0:42:
                    3f:90:60:88:a5:04:db:e1:a0:bc:32:13:5d:44:73:
                    ac:1a:9d:b2:57:9c:ca:c8:56:fb:ab:b8:32:ff:a7:
                    96:0f:1d:1d:95:66:b2:be:fd:00:94:e8:cc:8b:6f:
                    6e:8e:a7:88:6c:f7:5d:50:12:dc:ed:73:7c:f9:7c:
                    c0:41:2b:e8:4a:05:13:a9:f0:cf:d4:ff:57:87:1c:
                    84:20:b2:3e:31:74:bd:cf:f4:0b:68:77:1a:c3:5c:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:86:D7:58:F6:2F:20:7E:11:11:7D:34:6B:A0:51:0F:AA:E6:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:41:ac:92:65:4f:87:7e:b6:65:89:09:ff:2a:ca:89:39:41:
         6d:d0:c1:ca:c2:59:4f:26:d7:1b:fb:e6:c2:14:08:dc:b2:4f:
         81:f4:c1:d9:ca:91:e0:24:6a:cc:ca:57:ed:68:2e:41:d6:bd:
         8a:5f:66:dc:e1:9e:85:ae:2b:4f:32:25:f1:de:ce:2c:ac:23:
         7c:62:26:65:13:29:51:0a:f6:f1:79:e1:ce:a3:99:a1:9b:15:
         fe:1a:58:e8:65:6c:a5:43:ef:af:f5:c1:ca:6d:f7:0c:a2:41:
         8e:1e:6d:39:8f:b8:11:b7:51:e9:7b:a7:68:5f:6b:c4:58:15:
         c3:1e:11:f5:21:ce:77:41:79:f9:9b:c4:73:37:51:bb:01:28:
         b2:a2:ad:e5:5c:49:c9:ac:5f:c2:11:31:56:36:b9:e2:ab:bb:
         f1:b9:81:ac:73:1d:0a:93:d7:2d:28:52:fc:35:1b:9b:b0:12:
         70:57:4e:c4:56:9b:8a:5f:cb:08:6d:8e:fb:53:62:d5:8d:83:
         2c:93:95:2c:f6:3b:ed:03:57:f9:b6:e7:f0:8c:68:2a:2e:1f:
         11:63:a9:3e:3b:9f:a2:cf:e4:57:7b:6d:4e:f5:b5:a5:8b:ae:
         04:77:49:04:65:55:d7:15:9e:6b:ea:55:3d:4f:38:b0:34:4d:
         7a:da:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:37:35 2024 by rpki-client on console-fra.rpki-client.org