Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File:                     uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier:          zPF0V4tkDIzBVEYlmIsJrxstp6D9c3o7HXFZU2EbENo=
Subject key identifier:   A7:AC:43:25:67:8A:30:4A:00:F1:E0:D7:07:61:F3:75:81:D6:58:6F
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer:       /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial:       018F874B25B4E70BD3818696D412721CAD13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number:          08D2
Signing time:             Fri 17 May 2024 16:03:20 +0000
Manifest this update:     Fri 17 May 2024 16:03:20 +0000
Manifest next update:     Sat 18 May 2024 16:03:20 +0000
Files and hashes:         1: CnSP3Ja7HA15evGdjozyK8G5Z40.roa (hash: Ot2NsoX5tqU/Qq3S95HKQwPnRtmg8cW1xF+Vl7mc2Dk=)
                          2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: dvMI9I+hV6TJzcjJSA24lMqMxbLaYL8vql/ZxLYm1ww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:25:b4:e7:0b:d3:81:86:96:d4:12:72:1c:ad:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
        Validity
            Not Before: May 17 16:03:20 2024 GMT
            Not After : May 18 16:03:20 2024 GMT
        Subject: CN=a7ac4325678a304a00f1e0d70761f37581d6586f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:18:26:1e:11:5d:25:de:99:f0:f4:fb:aa:
                    17:83:bb:9d:15:83:d1:c2:cc:1b:d9:11:06:f5:1f:
                    51:a6:e3:7f:b1:77:11:07:83:83:c5:a3:4c:0c:1a:
                    69:4c:86:85:d1:b4:a7:a0:50:5c:20:51:06:fb:1f:
                    7e:94:3a:fb:10:5e:4d:55:8e:ec:17:1a:c7:25:67:
                    13:2b:1d:3b:c2:43:b6:f1:6f:5d:fe:0f:86:2f:69:
                    81:82:1d:5d:4b:b4:af:c6:a1:16:8f:81:65:65:db:
                    d3:2f:e1:4d:58:2e:88:e5:ef:79:a2:d4:64:6c:bd:
                    11:07:81:6e:7d:4b:d5:6d:a6:b5:60:53:c2:9b:c0:
                    97:00:b3:8d:01:ea:39:3e:34:c8:18:cf:d4:95:5c:
                    fb:fb:90:d0:66:4c:86:cc:9d:2c:3a:bd:db:84:35:
                    7f:96:f6:e6:0f:3b:17:25:47:a9:86:8d:5e:e7:11:
                    9d:b8:8d:91:35:89:37:cc:40:98:e4:be:92:5c:07:
                    9f:04:6c:26:9c:d4:3d:3e:15:12:6a:98:e7:71:d7:
                    ee:bf:b5:eb:49:38:e5:40:76:61:4b:cf:69:ac:67:
                    9f:0c:0c:fa:bd:ca:e2:b1:7c:52:68:3b:96:4e:f7:
                    28:9b:7d:b3:ca:83:d6:7d:0a:8a:3a:e1:a1:4c:a7:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:43:25:67:8A:30:4A:00:F1:E0:D7:07:61:F3:75:81:D6:58:6F
            X509v3 Authority Key Identifier:
                keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:f2:5c:2a:00:77:54:47:8f:cf:07:8c:48:b9:8c:a7:59:
         77:77:62:03:41:19:e7:9a:be:01:7c:ac:c3:c8:21:8e:03:c2:
         88:96:03:76:41:51:d6:bc:f3:00:75:18:fb:e8:96:f8:47:58:
         10:5c:1c:62:7b:e9:a8:ee:ba:0f:9a:57:ce:2f:44:98:23:3e:
         1a:39:cc:61:9e:28:0e:c9:f2:00:d0:38:97:ee:9c:86:4e:5c:
         85:d3:f8:1c:98:28:7d:4f:12:ca:09:20:6d:bc:f1:84:87:c9:
         b7:62:d8:1c:c0:ce:0d:cb:0f:9f:96:72:a7:3a:a1:ad:76:94:
         67:d3:de:eb:01:8e:8f:00:8d:41:03:0b:42:91:d2:93:58:b8:
         f5:27:6f:ad:f7:d7:b9:ce:8b:14:c8:36:d4:cd:04:f7:66:a3:
         bb:88:b0:39:f4:e8:a1:63:f9:a8:a5:f0:b8:e3:9b:e9:52:c1:
         cd:f7:4a:d1:25:b8:e8:f6:b4:74:63:56:15:85:12:4a:66:08:
         1f:56:1d:06:79:89:a5:b0:da:74:93:e3:0f:8a:b7:0a:05:c5:
         63:ab:46:06:29:15:43:3a:17:5d:77:a4:b8:89:69:9c:b7:d6:
         21:f2:39:a3:a8:06:4c:d7:c1:b1:3e:a9:8d:77:55:ff:e6:bf:
         ce:9f:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:10 2024 by rpki-client on console-ams.rpki-client.org