Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          AtJxfGroKl0TO8UgwMsIEGA4ehoHXbFXaADhUnsU+Yo=
Subject key identifier:   7D:BA:DA:81:DE:68:5F:CF:5B:B4:5E:BC:3B:D1:EA:51:11:C9:9B:B8
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       018F58F2D577A2AE38ECA73D0925E1BD8C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          0BFF
Signing time:             Wed 08 May 2024 16:04:20 +0000
Manifest this update:     Wed 08 May 2024 16:04:20 +0000
Manifest next update:     Thu 09 May 2024 16:04:20 +0000
Files and hashes:         1: 3SiH7vWZJYK98YucOjZuORXP91E.roa (hash: h3WWHDYmDWLuhrC94jdwYZ5tGZSBi31i8Hh1d2yfRt4=)
                          2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: sZaog8dB2piooxIXsD4Jwi5v5tx98/2RO150y31KzPM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f2:d5:77:a2:ae:38:ec:a7:3d:09:25:e1:bd:8c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: May  8 16:04:20 2024 GMT
            Not After : May  9 16:04:20 2024 GMT
        Subject: CN=7dbada81de685fcf5bb45ebc3bd1ea5111c99bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:3a:7b:df:be:03:57:59:cc:4c:6c:97:8b:
                    7e:70:d5:df:91:41:9d:53:9d:82:30:4b:ba:55:18:
                    0a:d8:fb:35:92:c2:48:e1:93:cf:90:19:2d:be:81:
                    c1:e9:b5:46:65:19:c4:da:68:65:47:9e:ff:01:65:
                    7b:6c:b9:58:14:29:90:c7:5f:6f:13:79:0d:5e:c9:
                    72:d1:b4:a8:9e:5c:af:e8:f2:e9:bb:cc:c4:47:91:
                    2f:14:bd:4c:78:f4:46:7d:16:a4:32:7e:73:55:14:
                    5c:e5:99:5e:a7:21:ad:a8:9c:68:c1:c6:33:ee:c6:
                    0a:8a:af:97:79:36:22:48:b3:53:cf:f0:ea:52:7c:
                    37:55:ff:10:0a:b0:e6:0b:a2:24:1f:47:14:fb:39:
                    ae:e7:17:d6:ca:60:7d:28:fe:22:91:fc:f1:ad:42:
                    50:bf:b1:98:ac:ea:a7:cc:19:40:18:c8:02:2f:15:
                    80:00:a2:ef:20:7b:8f:b4:67:81:88:24:70:8c:5b:
                    e9:47:31:f5:b3:c9:58:81:90:f2:2d:24:96:4b:01:
                    e8:88:88:10:19:d6:fa:5d:7f:fd:88:75:2d:89:2c:
                    d4:58:69:1c:59:21:11:33:67:92:91:ac:67:f2:fa:
                    48:40:aa:54:92:70:72:6e:60:af:22:e3:ee:91:47:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:DA:81:DE:68:5F:CF:5B:B4:5E:BC:3B:D1:EA:51:11:C9:9B:B8
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ae:e4:41:14:b9:fa:7e:ec:92:1d:b7:c1:b5:0f:74:0d:11:
         79:56:23:f1:4a:63:6f:68:a3:5c:09:c4:61:2e:64:b5:07:85:
         cc:39:2c:b7:f8:c8:46:5f:27:74:1c:65:0e:63:95:d9:ce:7c:
         d8:00:d9:8c:8a:a3:67:5c:2e:32:c9:f9:fb:5c:c9:4a:c4:cc:
         10:4b:2b:55:de:f2:12:ff:49:c3:92:90:25:7a:ec:20:2b:bb:
         3b:8a:cc:60:68:1f:5b:88:77:6d:ac:8e:93:2b:c9:70:13:1c:
         33:a6:d8:43:8b:0a:18:d2:5d:77:60:69:01:29:59:2b:46:b1:
         ae:33:ed:88:b7:a3:fe:04:d6:44:d6:01:d0:6d:e1:4b:1e:d4:
         03:fb:ca:4b:ee:5c:ea:98:8f:a4:d8:00:c7:a2:7c:65:54:f8:
         ee:ac:37:df:88:cb:e1:b9:54:b7:b4:47:70:0c:b5:f5:3d:bc:
         15:e8:6d:44:2e:ac:74:ef:02:eb:59:33:ae:49:91:92:e8:03:
         13:ae:0f:79:c5:d2:64:f1:bc:54:5f:ad:02:4d:95:83:a2:50:
         53:08:fa:ca:5a:23:90:36:8e:de:fb:e9:a6:d1:4f:94:be:47:
         17:f9:1a:b6:58:b0:a5:d5:e6:79:97:56:f7:98:2c:77:21:69:
         bd:d2:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:01:39 2024 by rpki-client on console-fra.rpki-client.org