Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.mft
File:                     59zfgPMHNL0hYqV8E1SuWx50buY.mft (raw, json)
Hash identifier:          v77OXxd4qouMiVUypgEwwq0tgvQkjHNL5cHnHr7QGCk=
Subject key identifier:   AD:78:53:FC:6C:5A:12:C4:E6:3C:19:C7:31:F3:B8:C5:53:5E:8E:0B
Authority key identifier: E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6
Certificate issuer:       /CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
Certificate serial:       018F3EC27A3099EF2A978F28B364BFAB7412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.mft
Manifest number:          0502
Signing time:             Fri 03 May 2024 14:01:23 +0000
Manifest this update:     Fri 03 May 2024 14:01:23 +0000
Manifest next update:     Sat 04 May 2024 14:01:23 +0000
Files and hashes:         1: 59zfgPMHNL0hYqV8E1SuWx50buY.crl (hash: ien2yWPTFWb0lLbzfSxKXRNHuqiPLeFoDqLyKMJCQg0=)
                          2: dYAd-IFuTjfe6rII8vtshygqE9A.roa (hash: orsx3h1Me1xBB1QxWOG5oCqWTRCTjZRQ3u/h6jtXE94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:7a:30:99:ef:2a:97:8f:28:b3:64:bf:ab:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
        Validity
            Not Before: May  3 14:01:23 2024 GMT
            Not After : May  4 14:01:23 2024 GMT
        Subject: CN=ad7853fc6c5a12c4e63c19c731f3b8c5535e8e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:57:ff:5c:47:c6:88:14:70:d2:b1:15:cd:30:
                    88:a4:4e:56:8c:b1:ed:e3:04:bc:c9:6c:cf:cf:ef:
                    13:32:62:83:93:9f:15:39:55:0a:73:88:b3:7a:13:
                    88:74:03:43:9c:1f:ef:88:32:ab:d5:79:83:02:b4:
                    36:e9:90:45:80:e1:d9:d1:a3:f0:60:b6:87:47:3c:
                    cc:4a:a2:b9:fe:e5:13:c5:f9:8d:3e:9a:03:25:fc:
                    b9:56:f3:de:8e:c8:c4:2a:05:b1:d3:35:db:22:19:
                    33:e7:84:59:d4:06:a8:bc:36:9c:35:31:4c:d5:de:
                    b4:54:cd:80:2e:e2:93:f6:50:07:a1:3b:1d:12:b4:
                    66:99:51:3d:78:0b:90:3b:f1:1b:41:78:93:53:34:
                    c4:e9:79:48:2d:38:7e:4d:13:67:83:f6:c5:59:ff:
                    a6:31:9d:2e:19:48:32:83:fe:a3:45:96:c9:9e:fd:
                    4d:01:37:aa:7b:af:c4:76:ea:35:06:5d:24:89:9e:
                    64:cf:63:9b:c6:c5:ef:90:fe:26:02:42:84:b1:40:
                    aa:1a:09:b2:45:e9:c5:76:8f:2f:44:85:db:81:03:
                    d1:7f:6d:24:2b:75:c8:bd:f5:43:5b:4e:db:84:b8:
                    2c:71:52:47:f4:7f:3a:92:d4:fe:4a:75:eb:57:09:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:53:FC:6C:5A:12:C4:E6:3C:19:C7:31:F3:B8:C5:53:5E:8E:0B
            X509v3 Authority Key Identifier:
                keyid:E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:91:48:ae:76:10:cd:1f:68:04:78:bd:ef:dd:81:0f:91:
         f6:b6:00:bd:df:b1:60:23:e4:34:ad:72:6c:2c:e9:b5:30:11:
         a9:2d:ca:9c:93:06:2a:c9:6c:9e:8a:d6:9f:6b:fb:9c:75:3d:
         f1:84:87:b8:6c:85:f4:a3:39:97:0e:22:f6:8b:94:26:e6:fb:
         de:06:e6:76:b1:59:34:b6:76:d4:e5:7f:b1:dd:d1:4d:4c:9f:
         32:40:40:61:f8:53:d0:14:2a:7b:64:90:fb:be:f8:73:0e:47:
         a8:62:4e:82:0e:a3:5c:95:07:e9:69:4f:d8:e7:a4:35:b3:b4:
         fa:19:db:80:cb:99:c1:58:a3:4f:3b:88:96:4b:6b:95:15:a3:
         48:ae:21:88:37:e9:87:52:be:61:f4:11:10:a3:ac:62:f2:c6:
         c8:06:4c:b3:64:c3:3a:d2:f3:f9:a6:40:f9:bd:d8:c0:08:88:
         44:b5:55:f5:e1:86:8d:2f:c0:75:02:a8:84:ea:bb:3e:39:d3:
         17:d3:09:24:f5:1d:3a:9f:ef:72:54:b6:fb:93:c7:e4:51:65:
         41:46:7a:b5:9f:e5:6a:15:f2:b2:8a:01:e0:16:3f:ec:a2:fd:
         3b:dc:69:fc:22:22:16:16:a4:93:ab:82:3e:d4:5e:6c:ae:86:
         37:8c:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:59:54 2024 by rpki-client on console-ams.rpki-client.org