Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File:                     z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier:          qDgNb06p79gvTLSC/0KXJxl2unKq2Te1U6Z5847U2jw=
Subject key identifier:   73:D3:7A:96:D8:4B:C1:54:BB:80:4B:26:A4:D6:B9:30:E3:1A:9D:1B
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer:       /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial:       018F8892750B9B510AF7D1327AE9282154D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number:          0765
Signing time:             Fri 17 May 2024 22:00:50 +0000
Manifest this update:     Fri 17 May 2024 22:00:50 +0000
Manifest next update:     Sat 18 May 2024 22:00:50 +0000
Files and hashes:         1: 5zNQmjLe9hugNqe1cSGUFfcrX4A.roa (hash: 86fsNTBHQhQVftXksNo/YbxCNnmrGt7DBJr1/op1c70=)
                          2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: 9HGM4LKylOmS60Hgep6BDta0jXxXIN6j7GUcsnfqqhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:75:0b:9b:51:0a:f7:d1:32:7a:e9:28:21:54:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
        Validity
            Not Before: May 17 22:00:50 2024 GMT
            Not After : May 18 22:00:50 2024 GMT
        Subject: CN=73d37a96d84bc154bb804b26a4d6b930e31a9d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:a1:1a:9d:d0:5c:c9:8d:c1:69:d5:6d:0b:
                    51:98:b1:67:84:d2:45:9c:a4:bb:4a:82:23:01:6e:
                    55:4a:cb:98:3f:df:22:d3:00:f4:aa:1d:17:d1:dd:
                    72:8b:ef:96:39:35:a7:c6:31:9a:56:24:3c:8e:d2:
                    5b:2e:99:c8:4b:15:d8:c3:0a:06:d8:04:e2:a3:32:
                    a2:90:b1:d6:d4:48:18:33:73:33:75:48:76:ed:95:
                    d1:f4:29:38:03:ea:ee:77:d9:45:58:58:40:9e:2c:
                    e5:16:42:d2:e5:a7:a7:cd:30:a6:2e:e4:65:4e:46:
                    87:12:df:08:6b:e1:ec:45:68:1f:ef:c4:13:65:e8:
                    cc:2c:97:a2:3b:37:97:45:e5:85:10:f7:05:5c:7f:
                    22:9e:97:4c:53:df:15:51:97:8c:68:16:e3:b3:35:
                    cd:62:c8:69:fb:e1:0a:58:ea:db:f2:38:e4:9b:d7:
                    f9:f4:8a:4f:14:70:80:8c:1d:67:33:50:ae:47:c6:
                    91:44:c4:42:b1:8e:cb:54:fe:c8:cf:62:c1:60:57:
                    bd:a6:30:e7:0d:25:ae:91:f3:59:83:20:49:72:2e:
                    c2:f9:0c:75:3b:dd:42:f3:1c:ad:72:bd:6e:de:8a:
                    b1:80:cd:52:04:66:ce:81:fc:aa:03:43:4f:1a:54:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:7A:96:D8:4B:C1:54:BB:80:4B:26:A4:D6:B9:30:E3:1A:9D:1B
            X509v3 Authority Key Identifier:
                keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:a3:53:e4:74:8b:3d:1f:1a:fb:7f:9a:31:28:68:de:af:
         c2:28:c3:31:1e:2c:e1:f8:07:5e:f6:0b:3f:fa:1f:16:c0:db:
         4a:01:61:fc:27:5d:be:a1:54:1f:d2:44:9f:f8:0a:60:77:c9:
         50:4f:34:7a:9f:86:a7:00:98:4b:37:81:fc:ff:59:13:b7:8d:
         95:11:70:51:a3:d8:67:19:59:35:90:bc:44:1a:ac:b8:a9:c6:
         f3:af:82:29:5a:20:10:c9:73:19:ca:d1:48:25:69:54:67:89:
         8b:fe:09:99:c6:d4:bc:25:2b:4b:73:91:85:f1:b2:a5:b7:de:
         31:f6:a6:14:5e:16:32:82:99:7a:72:45:14:34:74:38:8f:1a:
         9c:be:fd:54:c5:6d:c4:55:f0:68:d1:68:0f:36:71:c9:64:8f:
         b3:c2:f1:dc:2f:15:1d:00:54:06:d9:1b:2b:38:97:e4:12:4b:
         0d:57:68:b4:60:85:77:cd:81:ae:87:51:9b:81:3e:5f:5c:aa:
         ea:6f:db:62:2e:91:fd:ee:b9:10:98:3d:6a:47:d5:08:6e:cd:
         49:03:5a:f5:f8:22:fe:33:7f:84:10:63:c1:c1:bf:35:83:d7:
         1b:53:f3:d4:2b:24:3d:8f:cb:5c:eb:9b:5c:71:dd:b1:2d:94:
         f0:a9:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:57:02 2024 by rpki-client on console-fra.rpki-client.org