Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File:                     fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier:          e9vQX8rZQkpiotrGUegTY7MTJINlCS7lJjHBIyOnW+g=
Subject key identifier:   47:74:5F:8B:3D:0C:D3:4C:CB:12:A0:FE:64:8C:1C:5A:78:BD:40:23
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer:       /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial:       018F8749E6963D59732C01747D71BCA66275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number:          09BF
Signing time:             Fri 17 May 2024 16:01:58 +0000
Manifest this update:     Fri 17 May 2024 16:01:58 +0000
Manifest next update:     Sat 18 May 2024 16:01:58 +0000
Files and hashes:         1: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: crQHxWKsprmCwMlxI3/KrvvgeZPh7OEExldKZE+xPxg=)
                          2: vYujAm0GTTMu5nxMyzvZIetpjH8.roa (hash: whnAkLbxuvT16RYWTvmize9sMISE/swDlxbAnZUNL3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e6:96:3d:59:73:2c:01:74:7d:71:bc:a6:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
        Validity
            Not Before: May 17 16:01:58 2024 GMT
            Not After : May 18 16:01:58 2024 GMT
        Subject: CN=47745f8b3d0cd34ccb12a0fe648c1c5a78bd4023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:4a:39:ca:dd:28:4b:0d:b1:9e:ef:21:41:
                    80:ba:77:e4:87:9e:8e:1a:e2:89:1a:20:6f:fd:22:
                    83:c1:23:0f:d1:6e:ab:06:fc:38:8f:bc:ac:d0:dc:
                    10:03:ef:2c:b2:13:c1:52:08:95:5e:05:0e:31:a3:
                    c0:f2:88:dc:b0:47:2b:e3:78:c9:4e:74:9a:54:b9:
                    b7:d3:c1:a8:7b:7f:96:a7:aa:8a:82:46:33:a7:5f:
                    e9:05:2a:5f:48:02:84:4a:00:2f:e3:9b:b9:d8:60:
                    41:31:bc:1d:6d:c3:0a:0f:f0:35:20:18:45:dc:1e:
                    de:79:c3:9b:aa:ad:0e:7b:01:d7:6c:c4:be:37:fb:
                    c4:6b:66:08:ca:ef:5b:5e:78:8a:df:3e:f4:8d:44:
                    bc:ce:fb:1c:40:08:47:10:3a:bd:74:8e:c5:8a:4f:
                    1e:f5:05:bc:58:80:4a:ed:ce:6a:51:5e:e2:be:6f:
                    9b:43:09:ea:14:ca:18:34:60:1b:0b:1d:81:0a:35:
                    7c:aa:3b:5e:32:7d:11:70:ff:dd:5d:b4:b3:e2:01:
                    58:a3:6a:21:4b:cf:d8:4b:72:f3:33:27:49:a8:6e:
                    60:41:22:f8:c9:2a:66:c1:75:85:00:1c:89:1a:2b:
                    1f:62:af:d1:54:ea:bf:b7:7f:29:9b:86:35:f0:30:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:5F:8B:3D:0C:D3:4C:CB:12:A0:FE:64:8C:1C:5A:78:BD:40:23
            X509v3 Authority Key Identifier:
                keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:d8:f3:39:76:35:0b:56:8f:35:65:23:97:c0:37:1c:d3:
         37:80:f3:98:e6:1c:36:6c:42:f0:51:3f:b4:9c:65:83:ce:16:
         27:72:74:ee:95:64:bd:a6:93:bc:f5:44:9c:03:12:ab:ea:20:
         0e:20:24:23:1e:54:57:90:ce:80:b0:56:99:2d:47:80:ed:23:
         04:b1:0c:31:34:56:89:07:38:24:bf:42:da:ec:d1:e4:0e:79:
         8e:e7:7a:06:d2:16:7f:af:15:13:68:89:b0:9a:00:93:59:56:
         d3:59:c0:fa:18:54:88:d6:d4:79:1d:46:e0:c7:01:71:7d:67:
         27:1c:e8:96:42:69:06:9c:57:4d:9e:b9:73:0c:7c:37:f3:ea:
         83:58:53:d3:e7:20:23:43:7e:95:2c:80:3a:02:02:fa:26:b2:
         22:fb:ef:06:b4:d4:91:e2:27:31:9c:d4:af:90:e5:fb:58:b3:
         41:44:3d:1c:e3:75:0c:ca:51:15:a9:50:62:66:2f:7d:69:39:
         18:f3:fa:08:c1:a0:22:fb:51:ca:1a:8b:b0:39:55:26:dc:81:
         9f:68:6b:2d:b2:d7:f3:43:b4:38:b4:33:bb:72:4f:0a:67:98:
         df:1f:10:bb:b4:61:87:6e:bc:fb:bd:e4:3c:8c:b5:d4:e4:43:
         dc:be:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:09 2024 by rpki-client on console-fra.rpki-client.org