Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
File:                     z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft (raw, json)
Hash identifier:          p1gMRqqCcG0W0LixdrRYoydiXP4W6yPCmaHqVi9s1+U=
Subject key identifier:   BC:34:F3:6B:E3:0B:68:35:49:51:BF:2C:4B:74:6E:E7:D0:11:EC:91
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Certificate issuer:       /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial:       018F8823FBC307632D9374B09D0218E0DF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
Manifest number:          04BE
Signing time:             Fri 17 May 2024 20:00:10 +0000
Manifest this update:     Fri 17 May 2024 20:00:10 +0000
Manifest next update:     Sat 18 May 2024 20:00:10 +0000
Files and hashes:         1: qI9xKuGwZqJ_yh1CxclADaTIKfE.roa (hash: YILCZ7nJwwr3ngz1pUV5YeoUhjVQhnyC0/vBCqADOa8=)
                          2: z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl (hash: F2YXBsRdWFJmEj8j+qONMGJmNsbqkW4ArwuH2qqPDck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:fb:c3:07:63:2d:93:74:b0:9d:02:18:e0:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
        Validity
            Not Before: May 17 20:00:10 2024 GMT
            Not After : May 18 20:00:10 2024 GMT
        Subject: CN=bc34f36be30b68354951bf2c4b746ee7d011ec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:5f:84:e8:f2:f3:0a:b5:a9:68:54:6b:d0:
                    6d:43:5e:12:a4:93:05:5f:58:d5:35:aa:6b:97:0f:
                    fa:05:ef:d8:4f:8d:14:4c:6a:25:a0:c1:30:56:d1:
                    3e:18:08:e9:1b:4f:96:ff:65:09:a3:eb:2d:23:d4:
                    c3:1a:a8:33:5c:dc:2d:33:6e:24:45:1b:29:34:89:
                    17:3d:b6:80:71:59:63:a4:2a:86:12:27:d3:9c:06:
                    3c:a5:fb:96:e7:19:46:44:ec:e3:a2:8a:ee:60:29:
                    78:71:e2:28:21:1e:89:ed:f4:47:a0:4d:20:d4:86:
                    c7:20:24:89:26:0d:de:a4:38:f9:42:a0:a7:1f:de:
                    a3:4e:6e:75:f5:97:57:1b:2c:3e:a1:a3:63:74:a0:
                    dd:87:b2:43:b0:cf:57:45:54:48:f2:1e:e6:5f:6f:
                    fd:2e:3b:cb:9d:3b:db:c7:3a:75:ec:5a:f2:3a:ef:
                    66:ef:ef:b1:14:85:54:95:d3:42:4b:d7:6a:c9:4e:
                    8a:8c:f4:44:50:de:99:03:7a:46:c0:f1:e9:dc:be:
                    ca:f5:7f:42:de:4f:ce:b0:2d:ab:86:ca:36:b7:6f:
                    ac:d7:93:61:3c:9d:e7:ce:c2:0c:7d:b8:36:7c:fa:
                    1c:a7:9a:65:fa:20:f9:47:99:77:a6:51:22:cb:b1:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:F3:6B:E3:0B:68:35:49:51:BF:2C:4B:74:6E:E7:D0:11:EC:91
            X509v3 Authority Key Identifier:
                keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:ec:11:dd:c6:8a:a0:f5:62:43:b1:63:48:2b:56:94:50:
         f2:b3:29:6d:ef:b9:4d:90:2e:09:68:07:d3:92:d2:66:d5:2a:
         79:da:08:8a:69:98:75:4e:f6:0a:c0:8b:6b:56:7b:6a:ba:76:
         12:b0:96:f7:f8:cb:0d:20:74:9c:91:9c:b5:b9:4e:51:29:f3:
         4d:a0:70:62:f3:1c:4b:23:03:de:9c:86:95:db:c4:b6:1e:ba:
         07:26:d5:c0:30:2b:96:84:15:d0:6f:c9:5b:cd:73:c4:ff:0b:
         1a:72:7d:2a:6a:47:0e:43:8a:57:bf:ba:da:51:22:d0:ac:3f:
         9f:86:17:b3:a5:88:3f:a5:71:c3:f0:a3:64:31:63:a3:af:48:
         62:31:d4:5c:98:23:85:62:e4:51:bc:9b:7c:04:7f:bd:ab:a1:
         0a:ab:45:71:53:5d:21:b9:6b:56:87:a3:d7:8d:7a:9c:6b:88:
         30:f1:70:ac:45:5e:cd:e5:7a:0f:c3:9b:d0:bf:06:7f:f4:33:
         ae:92:8a:64:15:3c:16:2e:1d:df:ec:94:d9:0d:1b:4e:78:b5:
         5b:e3:79:54:0c:41:02:b3:ae:07:96:bb:bb:df:fa:cf:54:3f:
         45:02:57:06:a9:ae:a8:ec:f5:66:07:4e:30:89:b6:0e:23:f7:
         3b:01:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:40 2024 by rpki-client on console-fra.rpki-client.org