Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File:                     sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier:          1fVCzIl7w+cMyKAbuPJSFPqfWKBT/93C3JUbRXiucD0=
Subject key identifier:   F1:FF:BC:71:B6:C2:02:FE:D6:78:8D:21:CE:DD:1C:E6:0E:54:E4:8D
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer:       /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial:       018F874A9BB4DD99720E7B1866AFE28D4368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number:          06D0
Signing time:             Fri 17 May 2024 16:02:44 +0000
Manifest this update:     Fri 17 May 2024 16:02:44 +0000
Manifest next update:     Sat 18 May 2024 16:02:44 +0000
Files and hashes:         1: MXe5ncscEty-Xw8tCTKyVuWXPOk.roa (hash: H0MStUyVtRUMD1h6Lyf5gCa7EVUOJx8AB8wO/tqeTLk=)
                          2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: sRNV39Rf/MsXKpRvHyKi9hZ+hl76nMynFMtjmQpS0fQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9b:b4:dd:99:72:0e:7b:18:66:af:e2:8d:43:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
        Validity
            Not Before: May 17 16:02:44 2024 GMT
            Not After : May 18 16:02:44 2024 GMT
        Subject: CN=f1ffbc71b6c202fed6788d21cedd1ce60e54e48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:f5:eb:dc:57:fc:5a:cd:8f:cc:32:43:16:
                    a8:00:e4:4e:15:b4:f8:0f:b1:9f:eb:05:cd:d5:77:
                    51:da:b1:0d:c0:9f:28:69:ea:16:94:21:6b:07:00:
                    1f:0e:d8:ae:f1:7c:32:da:e8:4f:f6:32:c1:57:d8:
                    84:93:33:4b:0c:29:47:e3:f5:b0:02:dc:2e:53:e9:
                    4c:64:e5:be:c3:86:e2:49:c1:c4:4f:f0:ce:da:77:
                    c9:7a:d7:29:e3:d5:fc:7e:a2:30:9d:6c:0e:fd:7e:
                    f1:9e:7a:22:8a:96:51:4b:ff:0f:d2:0d:0f:d9:8b:
                    1b:86:9d:d7:53:ba:fe:3c:d5:b1:73:81:05:d9:ae:
                    b0:64:bc:f2:df:6c:1f:7a:bf:c0:91:3b:6c:fc:ee:
                    da:01:ca:d4:c7:f1:91:fa:5a:39:25:ed:d0:2f:18:
                    82:cb:93:7f:94:5a:41:56:23:e1:05:d2:7a:9b:f8:
                    49:63:5e:9a:1c:2f:65:70:e3:a1:99:18:ca:ce:94:
                    2e:6b:61:78:bf:97:cd:dc:91:9d:7b:da:b1:98:e0:
                    b2:f8:62:dd:c0:4c:14:5a:18:65:fa:3b:41:3e:b1:
                    18:20:e7:28:43:ae:c9:8b:db:f3:a0:53:1e:9d:ef:
                    68:be:68:ad:c3:1e:30:05:0b:ea:19:70:70:dd:16:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:BC:71:B6:C2:02:FE:D6:78:8D:21:CE:DD:1C:E6:0E:54:E4:8D
            X509v3 Authority Key Identifier:
                keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:b6:a2:75:d6:f5:3b:dd:bd:f7:43:f8:47:f4:fd:eb:7e:
         8b:2a:15:ac:b4:c4:db:df:7a:53:6b:ab:1f:7f:8e:3e:ff:f3:
         57:38:c0:e4:43:a7:7d:fa:56:27:01:0a:a2:c4:02:39:06:30:
         df:35:7d:07:5d:fc:2b:fd:3e:48:ae:94:96:70:ae:80:de:dd:
         be:2e:8d:4f:9e:a7:5c:98:04:c2:62:95:d3:ab:63:5f:fb:1b:
         7c:4d:c7:0b:0e:87:50:46:79:51:0a:73:90:eb:eb:2a:c4:22:
         43:82:96:0d:13:55:c4:26:d6:fb:54:ad:7a:ad:fe:56:d7:7e:
         4c:3c:f6:f5:5d:25:dd:4e:b0:76:65:11:c1:c1:dd:92:78:fe:
         37:99:32:d9:5c:6d:2f:9b:27:0c:84:c9:1a:59:86:ce:d4:09:
         28:9e:47:6c:f0:36:8e:0e:c1:8a:5b:22:fe:2b:6e:a7:e6:c6:
         da:c3:1e:68:6e:5a:eb:17:59:56:87:92:11:b7:f5:67:bc:85:
         16:76:c1:e2:9c:f9:c4:11:cb:14:37:2e:f4:27:b4:86:b2:ef:
         f6:8b:fb:38:9d:e8:45:9f:28:46:10:7d:69:76:89:f6:12:48:
         e6:80:fb:98:94:cd:cb:1a:de:55:2a:a2:7c:ed:4e:3a:50:5c:
         ec:88:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:29 2024 by rpki-client on console-fra.rpki-client.org