Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          S9OYWj1008El75KaPEKr/Ss36cmjB1xXeL3LCdU5MsY=
Subject key identifier:   77:FE:0E:82:93:54:36:DA:C7:F7:40:FF:D9:94:43:A7:A7:45:82:9B
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       018F8824AB2879FACBC0DCBC9C5697BAB867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0874
Signing time:             Fri 17 May 2024 20:00:55 +0000
Manifest this update:     Fri 17 May 2024 20:00:55 +0000
Manifest next update:     Sat 18 May 2024 20:00:55 +0000
Files and hashes:         1: YbFhdvz_Dh49aVibMt8pQk4W2NU.roa (hash: +8C/+NZZpUmJRKKGtzAuFDJ7ZsLpYE3AK+6TZhL5Wd4=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: AwjauB1aRAOP+C6vPXwFrek+eWX07C3UzHPoaDKI/P8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:ab:28:79:fa:cb:c0:dc:bc:9c:56:97:ba:b8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: May 17 20:00:55 2024 GMT
            Not After : May 18 20:00:55 2024 GMT
        Subject: CN=77fe0e82935436dac7f740ffd99443a7a745829b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:20:f2:3a:75:bf:7a:f4:fa:f1:27:d1:af:
                    57:e8:09:7e:79:d9:d1:ab:4c:63:da:9a:93:cf:98:
                    b6:06:50:b3:41:80:29:18:15:7c:2f:5f:a2:0c:2c:
                    ef:3f:07:33:d6:e0:95:b0:73:4f:6b:b2:6d:67:a1:
                    2c:d8:01:0b:b1:5e:45:40:5b:b5:44:d1:1d:a4:de:
                    db:fe:99:9f:38:8d:9a:f6:c4:03:cf:5e:b2:f0:d1:
                    19:e8:f2:9c:cf:27:5c:98:6c:d7:9c:a4:c8:0d:a3:
                    6b:8f:6e:f4:81:61:1b:ad:e9:d3:fd:89:ea:b8:66:
                    ff:6f:81:c2:89:eb:8e:53:2f:d6:ec:68:fc:10:df:
                    f0:8b:b0:03:ff:3b:2c:ce:c1:a8:05:e4:08:49:19:
                    26:f5:8a:ef:f5:b1:db:c1:ea:ad:8a:88:46:3c:c1:
                    c5:42:5f:e8:b9:63:d8:71:5e:cb:f9:9b:63:fd:e6:
                    a0:2e:dc:da:44:c7:b0:3e:a2:5f:31:54:e4:a1:e5:
                    f6:db:03:ed:4a:20:26:12:0e:1c:d9:8e:4d:89:33:
                    cc:c4:95:19:94:88:dc:8f:ec:dc:63:1a:02:27:7a:
                    3d:44:7b:47:27:26:ad:99:c8:2e:cf:93:36:ea:f9:
                    57:1c:2e:f2:c5:40:ac:fe:c3:91:1f:64:40:6f:95:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:0E:82:93:54:36:DA:C7:F7:40:FF:D9:94:43:A7:A7:45:82:9B
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:52:2c:2c:af:1b:e8:76:45:da:42:f2:66:9f:50:d7:c4:
         e1:af:44:c5:6f:c3:f3:8a:17:59:7a:55:5c:29:c2:40:ff:e0:
         dd:58:14:31:21:06:ac:49:29:b8:fd:77:2c:c4:3d:e3:28:8e:
         ec:a6:45:88:3e:28:c0:d9:e7:0c:8b:ff:ae:6d:6a:cc:ae:ae:
         58:66:86:2a:28:3e:96:21:9d:c2:08:a2:b8:72:ff:48:c0:e2:
         af:a4:47:a9:99:48:97:ce:80:25:a5:bf:f0:0d:35:bb:1d:c8:
         36:37:83:f3:1e:eb:56:b4:ab:dc:d8:4f:e8:4f:f4:f3:ff:98:
         93:2f:ee:8c:8c:6c:24:61:34:d1:01:ec:ad:52:4c:26:cc:da:
         9e:25:06:29:fa:89:07:fe:6f:1c:c4:8f:96:4f:ce:64:95:01:
         18:d3:71:77:d3:65:fe:b2:d7:57:9b:77:81:e6:33:ae:c1:76:
         dd:4d:ae:48:c2:60:78:1a:69:21:6e:54:fc:0d:f3:82:7e:e2:
         bb:0c:c1:38:5a:8e:34:ca:e3:0b:6e:9d:e0:d8:ad:c1:83:36:
         6d:2a:bd:b0:6e:1a:e9:27:78:2b:9d:96:6f:a9:51:35:ec:a8:
         6d:32:04:20:ea:e1:3c:83:26:48:c3:79:2b:82:24:94:ce:1a:
         56:5a:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:42 2024 by rpki-client on console-fra.rpki-client.org