Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File:                     mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier:          /CCYsTKSCSUSdAoVC8Z0zv6R4RwxQ2DNa1MniCcEQE8=
Subject key identifier:   10:8F:80:19:04:6F:82:4F:5E:80:BC:28:F3:55:62:4E:71:0A:67:68
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer:       /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial:       018F87494F4BE8BC24B005682DE61C94C715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number:          074D
Signing time:             Fri 17 May 2024 16:01:19 +0000
Manifest this update:     Fri 17 May 2024 16:01:19 +0000
Manifest next update:     Sat 18 May 2024 16:01:19 +0000
Files and hashes:         1: aQeRZssLVoMJ6LnNxId8_niwOZ4.roa (hash: 3fcxtKu7beVwCzli8MMmfZ0rc0nV+SW+hq/ZV02bOSI=)
                          2: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: q646RXgTmUzjkr+zE7TKHWpMRZ+OxA79K9bhFDycDVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:4f:4b:e8:bc:24:b0:05:68:2d:e6:1c:94:c7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
        Validity
            Not Before: May 17 16:01:19 2024 GMT
            Not After : May 18 16:01:19 2024 GMT
        Subject: CN=108f8019046f824f5e80bc28f355624e710a6768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:66:4e:29:b9:6d:62:0d:4b:d8:06:e4:c8:
                    cc:59:c8:72:89:5b:29:6f:4d:54:b6:3a:53:83:84:
                    0d:54:ea:e6:e3:04:69:9a:bc:bd:24:b2:15:16:29:
                    cd:6c:e4:43:d0:f5:96:cd:46:d5:38:98:06:85:fc:
                    74:ed:6e:46:ca:ca:ae:54:8f:c8:a3:4e:10:ba:31:
                    48:7e:8c:5f:4e:6f:2b:b9:7c:1b:0e:b0:5e:76:3a:
                    aa:e0:70:93:be:9e:49:b4:c1:39:35:c6:40:2d:c2:
                    6c:7f:c3:e0:1e:f8:d4:3a:7d:96:e3:9e:5a:c8:ce:
                    4b:95:29:26:4e:c4:2b:f9:ab:21:e0:1e:7e:72:04:
                    f9:e3:58:fd:48:fc:a9:77:56:93:69:45:74:2a:b2:
                    c9:d6:4f:3b:a1:d4:84:76:8a:15:b3:68:00:81:be:
                    0c:bd:17:b0:e3:44:48:ed:98:22:dc:df:02:04:bd:
                    dc:59:75:78:9d:49:8d:26:4d:d1:2a:31:61:ed:9d:
                    d0:60:ab:ba:15:18:22:3c:69:17:04:35:db:b2:51:
                    5a:4c:f8:a5:9c:9f:bc:fd:0a:c3:ea:11:38:e1:c4:
                    50:77:b3:99:b0:ad:17:f4:8d:d5:87:53:a1:6e:07:
                    eb:7f:2c:05:7e:03:87:67:71:70:f1:4f:98:cb:2c:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:80:19:04:6F:82:4F:5E:80:BC:28:F3:55:62:4E:71:0A:67:68
            X509v3 Authority Key Identifier:
                keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5d:55:a8:34:0d:7b:56:81:8f:5f:de:2e:f9:21:5e:ec:28:
         82:7a:41:03:87:66:df:7e:f2:a9:68:89:82:5b:6d:83:ec:d2:
         ef:20:9b:95:85:84:7f:ba:65:f6:9d:2c:0d:58:79:82:b6:98:
         75:4d:14:29:e9:72:d3:cd:5a:76:2a:27:6d:e3:cd:fc:3a:a7:
         6f:85:08:2b:d4:25:32:8b:c3:4a:40:74:cb:63:d1:e3:63:64:
         c2:96:f8:f2:fe:28:51:40:32:22:67:4f:49:aa:9d:d7:18:7a:
         3a:ce:5b:6f:10:04:d0:d3:71:c6:93:dd:8e:08:95:69:81:cd:
         1d:66:36:32:36:4d:a8:08:23:b4:f7:9f:a3:8c:36:01:d1:d1:
         0c:f9:13:4c:d4:df:b1:aa:fc:59:ae:dc:22:ca:b3:e4:d2:05:
         ee:86:95:7e:00:9d:d9:0b:a7:b5:79:21:2c:fb:93:1d:d3:4e:
         ca:ab:b8:f4:a4:0b:67:74:92:55:3f:db:4d:02:28:1a:41:0b:
         ff:14:ff:cd:93:8d:c6:83:5d:8d:94:a8:c3:d4:21:ed:b1:fa:
         86:26:f8:56:f8:1c:87:5e:32:56:66:74:a5:e2:38:77:09:e6:
         a6:ab:0f:0b:db:22:61:51:52:a5:c5:13:ff:ad:32:d7:d2:bf:
         cb:87:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:25 2024 by rpki-client on console-ams.rpki-client.org