Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File:                     XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier:          GIDK89DVy78HpW+QCHsnbJvnmW+88ZcU8VXzpW1aZkQ=
Subject key identifier:   77:2A:B2:12:57:81:06:0E:A7:61:98:D2:3B:B7:C3:EA:AB:89:3C:A9
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer:       /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial:       018F8635F0CCCF76F410080DCE6D38F9223D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number:          C7
Signing time:             Fri 17 May 2024 11:00:32 +0000
Manifest this update:     Fri 17 May 2024 11:00:32 +0000
Manifest next update:     Sat 18 May 2024 11:00:32 +0000
Files and hashes:         1: 9l1IFGyI7hDV6Gft3Y9Oiqa0qoY.roa (hash: oYEXqJyD7+QimAjbpjPxjP2BJ1XTGZQPCuhvzszrMm8=)
                          2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: +8Y99Cw2tK+eZgZvpSVwISXF6DYGIVKxc9pp53N9oSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:f0:cc:cf:76:f4:10:08:0d:ce:6d:38:f9:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
        Validity
            Not Before: May 17 11:00:32 2024 GMT
            Not After : May 18 11:00:32 2024 GMT
        Subject: CN=772ab2125781060ea76198d23bb7c3eaab893ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:16:18:74:c2:da:cb:8b:ea:69:f8:88:5b:
                    a8:c5:31:6c:f0:c6:66:3c:8c:6f:24:06:1a:11:21:
                    0b:bd:57:02:5e:54:fe:b3:a4:34:56:ce:94:a7:8e:
                    91:c9:b3:c2:57:62:ac:26:1e:eb:70:33:6d:fb:f1:
                    f9:e0:ad:00:e0:6c:e0:68:83:eb:f2:3e:b9:3e:8a:
                    18:97:2b:d6:d5:0d:9c:ea:3c:0d:4e:8d:ff:34:42:
                    2e:90:d2:11:2e:9e:f4:47:9d:50:a7:5a:66:d0:ed:
                    fa:64:f0:01:90:6c:32:3c:65:74:6f:20:77:f8:9e:
                    1b:9f:ea:63:e0:61:4f:61:5c:6c:98:7b:d6:0c:3d:
                    f8:88:d3:ae:c2:3d:85:a9:f0:f0:49:7f:06:03:de:
                    ab:52:59:6c:a7:50:bf:b4:43:a6:15:4d:6c:17:6c:
                    2a:dd:63:b1:25:ab:8d:a4:b4:60:d0:3a:6d:4a:3f:
                    e8:75:95:83:e2:88:aa:e7:ff:e7:f6:a3:27:a2:91:
                    f5:cf:7c:06:7d:c5:3b:09:0e:84:40:7e:ce:d0:d7:
                    f6:87:d1:32:1a:58:40:8e:55:65:d0:a2:12:45:f6:
                    e7:e8:d7:1d:e2:2d:5f:57:48:1b:09:03:14:33:00:
                    a2:a8:03:9f:31:24:00:38:49:d5:f7:35:83:e4:f2:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:B2:12:57:81:06:0E:A7:61:98:D2:3B:B7:C3:EA:AB:89:3C:A9
            X509v3 Authority Key Identifier:
                keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:1a:9f:ee:41:c6:e7:d6:6c:d6:1b:aa:b3:90:b0:fc:bf:
         03:c2:e5:9d:b4:63:02:05:97:97:75:db:08:77:97:42:03:e9:
         c0:8f:5f:fb:4f:85:01:b4:01:56:08:06:ee:7d:91:30:dd:a3:
         e3:d4:a6:49:6e:6d:7c:16:0e:b6:e2:31:84:75:17:b0:f0:fb:
         1c:52:33:c4:67:a2:53:89:aa:11:13:bb:e2:74:77:39:9d:0f:
         f5:df:09:6a:4d:17:3e:e5:9c:26:ee:1c:2d:66:99:d1:23:2b:
         d5:0b:25:64:67:67:ed:60:56:10:18:18:8d:c0:b1:6a:d7:7d:
         e7:03:cc:53:0f:38:4e:65:2a:0d:6a:db:60:d3:96:a1:2c:fe:
         e0:75:be:3f:a6:c5:10:81:a2:8f:11:bb:32:11:f5:90:dd:5e:
         87:fc:cb:6e:cb:bf:a3:27:34:8c:a0:e2:e1:33:51:e6:c5:c6:
         f6:ab:c8:30:0a:92:60:71:03:98:19:96:f0:7a:33:23:3d:51:
         3d:40:df:64:26:44:d7:d7:7d:15:dd:22:92:91:86:d3:a1:4b:
         a0:37:ce:93:c9:ea:be:fd:75:e9:16:23:1b:69:0b:21:8f:77:
         9b:d0:8e:33:37:a2:ef:56:a1:73:24:73:85:7c:0b:97:f6:4b:
         5e:74:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:49 2024 by rpki-client on console-ams.rpki-client.org