Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File:                     j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier:          UR4YPSdSNYJBeQCs8V7WtMH4wwXBfg5fi3zHdFiNEPQ=
Subject key identifier:   77:18:55:E2:A8:36:C9:58:1F:D8:42:2F:32:92:8A:65:B8:B0:FB:B4
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer:       /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial:       018F87ED85C49D1FCFB0F4185960A0C4BF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number:          0FD3
Signing time:             Fri 17 May 2024 19:00:41 +0000
Manifest this update:     Fri 17 May 2024 19:00:41 +0000
Manifest next update:     Sat 18 May 2024 19:00:41 +0000
Files and hashes:         1: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: OxfPCsQeeBnUdfupCUGCSL7Jio3C4XxbzQ2s8ZBGJxk=)
                          2: ln3XRPjn3IW91qVhLNl1Ehl0ebE.roa (hash: lZmjM+uImUYfJf+I7HtL9e+ehFxeI9N2A5CCaBskAhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:85:c4:9d:1f:cf:b0:f4:18:59:60:a0:c4:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
        Validity
            Not Before: May 17 19:00:41 2024 GMT
            Not After : May 18 19:00:41 2024 GMT
        Subject: CN=771855e2a836c9581fd8422f32928a65b8b0fbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:e2:14:4f:95:4a:9b:c1:12:fe:6a:f0:1e:
                    bb:3b:48:43:e9:6b:83:f1:76:ac:c6:ca:58:ff:64:
                    78:c8:66:de:bb:25:b9:d6:85:54:b3:19:25:ef:cd:
                    36:22:40:da:54:d7:3f:04:23:4e:dd:8f:bf:c5:3d:
                    a3:c3:41:5f:a0:42:01:86:03:0d:ba:c7:00:af:ee:
                    f5:bb:42:07:32:48:17:e3:ee:61:69:f0:4f:3e:66:
                    31:7b:60:3c:6f:a5:bc:fe:b7:74:5b:8d:20:bb:15:
                    3e:60:46:f9:ca:d5:5f:cf:96:c1:54:e1:a5:67:c8:
                    c7:9e:b7:fb:1c:6d:50:5f:64:ec:ad:cb:57:65:06:
                    a4:14:77:6b:2a:a8:86:61:ca:38:96:9a:c8:ea:ef:
                    2b:ae:cc:95:b8:53:dd:08:f0:5d:67:48:9d:18:06:
                    67:3e:4b:af:32:b6:df:da:7b:c3:77:9f:74:39:a0:
                    5b:75:9f:96:5c:cb:48:3e:b6:c3:c2:67:98:9d:70:
                    2f:1f:de:f9:2e:ec:93:66:d7:38:c1:21:15:d1:1a:
                    54:7c:94:fc:bc:56:15:84:a1:db:a6:80:5d:09:b0:
                    df:4f:d6:d7:81:77:8c:1c:df:10:0d:69:89:e2:3f:
                    de:63:d8:08:c9:e1:a0:2c:e7:15:e6:cd:bb:19:81:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:18:55:E2:A8:36:C9:58:1F:D8:42:2F:32:92:8A:65:B8:B0:FB:B4
            X509v3 Authority Key Identifier:
                keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:55:f9:b5:3d:eb:48:7a:e7:1b:29:fe:e3:3a:49:25:ef:5f:
         0f:14:a7:d2:d8:84:63:c8:4e:b8:44:d4:3d:76:d3:20:61:ad:
         87:0a:c3:3c:77:34:2a:9b:d9:e8:15:14:79:66:27:53:8e:be:
         78:0e:3d:e1:af:f3:85:e0:cd:51:db:b0:4c:f1:95:7f:68:1b:
         f9:dd:8f:26:48:88:84:8b:1a:9f:b0:c3:77:c4:4a:3d:ee:85:
         6c:05:7d:eb:58:6b:3d:4f:63:b5:06:36:ab:43:01:ee:08:dc:
         f7:f0:6f:4e:71:6b:21:15:c5:fa:64:a1:88:34:e5:05:ec:e8:
         0a:d8:fb:84:12:fb:9b:c2:26:35:b4:93:9e:e8:fb:ea:8d:31:
         a3:f0:19:48:45:c1:3f:93:50:a5:a0:80:c4:4f:13:4e:ef:28:
         3a:95:82:a2:69:c9:e8:55:a9:2c:df:e7:51:fc:b4:3e:e9:79:
         1a:65:2d:72:dc:34:be:38:14:ba:93:ec:dd:4c:b6:b3:dd:44:
         94:4c:21:7c:27:dc:2b:a2:21:3f:d5:b1:5e:11:a3:e2:53:ba:
         72:84:bd:ea:e2:9a:4b:7a:3b:b4:02:35:33:31:70:74:08:c0:
         38:4a:28:0b:b1:85:7f:a4:5f:34:5a:5f:a8:f0:dd:43:84:70:
         2d:d0:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:12 2024 by rpki-client on console-fra.rpki-client.org