Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File:                     T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier:          AYAahRnr+L4BDOF67eZWCABQT1eSJkGJhtFiNvCjvfU=
Subject key identifier:   1B:18:D1:85:78:35:D1:E2:92:F0:C9:BD:A6:81:8A:A9:0E:EB:05:02
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer:       /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial:       018F8749321E8C845FEC68AFC3FDE5815669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: 9aq1pBYuIxy30soIvi0x7AjaHlo.roa (hash: VIPwbqNvEQeGvdN16ZmjDCxGvCRLMNJmNwnkG4OQ2mo=)
                          2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: 4YL/3Q145Z/FR5yC5sC6Dfa/SsQX7ZtHn0uu0vzwgns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:32:1e:8c:84:5f:ec:68:af:c3:fd:e5:81:56:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=1b18d1857835d1e292f0c9bda6818aa90eeb0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:f0:19:fd:91:1a:a1:38:bc:be:a3:71:a7:
                    10:26:ec:0d:7a:d1:65:02:1f:cc:99:b5:1e:67:ce:
                    ed:85:aa:20:1f:7e:7b:4c:de:67:1c:72:9c:27:6b:
                    f5:a2:6b:26:d8:fb:12:66:89:f3:01:b6:aa:7a:6c:
                    63:aa:28:44:33:d2:13:88:a9:49:ec:c4:7b:28:3f:
                    da:f0:d0:b8:51:31:eb:b9:fb:66:42:7d:49:d0:4b:
                    20:40:77:c9:6a:29:5a:e4:37:dc:a8:69:cf:c6:f7:
                    59:76:11:c8:60:a0:60:01:49:b2:50:33:df:28:6b:
                    5c:5b:67:ed:13:40:17:8d:2f:b6:eb:70:27:98:01:
                    0b:8d:8c:c8:07:52:fb:89:67:e7:7b:7e:8b:93:f6:
                    c8:ab:a9:01:bb:b3:7a:ec:6b:40:f1:53:70:60:d1:
                    c6:96:75:29:b2:6a:9f:e1:a5:32:a1:a9:27:16:d6:
                    0c:d1:dd:79:48:a0:30:1c:d4:47:55:11:07:ba:c4:
                    4f:a7:d3:2c:53:71:88:0a:af:1a:95:95:d1:0b:ff:
                    9b:fe:3a:75:f7:22:47:61:33:ab:6a:e0:26:59:29:
                    3b:46:3a:2c:92:ba:df:08:f9:72:db:83:ec:4a:53:
                    ac:ff:d7:94:c3:5d:e1:70:d5:c3:48:32:0a:41:19:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:D1:85:78:35:D1:E2:92:F0:C9:BD:A6:81:8A:A9:0E:EB:05:02
            X509v3 Authority Key Identifier:
                keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:6e:2c:10:fb:bf:c3:75:2c:9c:11:d0:9d:b4:c3:c9:8e:
         dc:99:c5:6e:79:b7:8a:e3:95:e5:eb:4b:e0:cc:96:17:10:4f:
         93:cc:7f:0b:63:dc:36:b7:84:14:09:44:4f:a5:d1:b6:65:2a:
         d2:1f:f5:fc:ad:9e:66:20:b3:7c:3a:6f:d1:4f:2c:a7:f2:9f:
         e3:49:2d:2a:82:d5:f0:d0:d9:b8:b6:c1:52:cf:23:49:81:bd:
         4a:87:cc:9b:4b:6a:a7:0f:09:c1:0e:0d:1a:85:13:70:a9:a2:
         6b:02:f1:89:18:0b:75:40:a4:4c:ff:c7:e8:51:e1:f8:28:ca:
         c2:78:27:e6:3f:9b:b9:bb:f8:3d:cb:bc:f4:12:d6:85:62:a6:
         9b:0c:d0:9c:57:69:33:91:40:a3:53:6e:65:da:5d:28:52:98:
         1d:00:25:a9:47:11:92:09:e4:7e:37:27:8e:e9:93:6b:ff:23:
         f1:02:2d:a5:2f:4a:7c:22:14:86:f0:05:d3:2e:a4:f5:59:cb:
         67:94:7c:b0:ac:d6:b8:61:61:43:d8:51:2d:3a:e2:d3:0a:fb:
         98:f4:9d:81:d5:c8:ee:80:a5:ab:a8:7c:a3:65:77:81:97:b0:
         95:a0:41:01:ae:4c:0f:6b:ad:74:b9:da:74:85:4c:5d:ad:cf:
         f1:0f:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:00 2024 by rpki-client on console-fra.rpki-client.org