Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File:                     _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier:          GD3r+zWs9fRGEyX67JCw+Y3HR9D+kcaAFsQzH/Gd3U8=
Subject key identifier:   B0:36:7C:06:94:BC:A9:56:88:E7:96:33:D5:8A:C2:55:89:84:06:D5
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer:       /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial:       018F885B186CF34CA2EA368335FC496F8331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number:          10D0
Signing time:             Fri 17 May 2024 21:00:22 +0000
Manifest this update:     Fri 17 May 2024 21:00:22 +0000
Manifest next update:     Sat 18 May 2024 21:00:22 +0000
Files and hashes:         1: L5_0ZPQYeFyn_h3eej3QZ16DZLY.roa (hash: JbNibg7CQOU7FQgaTkff+UDX2VQvQDJUZc5aTiONgDA=)
                          2: QuZzJF3JiQyLVx-WLTOBlg2AaMs.roa (hash: ut/AzG5tCjaLjjFzY40NvsLFcUSg4C3WAyNsjyBsrVM=)
                          3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: +o3+aPB7dg2x3K48UdyFb1O0RLfM5MtvEjryjZAUuy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:18:6c:f3:4c:a2:ea:36:83:35:fc:49:6f:83:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
        Validity
            Not Before: May 17 21:00:22 2024 GMT
            Not After : May 18 21:00:22 2024 GMT
        Subject: CN=b0367c0694bca95688e79633d58ac255898406d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:68:ac:44:84:dc:46:bb:da:cf:f7:e6:3c:
                    c6:54:88:aa:ee:e4:81:50:aa:04:03:a9:01:b3:f1:
                    c8:7d:41:96:3a:a9:20:f0:4a:81:db:8c:c0:a7:02:
                    dd:c5:d7:dc:84:88:bd:c4:34:35:a3:22:48:20:45:
                    d4:f2:52:6a:d2:af:e3:76:5a:d7:65:1a:7a:8a:27:
                    4d:de:6b:85:e2:77:50:a8:e2:48:a5:83:57:78:3f:
                    8d:4f:38:c8:1e:2f:f5:fe:2c:b8:af:e1:fa:c4:85:
                    33:1a:b1:c6:27:58:2d:f9:9e:e3:8d:5d:13:67:1b:
                    07:5f:78:97:49:8e:85:a1:0e:3a:46:e7:1c:9e:3a:
                    fb:62:a8:e1:bb:60:38:b8:63:79:72:30:9a:f2:19:
                    e9:9a:ad:b4:92:0a:2d:03:a1:49:88:83:62:53:05:
                    cb:44:92:3d:63:e8:33:4b:02:04:19:74:59:39:d3:
                    30:4e:56:27:48:18:2e:bd:0c:f5:34:b0:1b:b0:dc:
                    7b:3c:83:a3:1e:68:42:7a:2f:ce:fa:68:25:5c:bb:
                    8b:fe:c5:af:97:1f:5f:78:2c:c0:42:5c:f7:8d:32:
                    76:92:e1:96:11:49:f8:d7:18:6a:88:cf:04:d5:6e:
                    f7:34:b3:82:7c:ab:6f:e9:83:75:63:83:02:06:2e:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:7C:06:94:BC:A9:56:88:E7:96:33:D5:8A:C2:55:89:84:06:D5
            X509v3 Authority Key Identifier:
                keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0c:e4:c9:cc:b0:70:77:73:8f:1f:fc:3c:83:9e:2f:7a:94:
         0f:48:e6:da:a6:79:bb:34:42:dc:6d:4a:07:c8:17:3e:f6:ec:
         65:7c:52:d5:11:df:74:de:40:22:f3:7c:94:64:bd:88:9f:fb:
         18:0d:6b:b3:70:6b:ad:c2:e2:73:88:73:fb:c8:15:39:5a:fc:
         b1:a7:86:df:9a:c0:5e:ea:37:74:7e:73:90:5e:14:1a:8c:ec:
         8d:5f:c2:bf:ab:97:11:e0:5a:b3:f9:9b:2d:7d:ef:71:b2:f8:
         8f:a9:0d:2f:f5:dc:f9:ec:83:9f:f1:f6:56:46:e4:9b:1b:08:
         36:0c:e1:26:f3:d6:02:08:a7:75:e7:6b:3c:a4:0c:d6:78:a4:
         83:55:dd:25:c4:33:09:e4:9b:34:83:76:45:23:54:17:ea:94:
         3f:af:fe:08:02:03:cc:23:3a:3a:78:c7:04:5a:85:5c:51:05:
         f5:a6:b8:68:8c:14:7c:c8:1b:47:8d:a5:c8:db:b7:87:e7:48:
         6e:de:ee:4e:ae:a6:eb:6e:6f:fa:f6:44:bf:74:cc:8f:98:7b:
         21:29:ef:a7:24:95:c6:b3:a4:b4:77:52:f8:a1:de:6e:ca:0a:
         ab:ad:e9:58:60:8e:46:95:cc:a9:60:a5:e6:4c:80:e2:f6:02:
         37:31:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:58 2024 by rpki-client on console-fra.rpki-client.org