Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File:                     _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier:          8pqPpSFpmXKQDZKWvo4GAYthi4gfALdejaDenLNJpUE=
Subject key identifier:   38:D2:9E:0B:73:D6:E7:B0:2D:75:16:91:18:A1:2D:04:3E:69:BE:44
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer:       /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial:       018F87B68EE2C343BA629E367FA8E6F23589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number:          0E7B
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: ZMGQbIrWPW_qshOhGoodUFskIps.roa (hash: V4WJ3AZAbMjMo/OJbN9aqckeJS2H33MH2TCPjK1QGbc=)
                          2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: Y0AZklseZfYrJya90stHVvF07TCa+VE0V6PEa+kIT5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8e:e2:c3:43:ba:62:9e:36:7f:a8:e6:f2:35:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=38d29e0b73d6e7b02d75169118a12d043e69be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:a0:cc:2a:2f:d1:a0:45:cd:53:78:28:e7:
                    eb:ee:c2:29:f5:d4:70:bf:ed:8f:a7:50:ef:d6:b5:
                    ee:33:ed:48:bb:cd:b4:b6:44:fd:0f:78:37:f1:be:
                    ee:6d:92:44:33:8d:bc:16:11:21:32:f5:ad:fc:18:
                    97:6b:22:80:51:82:2d:60:f0:64:3d:dd:ef:a7:e4:
                    f5:65:f5:94:46:de:b2:79:17:cd:7e:cd:0f:ab:40:
                    70:dc:ee:93:c9:51:d5:ea:46:ef:b8:c6:3e:a1:d4:
                    6e:b9:ef:61:14:03:9d:e8:39:cd:bf:c0:23:a4:17:
                    eb:09:41:cb:61:73:9c:3a:80:ba:af:32:28:83:8a:
                    fc:20:5f:1c:7c:03:f6:82:bf:2f:ba:88:3c:9a:da:
                    91:c2:c1:bc:d0:c6:68:a3:c5:55:65:76:51:48:20:
                    5f:40:91:de:15:68:3b:7e:36:13:36:67:de:d6:48:
                    30:d1:0b:65:0e:b8:5b:25:53:c0:f9:26:e5:0e:02:
                    e5:e4:6b:87:71:cb:2d:87:db:51:e5:50:ce:f7:9b:
                    7e:96:18:08:72:ff:fe:f0:5c:d1:e4:ed:79:1b:78:
                    f5:15:d7:1f:fc:bf:90:e0:c2:a8:8b:bc:e4:16:f9:
                    5e:b2:1c:8c:37:e1:a9:c7:95:79:99:7b:3f:c7:ec:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:9E:0B:73:D6:E7:B0:2D:75:16:91:18:A1:2D:04:3E:69:BE:44
            X509v3 Authority Key Identifier:
                keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:75:00:fd:c4:3d:e8:72:46:a3:56:7c:02:b6:6a:af:2d:
         e5:bc:8a:fa:bd:b1:35:fe:82:72:56:08:d9:e7:c3:21:2d:e5:
         3b:1f:01:be:34:cb:53:3a:22:94:33:82:ff:a1:3d:f1:eb:af:
         8e:a9:48:c0:25:30:72:0d:b6:4e:cc:6f:17:fe:a2:f0:8a:be:
         b2:78:3d:6c:5d:14:9e:16:e2:09:75:82:1c:f5:a7:56:97:9a:
         8a:79:59:eb:0e:83:41:ac:e1:f3:08:97:e4:29:e5:a3:74:b6:
         4a:3b:81:64:88:5c:85:7a:1c:7f:23:05:af:95:51:c0:19:4d:
         3f:14:c5:44:bb:8e:01:55:46:76:6c:2d:a9:62:c9:7f:5a:66:
         10:13:be:5f:9e:d5:b7:7e:e4:77:66:2e:ad:ed:2f:24:23:5d:
         12:f0:77:8a:dc:28:4c:e7:40:49:cd:ec:98:19:06:f8:b9:fb:
         0a:de:14:c2:e7:a6:ab:16:be:81:e5:2f:28:f3:c4:1a:d7:6e:
         42:76:3f:75:dc:98:a8:bb:2f:97:66:d5:a5:8c:02:43:9e:b9:
         6c:ea:7c:3b:de:2c:77:6f:f6:91:4d:bb:13:cd:1a:72:ea:fe:
         90:09:bf:76:73:75:87:86:76:92:84:00:da:c1:07:86:34:1a:
         11:ca:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:46 2024 by rpki-client on console-fra.rpki-client.org