Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File:                     F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier:          UmgqTjFIGd2+8rv2GQvzycbDj3sJz22ul5qR+JsAKHU=
Subject key identifier:   9C:59:3D:C0:99:99:EF:3A:ED:D2:05:6A:ED:37:4F:6E:DC:59:CD:66
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       018F497ED9DE69889DF0E2BB537B0E07358F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number:          05D7
Signing time:             Sun 05 May 2024 16:03:21 +0000
Manifest this update:     Sun 05 May 2024 16:03:21 +0000
Manifest next update:     Mon 06 May 2024 16:03:21 +0000
Files and hashes:         1: EXG1Kh7sTp722KvR-iffby_Bh-o.roa (hash: dg0lifJjOBES0yHfaQ7JxnUdcUVeToBKYSjn/8FBJhE=)
                          2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: iDjgU5hlVoGTJMf2f4ay3YS1CfsmSSGQsriPJ5Ay2XM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:d9:de:69:88:9d:f0:e2:bb:53:7b:0e:07:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: May  5 16:03:21 2024 GMT
            Not After : May  6 16:03:21 2024 GMT
        Subject: CN=9c593dc09999ef3aedd2056aed374f6edc59cd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:cf:bd:e5:3f:d1:14:07:e1:05:ae:1c:80:
                    da:f6:e4:dc:f7:f1:d7:1e:43:c3:3e:3d:29:32:3b:
                    75:84:97:f8:c5:fd:2d:15:1e:0b:a7:10:4a:d4:ba:
                    86:6b:2a:88:2a:5c:ce:a8:5f:33:91:d3:d9:65:a1:
                    c9:90:b7:1b:8e:46:69:97:a5:c1:8d:06:51:51:31:
                    5d:ed:7f:d8:bb:65:cb:4c:fd:2f:32:b9:6e:c6:c6:
                    6b:f2:18:a2:48:85:71:41:ae:d8:d9:06:5b:82:02:
                    cd:d1:5e:ba:7b:44:60:d5:af:42:f9:d9:de:42:b1:
                    46:b2:76:d3:d6:6e:30:c6:d9:8e:72:1a:1a:91:c2:
                    3e:b5:2c:ba:36:f1:5b:00:34:24:dd:6d:e8:ed:d6:
                    57:68:b6:c3:da:d7:b3:fd:93:d3:b3:24:fa:cc:ac:
                    79:40:11:96:83:ed:3d:31:70:4b:41:a2:b9:91:51:
                    8e:c1:70:61:3a:e1:97:48:9a:e6:74:3d:5b:95:79:
                    ba:7c:d7:bb:e0:1d:2e:a4:ab:4b:2d:80:f0:64:59:
                    a9:55:26:98:3e:19:1a:51:d0:5a:18:05:ba:ae:c6:
                    14:41:33:44:32:82:39:7a:ff:48:3a:41:bc:12:19:
                    4b:84:88:25:3c:92:71:83:8f:78:3e:3d:42:c8:57:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:3D:C0:99:99:EF:3A:ED:D2:05:6A:ED:37:4F:6E:DC:59:CD:66
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:73:ab:ae:aa:8e:48:0a:03:13:e1:43:8b:a5:66:3f:fc:
         41:dc:38:62:48:05:aa:b9:4a:13:65:f5:36:9e:36:96:37:da:
         54:2a:a3:fb:5e:19:c7:04:b5:b3:ed:9d:4f:07:67:07:30:af:
         b1:b4:11:e7:c7:7d:ec:3b:9a:f4:d4:e8:63:6f:54:0b:d3:63:
         d6:83:6e:7c:ce:36:a8:c2:64:47:14:74:0a:b3:cd:f6:6b:69:
         20:ba:63:d2:31:81:49:82:f1:0f:30:d3:f6:b0:16:42:bb:b2:
         c3:46:a8:f4:bc:3a:5f:82:6d:49:7a:a3:b0:8a:f0:ef:b0:2c:
         3a:a9:a9:b9:7b:5a:6a:cc:a5:ae:c5:b3:ec:14:64:c0:24:13:
         e4:ca:8f:14:a8:61:21:bb:6a:49:d7:4d:24:6d:94:bd:1b:ea:
         c8:44:ad:93:ed:63:77:26:aa:91:9b:a8:06:f8:38:59:07:9f:
         73:37:7b:46:3e:f1:af:3f:87:37:69:a2:2a:2b:57:0d:2e:3a:
         64:b6:ae:79:b5:1d:15:4e:09:2b:47:64:a1:f4:15:3b:1a:95:
         6a:9a:24:2d:f8:84:ae:75:47:b0:6e:a9:22:a5:9a:78:d3:b3:
         fb:a2:12:c0:35:d4:37:70:fb:71:dc:38:cb:b6:d5:13:0f:a9:
         66:fd:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:06:11 2024 by rpki-client on console-fra.rpki-client.org