Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File:                     Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier:          Hxw+pF2M8wXhUlmJPvc2NocmkwWza9OjQUPJbCd/s+Q=
Subject key identifier:   67:70:41:56:B6:33:DE:FB:8D:E8:06:BD:0E:A7:08:C7:70:5E:DB:55
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer:       /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial:       018F877F4411A85E5815FBE876C395A6ACEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number:          09FB
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: PHVz0JMy9vqbMOFqMv44CVn54q9x1qbWrbzaowuloJo=)
                          2: YOftns8u94o_VkfdH8gcSqfisBk.roa (hash: RPN/PH2EauGkep3Im0fIN9PII5Q3z9y4Ww/pMCatZfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:44:11:a8:5e:58:15:fb:e8:76:c3:95:a6:ac:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=67704156b633defb8de806bd0ea708c7705edb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:67:00:ae:79:e6:49:98:2c:bf:bd:5b:cd:
                    6f:54:b0:54:e9:ca:91:4f:0b:3a:91:69:ba:e9:1b:
                    d9:79:cc:19:f5:91:f4:b5:f5:1d:8d:3f:ed:2c:86:
                    2e:aa:42:44:ae:c9:fa:43:9e:c1:c6:e7:61:54:fb:
                    30:6a:23:af:d1:6e:06:52:5c:96:ed:bf:9c:77:b7:
                    73:d3:4a:75:f2:fb:ba:a0:8f:00:ab:99:d3:93:d5:
                    d0:3c:c2:f3:37:6f:73:43:7b:5d:4c:bf:82:05:37:
                    33:d8:97:1c:04:7f:8c:af:40:d9:f8:7d:f1:9e:c5:
                    b4:c8:69:2d:1a:61:10:fc:a8:28:e8:2b:9b:84:90:
                    02:06:10:2f:e2:17:0b:b0:d4:44:cc:c3:f2:17:56:
                    9d:01:94:25:02:23:bd:d1:ca:bc:19:87:6d:f0:0e:
                    81:7e:36:3c:36:6a:cb:11:92:73:df:7c:f4:5d:23:
                    b0:44:a9:ec:d8:50:c6:a4:58:f7:8e:c7:5b:89:a8:
                    8e:f4:0c:19:d8:06:b1:f3:91:37:81:83:4e:d9:1e:
                    9e:94:59:81:06:9a:19:ff:7b:cd:33:12:03:86:e1:
                    81:13:6c:d1:48:36:60:b4:be:7b:8f:3b:c9:76:0f:
                    7e:f2:84:33:7c:a7:4b:3f:c1:1e:c9:2f:72:bd:4b:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:70:41:56:B6:33:DE:FB:8D:E8:06:BD:0E:A7:08:C7:70:5E:DB:55
            X509v3 Authority Key Identifier:
                keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:78:f1:22:62:fc:27:c9:a9:c0:10:62:bd:f4:f2:9d:a6:
         c1:8b:7f:1e:31:37:44:36:34:4c:11:3b:70:89:ea:62:be:8a:
         c5:0a:6e:1d:2d:7f:90:dd:6a:aa:74:1a:50:42:4b:c4:4d:65:
         52:c2:03:c6:79:f7:be:26:c2:29:b3:46:ea:2d:14:33:1f:47:
         27:b1:9b:18:1e:32:bf:5a:21:15:e9:4d:c9:27:07:7e:56:d7:
         08:92:de:b0:53:e4:cf:b1:7f:e5:aa:18:59:13:3e:f5:26:e9:
         0e:2c:1b:db:89:4c:80:f3:59:c7:ea:9e:f5:6c:16:aa:51:83:
         ae:f4:66:f0:48:67:db:17:95:53:7a:89:05:07:11:98:63:b8:
         b9:7e:63:75:a1:53:92:53:f3:05:e9:a7:74:84:7a:91:f2:ca:
         e7:00:9e:4b:fc:b3:0b:d0:e7:fc:ac:4f:04:d5:9d:ea:76:e2:
         6f:f2:a9:27:85:65:78:11:31:e3:fc:1c:a5:ef:d4:df:8e:06:
         82:45:3d:c7:bb:06:1d:56:11:f3:85:94:c1:b5:88:7a:14:cb:
         4f:72:d2:cf:61:08:41:a6:fd:20:3c:18:e3:1d:39:6b:f6:11:
         a4:35:57:13:22:40:e6:7f:8e:01:8a:ff:1e:ad:fb:58:49:e6:
         5b:84:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:58 2024 by rpki-client on console-ams.rpki-client.org