Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          yv+83jFmAk02kx5nbXz2CzHPvqKEEzo32YfYXFNOW5c=
Subject key identifier:   0A:E5:3B:E7:FB:2A:CD:CE:79:69:65:AF:79:3B:A4:CB:3F:35:EB:7B
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       018F87B6878B73583403BD9727FEC6A9B50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: 1kXCmZ3T5wjald1xv2BIhebGIi4.roa (hash: VW3oWASa2FrcBonnSV/d3f0Nc4c+GA/Hf3gp7KUw2e0=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: zxKDgAUtIX6lLIaRvzj3wjt4HWr2dFcMcR5XQBzymcs=)
                          3: UNJjMCplT7drwMEi1_jmIas2fHk.roa (hash: kH4zp9MLXj5ujipgU7glQp84vAI8/lqSpXfcAjXVQvU=)
                          4: tgbdLwekXuvVdgg5GtF4wLKdQVY.roa (hash: uTMV7mXiMEuwkA/BmqQlStt1WcDSEX+WJq5XIKNNE4M=)
                          5: wm21lM5E1OHTZv85CK-SP_xfgMs.roa (hash: 0+J3pmGbRf7xhKyzxQNPnRm8cHm2CCWNtBJBm88I5XM=)
                          6: znoaFyuYMQ5xC9RwGFXYnq_2Qzo.roa (hash: 2Yu9BTiaAIU2K7j4Unk6U6fT5IviFDz3Aw7du7s0Lc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:87:8b:73:58:34:03:bd:97:27:fe:c6:a9:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=0ae53be7fb2acdce796965af793ba4cb3f35eb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:e8:0b:ca:c0:c2:d2:45:cf:06:5c:52:51:
                    7c:78:31:5b:57:d2:0b:b4:bd:22:f1:74:2f:fd:c6:
                    c6:fb:2a:c2:66:7c:51:54:5e:7b:bb:70:be:94:3a:
                    0b:38:1e:ed:15:59:db:b0:e1:d2:b7:9e:2c:65:06:
                    86:30:c7:0d:02:c4:b2:48:74:74:44:dc:1c:35:61:
                    33:76:7c:fa:fa:a3:cd:18:42:50:f8:61:69:12:ee:
                    b7:6b:4b:68:48:cd:18:30:8f:d0:98:2e:94:5f:b0:
                    e3:01:7c:0c:88:01:f7:8c:1c:da:f5:df:9d:b7:32:
                    75:2b:64:ea:8b:31:a4:85:68:74:a3:67:01:55:13:
                    f6:d7:a7:5a:b5:25:02:91:7f:aa:24:0b:7a:cb:57:
                    0e:dc:a3:35:29:42:1b:2f:05:60:c3:72:bb:6f:d2:
                    31:16:dd:68:4a:04:b0:8d:43:69:80:09:78:08:2d:
                    3a:a9:c5:56:70:3b:61:73:9a:05:a7:d0:58:80:ad:
                    16:b1:2a:be:97:91:30:05:fa:78:cd:58:db:79:e5:
                    76:f1:03:56:b8:0a:0c:b8:8d:1d:ae:33:56:b9:7f:
                    60:e5:80:30:7e:83:51:62:82:2a:7d:6a:4a:4e:29:
                    31:7f:ff:64:a8:60:67:8f:30:31:b6:5f:34:f1:2e:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E5:3B:E7:FB:2A:CD:CE:79:69:65:AF:79:3B:A4:CB:3F:35:EB:7B
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:7e:a7:e7:a5:5c:dd:9f:dc:b7:b8:ff:a2:63:c0:26:a5:
         1e:ca:1e:86:2d:6f:6c:f3:7e:57:3f:0a:8d:fa:61:0b:37:74:
         43:ef:3f:59:92:b5:66:4e:2b:43:6e:ec:c1:38:e7:0f:84:4f:
         d5:30:f5:7c:89:fb:61:51:0a:06:16:52:37:a2:32:9a:00:37:
         04:d9:b6:4b:24:98:57:14:4b:ac:80:6c:2f:11:0b:b1:2f:ba:
         55:95:5b:a0:05:13:99:17:e8:db:8a:a3:d6:96:e9:61:a5:ed:
         dd:b7:6f:f2:f4:c4:1d:a0:26:e0:ed:7a:f1:47:09:ec:6c:ac:
         cb:4a:6c:92:c7:f1:f1:3a:34:3c:61:73:5a:9b:63:10:72:73:
         6f:28:b1:1a:21:08:0b:50:6b:0b:b3:d2:2a:1b:fb:e4:3f:7b:
         10:cf:7c:bd:d8:0b:30:16:b7:83:8e:d4:51:95:bb:f8:08:54:
         8a:7c:de:6c:b1:5c:81:a8:a9:c6:89:56:13:30:83:5f:a1:4b:
         38:c1:8b:3c:9b:6a:83:32:d5:c5:70:8e:55:ab:76:ef:4e:f7:
         03:3e:6d:e7:74:9a:6e:96:a9:c1:6e:be:75:87:cc:1c:56:7b:
         9e:a4:42:2d:4e:4f:47:ff:3a:b7:1b:fc:64:44:a9:6b:f4:3c:
         19:ca:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:03 2024 by rpki-client on console-fra.rpki-client.org