Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File:                     29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier:          gWWoXdi2B2wmOMNhJ+VfUX18LptU7BS7fVAvsHnTMkk=
Subject key identifier:   8F:E9:E8:93:D9:B0:4C:3B:3E:B7:78:C6:47:AB:4B:AA:98:B2:7A:72
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer:       /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial:       018F497D4AAD182BC39DA07C6AE98EACAA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number:          0E93
Signing time:             Sun 05 May 2024 16:01:38 +0000
Manifest this update:     Sun 05 May 2024 16:01:38 +0000
Manifest next update:     Mon 06 May 2024 16:01:38 +0000
Files and hashes:         1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: ggKfBepZQVbWuAbTIV78rmWv55NH+eTkBsf389XKbfE=)
                          2: sPsn8Qj2O2y01J5K_fl4ebPP2zY.roa (hash: /kWPdKG6KxNlmUkjWDi9jjy/LaJSghg1MGUmGDa+mCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:4a:ad:18:2b:c3:9d:a0:7c:6a:e9:8e:ac:aa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
        Validity
            Not Before: May  5 16:01:38 2024 GMT
            Not After : May  6 16:01:38 2024 GMT
        Subject: CN=8fe9e893d9b04c3b3eb778c647ab4baa98b27a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:fa:52:cd:4f:06:7a:45:f7:5b:10:b9:82:
                    80:82:b5:31:c5:c4:1d:6f:84:94:4d:af:5b:91:f4:
                    b0:4f:62:1c:9e:8c:9f:98:f7:1e:ef:3e:86:84:6a:
                    8c:72:1a:b0:ba:32:41:53:18:6a:00:09:2e:72:f4:
                    f9:33:57:1a:f7:92:30:74:e0:0b:a7:4a:ce:80:67:
                    f1:50:e3:36:da:c8:43:f8:99:97:9f:b1:89:04:17:
                    be:7b:75:7b:51:d9:c2:3e:59:bd:57:9a:68:f8:86:
                    d2:77:a1:56:0a:5c:d3:c4:50:1e:37:8d:c5:27:f3:
                    b2:b9:27:b8:73:21:4d:72:d9:79:5b:b4:60:cd:29:
                    ff:e2:05:92:2f:35:2e:22:2e:fd:23:8d:f4:73:57:
                    ad:7c:31:f7:3c:d3:83:fe:8d:72:a6:7b:4c:ba:f3:
                    54:6d:1a:2c:24:15:38:c2:e0:46:8c:28:bc:3f:fb:
                    74:ea:26:35:40:df:52:66:ec:a4:55:d1:8f:a5:ab:
                    41:5d:a8:72:05:15:b2:00:f8:9f:76:a7:1e:89:25:
                    a4:b0:bc:8b:6a:b2:65:3f:3c:1b:74:c5:37:08:38:
                    5b:18:7d:8a:72:c8:96:6b:01:d5:18:c9:d4:6e:78:
                    44:fc:92:3d:54:60:7d:85:01:95:af:11:68:d1:a2:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:E8:93:D9:B0:4C:3B:3E:B7:78:C6:47:AB:4B:AA:98:B2:7A:72
            X509v3 Authority Key Identifier:
                keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:43:c9:67:17:bc:43:3f:cf:e1:c7:13:bf:1a:ba:8f:ec:
         08:e6:72:1b:e3:4e:b8:10:99:a5:5e:c6:3e:97:d1:67:d5:a3:
         dc:21:ed:a3:48:00:bd:af:a9:f9:2c:5f:89:f8:de:bf:63:05:
         af:2e:b4:97:3b:ec:b2:42:8c:e8:3e:f8:b0:95:37:3d:c2:ae:
         f2:3c:f3:b2:62:d5:9c:af:6f:46:78:78:d1:4e:5d:8c:bf:af:
         44:77:63:09:fd:2f:4d:88:e5:71:6f:e4:8e:8b:2d:e9:b6:45:
         b6:3c:4c:d4:51:cb:0c:ac:90:0b:13:64:c0:e7:46:ec:a3:21:
         3d:44:c6:3d:27:9b:d3:5d:61:6f:41:3a:14:7e:cf:f3:bb:f5:
         7b:a8:7e:f8:78:aa:a7:dd:89:fd:bb:c5:eb:1b:2a:81:51:d0:
         17:29:65:53:88:57:16:82:3f:c0:d9:c3:99:f2:02:7f:76:2f:
         b6:e5:83:d2:a9:2b:93:6d:d2:da:78:8b:98:8e:5e:ec:0f:10:
         d1:1a:32:bd:b4:24:49:5b:f0:ac:3e:d9:87:4b:f1:b0:0a:13:
         76:3f:d5:c9:f9:56:95:bc:a8:f5:94:36:7a:8f:e8:05:a1:d8:
         6e:8c:d6:be:37:de:b7:14:90:66:46:8c:a5:93:e2:e8:dd:74:
         b6:56:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:00:15 2024 by rpki-client on console-fra.rpki-client.org