Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File:                     fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier:          mOD+Chnr8jy6Hf5qm3MRzccENMPDr5mqUAa30OCWwcg=
Subject key identifier:   E3:FF:0F:C9:BB:AE:1C:FA:E7:21:B7:44:5D:2C:C2:9A:B6:2E:52:D8
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer:       /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial:       018F67875AFBB856566AD9CC39BAF5A5B610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number:          111E
Signing time:             Sat 11 May 2024 12:01:14 +0000
Manifest this update:     Sat 11 May 2024 12:01:14 +0000
Manifest next update:     Sun 12 May 2024 12:01:14 +0000
Files and hashes:         1: bzBKU6eXwwqqdUb44TjC--f-OGs.roa (hash: N+aQKh7fLRs10CI0m1PR+mgex0T+v81/a1yP3YRoLKs=)
                          2: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: ZbTlj2Fn9UddPwohABAZHPbbyDlNKRcex5/6zpnlsU8=)
                          3: jzCb-yC5oLln-NBurSqRNPEp3vA.roa (hash: rHOT8RTf//rfOIWu/rkXNFvqrubMdl93FU6rJ1q5X8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:67:87:5a:fb:b8:56:56:6a:d9:cc:39:ba:f5:a5:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
        Validity
            Not Before: May 11 12:01:14 2024 GMT
            Not After : May 12 12:01:14 2024 GMT
        Subject: CN=e3ff0fc9bbae1cfae721b7445d2cc29ab62e52d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:34:88:82:8a:71:63:3f:1f:40:b2:3a:04:
                    92:a2:15:cf:fb:f0:67:d4:0a:0d:33:82:68:ff:84:
                    f4:38:a8:4d:d2:92:70:ca:ee:71:97:a1:9b:b0:3c:
                    33:d5:ac:a6:3c:b1:5d:3e:6a:41:7f:9f:f1:eb:f4:
                    33:0d:3c:46:f3:fb:f7:13:42:93:2d:dc:a5:fe:0b:
                    1a:1a:33:46:16:af:09:05:3c:85:1c:85:70:f1:6b:
                    0f:f9:14:6d:21:c5:83:c8:1d:06:b2:a6:56:0d:6b:
                    8c:c3:c9:bf:f6:8a:f1:d6:e1:3a:15:f8:93:46:d5:
                    87:7b:39:3f:6b:e0:a7:3b:90:9c:ec:89:5a:d8:73:
                    87:0f:35:95:94:0f:d3:0e:36:01:22:c7:62:2c:39:
                    89:e1:42:fc:3a:a9:52:b6:de:22:6d:2f:52:bf:97:
                    fe:16:90:59:ca:d7:ae:d6:c5:6b:07:39:44:8f:08:
                    33:3c:85:f2:8a:46:07:d6:20:69:5d:ce:17:a7:41:
                    a9:fd:a9:82:66:3d:a1:07:d6:6f:de:7b:7d:e2:47:
                    4b:f0:6f:0e:87:b7:1f:2e:1c:7b:da:83:36:42:6a:
                    ff:13:11:3b:d5:1e:86:62:34:76:98:fe:f9:f3:3a:
                    67:66:d3:55:c5:27:9e:d2:35:50:2a:e1:17:a5:94:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:0F:C9:BB:AE:1C:FA:E7:21:B7:44:5D:2C:C2:9A:B6:2E:52:D8
            X509v3 Authority Key Identifier:
                keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:d4:c3:20:65:09:86:a1:f0:e0:e4:8e:05:36:04:99:6e:
         49:f2:36:38:db:76:2f:6f:f3:39:3c:7f:3b:ab:33:d9:22:50:
         c6:40:41:27:23:e5:5a:c4:9c:96:a1:7e:59:df:b1:ca:27:b6:
         7d:19:7a:a8:18:7a:3e:90:45:54:a4:0e:73:3a:36:5c:63:8a:
         12:f3:75:e4:6f:f2:a9:38:72:b3:71:be:64:84:a2:14:e6:59:
         86:51:f2:a2:34:8a:84:5e:6f:a2:96:dc:1d:a8:81:03:23:3d:
         34:0e:ba:17:02:19:b2:2d:de:60:c3:1e:00:2b:00:08:ec:bd:
         11:46:7e:84:d3:32:3c:96:01:8f:16:69:ce:74:06:b3:2f:26:
         ec:0b:ba:db:6f:04:02:31:51:73:ad:e3:b5:6d:23:a7:61:f0:
         c5:1f:5d:75:29:77:38:15:aa:7a:ab:da:eb:3d:e3:19:73:0f:
         dd:3e:c7:8f:82:6f:88:ed:bc:17:8a:15:06:06:cc:87:d2:26:
         1b:f6:45:f0:2f:66:35:af:e2:23:90:af:7d:01:13:75:ec:93:
         43:59:f8:ef:66:f7:0c:a8:45:03:19:36:b8:73:4c:55:12:8c:
         c4:a6:84:00:b9:f0:08:f5:6e:50:f2:3f:19:74:fc:0f:44:cf:
         1e:d1:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:46:00 2024 by rpki-client on console-fra.rpki-client.org