Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File:                     Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier:          5LzEdhViCbyov6baV8F+4b2rqZKEZbF5MQvkSceXK7o=
Subject key identifier:   9B:7A:E5:94:D5:39:A8:AB:4F:0A:36:0C:0F:59:BE:D6:B2:B7:F1:E7
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer:       /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial:       018F4DC81C28143BBAF4B7D320739A5A0C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number:          0A02
Signing time:             Mon 06 May 2024 12:01:50 +0000
Manifest this update:     Mon 06 May 2024 12:01:50 +0000
Manifest next update:     Tue 07 May 2024 12:01:50 +0000
Files and hashes:         1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: V1+OsDWqe379gH9BXouzqFPMC+PePmXJ5HZr4Wc/wPw=)
                          2: FkyO85bK93iPgrxkiUvYye6Q2qY.roa (hash: INhmZNRxS2us8zgQ8p8muSu7SHv7mZMIb/0cUInBjRE=)
                          3: KFkK81hwTMtDX0ohSkERUdloN7E.roa (hash: TKEoWIReRyW2yYoxDo5E9hkfEJMEI0DuLA4nXyvX0UM=)
                          4: Nvt3Okm51TLVbvrR7V7LH-oH_X4.roa (hash: Z1rzb/MZtdgB0qaNHODQFd/Hn4VEC45Z0AnkXZuMb7s=)
                          5: nyGWsnDuRlSSnqIUHFI4I3R0hwI.roa (hash: 5lwQMCxWoeHMeRTbQbk8ahKqjCOjk2e3XI1pPawbv1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c8:1c:28:14:3b:ba:f4:b7:d3:20:73:9a:5a:0c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
        Validity
            Not Before: May  6 12:01:50 2024 GMT
            Not After : May  7 12:01:50 2024 GMT
        Subject: CN=9b7ae594d539a8ab4f0a360c0f59bed6b2b7f1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:12:40:89:2a:3e:5e:7c:99:dc:b6:98:ff:
                    45:0e:e9:58:49:e6:34:27:22:c4:68:0a:05:ad:3e:
                    0d:d3:40:a5:bd:09:54:10:f3:13:22:77:0f:f1:fb:
                    c0:ed:d3:d8:f8:b4:dc:d7:38:08:10:32:33:8a:7b:
                    48:41:3f:bf:47:fe:3c:fd:4f:af:38:36:0f:8e:7e:
                    35:90:2b:a6:8d:3e:f2:4c:23:d3:02:ec:72:eb:bf:
                    e7:84:68:ad:c4:00:48:63:24:4f:68:a5:0e:05:31:
                    a3:0b:00:f4:d0:e3:e5:6e:a3:1c:70:ac:e2:66:be:
                    52:10:b2:1d:34:72:b1:d3:95:65:67:04:02:9f:d4:
                    75:80:8f:ce:61:da:44:0b:3d:66:86:7a:ac:53:99:
                    c1:07:43:11:c2:aa:1a:1f:f5:d4:5c:99:60:7c:2a:
                    be:dc:ea:10:ab:64:71:dd:d7:85:bc:a3:a1:bb:46:
                    7a:cb:bc:96:69:e1:e9:3b:7e:2c:65:fc:0f:06:ee:
                    59:f6:ae:ea:04:83:e3:a2:46:a9:58:d1:66:5e:68:
                    14:f1:a4:c5:f8:36:c1:24:53:27:b4:5b:14:1a:27:
                    8c:f2:61:2f:a3:94:48:b7:a8:88:94:16:33:03:95:
                    26:64:6d:df:6b:e1:13:df:f6:4e:5d:13:2c:2a:89:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7A:E5:94:D5:39:A8:AB:4F:0A:36:0C:0F:59:BE:D6:B2:B7:F1:E7
            X509v3 Authority Key Identifier:
                keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:ec:3f:7c:64:01:5b:d2:7c:d3:76:9e:14:bc:4b:f6:7d:
         de:52:bf:f3:cc:8a:d6:27:64:11:4d:d2:12:d7:9d:b5:8e:3c:
         24:56:e7:33:33:8d:4d:d0:a0:7d:3a:61:a3:e5:01:f1:e5:f3:
         d2:aa:0b:df:e1:b8:03:d4:da:09:a3:5b:e9:71:5d:a5:6b:32:
         75:7a:39:db:c3:32:f8:32:14:10:90:9d:25:64:d6:dd:e4:98:
         a0:5e:ee:97:65:2d:a2:82:79:c1:b2:6e:fd:8c:57:4e:7c:8d:
         81:4c:4c:1b:33:4b:ca:b2:1e:8f:b2:24:ab:8e:ff:a6:61:89:
         75:c8:e5:11:bc:6a:40:13:b5:20:5a:4e:46:52:5c:4f:dc:6a:
         93:93:78:01:53:11:5e:6c:81:0e:6c:19:cc:74:c2:a0:0d:15:
         ce:4b:ff:49:12:74:14:27:37:1f:7e:3f:f5:14:d7:5c:92:e7:
         9c:58:53:85:c1:3a:74:4f:fa:97:da:0f:ed:ed:c6:36:02:c9:
         a0:21:7a:78:f4:02:ce:be:61:b2:6e:a1:4a:e9:31:7c:6a:b2:
         81:d8:d3:5a:ed:aa:8f:cf:6e:2c:45:99:0a:f3:85:ac:be:7c:
         f3:53:cb:5f:b8:3a:b1:e7:f9:15:3f:fd:9e:a4:93:61:56:53:
         20:b2:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:05:07 2024 by rpki-client on console-fra.rpki-client.org