Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File:                     _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier:          l+55JT6zZcp1bmmQHS7d8YySQcHIIb5mXshPOSciu/k=
Subject key identifier:   21:F4:77:96:31:61:B2:3B:08:11:D3:5C:EE:CD:2F:1D:0D:C7:43:23
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer:       /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial:       018F885AD7630647750A682F5579720E6D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number:          0E68
Signing time:             Fri 17 May 2024 21:00:05 +0000
Manifest this update:     Fri 17 May 2024 21:00:05 +0000
Manifest next update:     Sat 18 May 2024 21:00:05 +0000
Files and hashes:         1: 4lNgV9E2GPU_J9E23in_L9bT054.roa (hash: W9HNsQ8DbHddEeJorpue5UWRkXs+jtb2jRwt8KXrV0I=)
                          2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: q+KNxJW8ELWSjeBxPxh0Lwt6a8AquPAMtcNPi2AQEQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d7:63:06:47:75:0a:68:2f:55:79:72:0e:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
        Validity
            Not Before: May 17 21:00:05 2024 GMT
            Not After : May 18 21:00:05 2024 GMT
        Subject: CN=21f477963161b23b0811d35ceecd2f1d0dc74323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:08:93:43:a9:a6:5f:7e:84:98:23:ab:ea:
                    58:e3:7b:68:1b:41:81:f7:72:f0:7c:6b:c8:91:e7:
                    65:0d:f9:63:81:ce:b7:bd:4d:75:f9:42:88:5f:82:
                    e9:03:62:8e:1c:42:75:63:5c:eb:c3:eb:58:30:22:
                    01:e6:1d:f0:c2:2e:29:f8:f9:24:12:04:a3:70:f0:
                    d1:f4:f4:75:8b:41:13:3a:f6:bd:d4:16:df:62:9b:
                    44:ea:f6:fc:74:8a:00:ca:82:50:be:bd:b5:44:62:
                    c3:47:f2:4d:44:ca:27:4b:b9:ce:78:57:85:44:a7:
                    05:27:d8:86:c4:b0:df:d6:09:2a:23:c8:52:de:b5:
                    13:8a:f8:38:10:2b:e0:0a:04:2e:1a:55:8a:c0:90:
                    97:96:ea:ed:3e:1d:ff:19:21:e4:e5:f4:74:a8:72:
                    23:40:5e:24:ca:95:e6:6a:a8:c1:2a:ba:d3:c3:0b:
                    48:ce:26:33:04:23:f4:6d:cd:0f:1d:69:c9:f1:03:
                    81:82:91:41:ff:0a:71:0f:22:ab:ea:f6:b9:98:0a:
                    18:c9:f2:0c:24:52:cb:6d:9c:e9:90:55:cf:00:cf:
                    56:13:07:e6:d1:47:a8:be:a0:6c:cf:3c:d7:6f:8d:
                    f5:77:35:18:09:55:85:89:7d:b8:8d:b0:bb:2f:58:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:77:96:31:61:B2:3B:08:11:D3:5C:EE:CD:2F:1D:0D:C7:43:23
            X509v3 Authority Key Identifier:
                keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:41:5c:ec:a6:74:bb:58:0e:af:2d:63:2c:4c:fe:a2:e7:58:
         97:8b:47:d3:e3:3b:a3:0c:96:13:3a:9c:ea:05:49:be:c2:e8:
         3b:70:3d:0e:60:aa:2a:8f:10:63:a3:a3:fc:00:00:76:06:d3:
         b7:33:06:d1:c4:24:2f:10:53:9e:c4:5d:b5:37:db:32:e2:54:
         c9:6b:cc:ba:74:1d:50:e3:7a:f8:1f:98:63:cd:d5:46:d2:15:
         69:82:0d:f1:58:55:a2:8b:58:12:4b:9a:bc:ec:a7:14:08:10:
         b9:2d:0f:ff:e0:c5:a1:05:35:53:ba:d3:af:fc:15:36:c3:d9:
         35:73:b6:eb:2f:8a:1a:51:c2:4a:1e:82:c0:96:18:2f:71:6a:
         bf:93:39:3f:83:50:8d:70:f1:3f:8a:3f:62:02:8d:35:23:1b:
         d9:d5:72:54:59:9c:e1:c8:aa:c4:96:0f:b2:56:ce:07:37:1e:
         8d:88:98:05:e2:55:b6:0d:8d:01:a3:c8:f1:c8:d8:b0:a6:65:
         0b:f1:a5:a6:bc:45:82:e5:3b:07:18:81:53:0f:b5:6e:4b:28:
         3e:ed:df:d5:20:a0:ba:da:b8:a5:99:93:32:7f:85:a6:2c:40:
         50:43:33:8a:bc:17:95:69:6e:6a:80:02:d8:37:ff:7f:60:10:
         fe:78:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:30 2024 by rpki-client on console-ams.rpki-client.org