Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          JkDrdEtf+Qve8Fa3s86PQ6th6X+9JWrtvlm3aqS0DSU=
Subject key identifier:   15:C7:10:06:EA:5A:16:DD:A2:6C:31:55:BF:19:FC:49:8B:57:17:C8
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       018F882401D8E91C3184F710B91A3954325D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          0672
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: GmWwrSp8WCsjuWV7s3ElvcyPeMA.roa (hash: KXk2JXj/N+1XyaZhXNs8mmnkai7rE39HRXy5klXDYWw=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: vdCcxtmXLPe0ithlQVeF4hz5kObZNJizezR7twBOp6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:01:d8:e9:1c:31:84:f7:10:b9:1a:39:54:32:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=15c71006ea5a16dda26c3155bf19fc498b5717c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:fa:6a:42:f0:60:fd:9a:56:c6:58:bc:88:
                    17:1c:1e:b2:fd:7c:0b:7b:f7:af:b1:73:35:46:82:
                    f9:f1:b2:f3:a0:57:97:44:3d:7f:98:88:d4:85:88:
                    c4:3f:d5:da:5d:8f:c9:38:2a:06:f4:54:56:99:b5:
                    76:76:2d:3f:95:44:dd:25:d5:e9:42:70:52:c6:f1:
                    15:24:5c:b8:d9:91:32:25:85:95:2f:d7:98:9d:60:
                    22:4e:30:c3:80:6f:68:f0:6e:2e:28:24:9c:f0:cd:
                    26:7f:1e:34:9a:d9:a4:2d:8a:43:6b:bf:8c:c6:d8:
                    47:ce:ec:54:ae:23:15:74:51:b9:13:ed:0f:9b:de:
                    9a:95:00:f0:48:23:1a:6a:c1:0d:e5:74:fd:3a:89:
                    22:5d:6e:0c:b7:e7:93:95:c8:59:a8:75:9b:af:87:
                    ac:af:b4:46:8d:3d:d3:6b:82:7e:d3:e1:76:b4:52:
                    96:f9:f5:cc:e3:f1:3b:32:c1:40:fd:5f:26:93:01:
                    80:4f:c5:5b:6f:fa:f7:65:c8:d0:c8:82:72:5a:d5:
                    b7:38:5f:de:0d:3b:55:3c:ef:3d:93:92:94:45:88:
                    0c:a9:bf:b3:c6:cb:fd:3e:c7:fa:a9:33:4c:1a:3e:
                    07:5d:e3:96:e2:46:42:68:c1:20:12:56:14:32:78:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:10:06:EA:5A:16:DD:A2:6C:31:55:BF:19:FC:49:8B:57:17:C8
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:f4:b5:27:3a:98:31:0d:02:09:55:c3:23:3a:b9:c0:75:
         d2:e4:45:ed:90:f1:cb:e8:65:a4:78:fe:0a:d5:e6:c0:ea:05:
         16:e0:96:c6:1d:05:86:ba:02:6a:b8:c8:10:bf:b5:3b:d5:ae:
         1f:35:be:97:d6:74:a8:3d:19:a6:80:38:e1:d0:08:45:ba:68:
         bd:7b:b3:1d:c0:ca:0b:12:50:37:ef:3b:10:3f:b4:05:fb:0c:
         29:47:e5:da:06:2a:02:06:1a:b4:cf:73:53:48:69:b2:c7:0f:
         6c:77:61:08:63:80:4a:97:f7:89:4b:da:1f:4a:74:17:7b:08:
         26:d1:fd:6a:5f:5d:1a:ec:a1:23:66:cf:b5:17:ab:0a:82:ff:
         14:7c:24:5b:4d:85:ef:b1:37:65:b4:06:f1:3f:83:2a:4d:d6:
         f6:69:f7:a3:c2:e4:89:bb:66:09:03:51:aa:2e:92:d9:75:b7:
         e1:3c:95:54:70:ce:bb:5f:97:f1:11:0d:af:12:2e:6e:c8:ff:
         e7:a2:9d:6b:1c:ef:21:37:62:3d:e4:c5:83:a4:7c:b9:b9:07:
         2f:95:7b:dc:66:1a:f1:02:00:7f:fc:56:57:6f:96:7d:f7:da:
         45:99:47:b8:57:b1:ed:16:14:55:65:b2:49:8f:b9:9e:62:f3:
         bd:5d:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:02 2024 by rpki-client on console-fra.rpki-client.org