Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
File:                     U7QvfyECVOpHKsdVoWRyxS78KpI.mft (raw, json)
Hash identifier:          H0KFBi4v9KYqxu8V0ywjlxLjuQ6ZxeG36mHL+K1GKCY=
Subject key identifier:   54:86:D1:6C:28:32:13:1D:3B:98:B4:6F:A6:9C:52:18:6D:2A:A1:41
Authority key identifier: 53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
Certificate issuer:       /CN=53b42f7f210254ea472ac755a16472c52efc2a92
Certificate serial:       018F874AD35D12B13FB00037E9FD1974E776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: 5nojSlU8g5ZTCEasOlJv4zCaEcc.roa (hash: OpJecJRKf0rIVOI9CFBg+ENHn0r3XVLWkLtEiGssLfk=)
                          2: U7QvfyECVOpHKsdVoWRyxS78KpI.crl (hash: fpeZc/mLVBmfBCkvmWNOfLU3opa1OAjw42hPhwjKEN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d3:5d:12:b1:3f:b0:00:37:e9:fd:19:74:e7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b42f7f210254ea472ac755a16472c52efc2a92
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=5486d16c2832131d3b98b46fa69c52186d2aa141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:ba:84:78:da:a5:62:5e:dd:5f:7c:f0:e8:
                    cc:22:b9:87:f5:a6:05:d6:de:5c:ed:c9:03:6a:26:
                    95:70:b8:c2:1b:83:ba:25:5d:7c:59:27:74:f3:02:
                    af:8b:dc:71:d6:6e:b9:4c:70:13:59:3d:b0:25:f1:
                    eb:4c:36:ac:68:73:71:e2:53:be:66:4c:6e:21:ce:
                    5c:00:40:9e:9f:92:21:06:f2:ca:64:f5:9d:1a:3e:
                    e9:b6:23:73:b9:7c:30:b9:b7:d9:94:e9:d1:89:e0:
                    ba:8f:ff:5e:bf:69:d5:62:13:75:66:2a:b4:41:77:
                    e9:42:ef:d6:9f:a8:a6:41:95:b9:8c:60:11:78:fb:
                    df:cf:cb:cf:bc:06:ff:39:44:2d:f9:60:e4:d7:09:
                    dc:b2:f5:65:dc:41:d8:d9:ee:ba:8d:bf:fa:89:ba:
                    ef:42:0d:24:f5:b1:a9:dc:00:6d:dd:39:6f:ea:5c:
                    cf:de:ef:c9:20:ca:8f:19:b3:10:46:ad:40:66:d3:
                    57:de:fa:89:b1:86:ce:6c:34:3a:d7:5d:d5:0e:5f:
                    cf:ba:26:b0:b0:c3:24:f4:b4:12:17:48:b0:ee:78:
                    47:46:84:67:39:98:dd:f9:a3:40:95:ef:e9:eb:d1:
                    c3:8c:a9:7f:c0:9d:46:1b:28:13:36:37:53:f0:91:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:D1:6C:28:32:13:1D:3B:98:B4:6F:A6:9C:52:18:6D:2A:A1:41
            X509v3 Authority Key Identifier:
                keyid:53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:56:69:8b:2e:40:dc:be:d4:5b:6c:e8:6d:8b:be:86:be:
         a8:8b:19:be:ca:ad:d2:b4:e5:ce:89:80:59:ae:7d:d0:70:c9:
         a2:5b:e5:8a:e3:42:b8:ec:3f:4a:74:d1:29:e0:25:03:71:99:
         a2:92:ae:2d:2a:32:15:fe:40:d1:56:59:0b:35:d1:31:e6:8a:
         69:99:42:56:b2:08:32:38:82:22:29:a3:1e:6e:ba:71:80:d1:
         a5:98:de:f9:c5:b5:7e:b2:d6:25:95:74:00:54:6b:17:8d:3f:
         ae:35:1f:2c:d8:2a:c6:c2:3e:6e:a9:13:5c:6b:40:54:90:fe:
         35:46:ab:44:7c:1a:2f:66:37:40:c2:6c:20:c0:18:5c:fe:5e:
         a3:2b:c3:7f:9d:98:8d:5c:90:42:f2:1e:c5:42:9e:e0:00:31:
         88:34:05:ec:01:91:f8:8d:c5:25:6d:a0:a3:2a:d9:16:60:19:
         c1:59:23:ea:7c:a7:2c:9c:11:99:0d:a5:90:16:28:88:c6:71:
         1c:c9:83:67:7d:21:61:2c:4d:26:42:4b:7f:3c:fe:b3:09:9e:
         4e:1a:2b:88:75:01:ee:e5:db:b0:80:f1:03:1d:84:a6:fa:1f:
         56:c6:13:dd:ad:d1:10:0b:df:28:c8:88:92:36:87:ad:ec:25:
         01:36:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:47 2024 by rpki-client on console-fra.rpki-client.org