Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File:                     Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier:          PRtxWDfVv5ucp/qm16IN9ybNLSsMykFHLt0Lt5Anf4Q=
Subject key identifier:   B6:9E:C7:6E:9E:D1:84:CD:E6:42:59:E7:6D:F1:50:A0:D5:C6:6C:2B
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer:       /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial:       018FF412FB9920A87932B2ABCC2629ED6C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number:          0EEF
Signing time:             Fri 07 Jun 2024 19:00:35 +0000
Manifest this update:     Fri 07 Jun 2024 19:00:35 +0000
Manifest next update:     Sat 08 Jun 2024 19:00:35 +0000
Files and hashes:         1: 8V9ufGRAHMrpYOO_0r-3fBiZTds.roa (hash: GnF+ctk4EvepyJM6on6Hdeo4tTOyCHjtu7CIh5uxrYU=)
                          2: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: ATs47M0FchtlDEcWDqvQYbyXykDxha7+Tu21cjIl8xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f4:12:fb:99:20:a8:79:32:b2:ab:cc:26:29:ed:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
        Validity
            Not Before: Jun  7 19:00:35 2024 GMT
            Not After : Jun  8 19:00:35 2024 GMT
        Subject: CN=b69ec76e9ed184cde64259e76df150a0d5c66c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:5f:d9:ba:68:72:13:b8:25:95:80:52:27:
                    38:a2:a1:1d:7c:eb:31:46:f5:6a:34:73:70:90:ab:
                    c9:3f:3c:00:66:a1:c6:71:c9:6a:cb:7e:db:74:5a:
                    d7:b8:c4:e2:11:91:49:4c:c2:05:1d:4c:c3:21:d6:
                    81:0f:47:de:67:2b:ee:0a:c7:11:d6:d8:f2:14:25:
                    c8:ce:7b:18:5e:d3:80:32:47:39:79:57:ed:dc:d2:
                    b3:37:f7:bd:46:dd:d4:de:b2:23:92:79:83:d2:8c:
                    9d:a0:66:2c:4a:ff:5b:e9:80:81:e4:92:85:0f:62:
                    cc:8a:ce:8b:13:6d:de:b2:3a:b0:77:7a:e0:cc:9b:
                    60:35:6e:f6:27:8b:ec:d7:3b:b1:e2:c4:fd:47:76:
                    da:9d:79:70:ce:59:9b:dc:13:81:07:01:22:44:64:
                    ac:70:ce:13:5a:f8:06:86:e0:35:3a:a1:fe:c2:83:
                    2f:16:38:22:b5:a3:8a:7f:7b:f3:b3:5e:0b:24:87:
                    bd:62:c8:05:20:19:18:7b:b9:af:eb:f9:cf:70:d1:
                    3d:d3:07:e3:e5:83:1a:b1:a0:a5:d2:35:db:82:05:
                    2c:1c:f1:95:68:09:a3:fc:cb:9d:f7:96:9d:f1:5b:
                    9d:98:59:e8:c9:34:28:75:28:34:f8:a7:77:ae:59:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:C7:6E:9E:D1:84:CD:E6:42:59:E7:6D:F1:50:A0:D5:C6:6C:2B
            X509v3 Authority Key Identifier:
                keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:75:c4:e0:d5:a8:0c:62:d2:70:be:4e:79:de:9e:89:60:9b:
         ab:77:84:ca:84:b2:7e:05:25:8a:a7:cc:e0:62:a3:9b:2f:ba:
         d5:27:28:18:17:21:95:75:14:92:6f:48:0a:be:2f:c1:bb:75:
         2b:b0:b7:d7:c9:2d:5e:34:c5:cf:83:3e:24:26:ce:08:a6:5b:
         11:a0:5f:09:15:de:ea:34:f9:5a:1f:a4:70:75:53:b0:d4:9f:
         bc:7c:ee:f1:fa:07:6e:f4:47:52:1d:6a:6d:6e:1d:8c:76:f4:
         74:89:bc:0d:63:aa:07:ea:ce:bf:aa:d9:a0:4c:4d:9a:ca:04:
         23:3c:6d:a1:b0:87:91:26:53:43:2a:4b:ff:9c:03:d9:ac:62:
         6b:fd:d1:49:2e:01:82:af:d8:51:8a:97:46:94:01:0d:88:9f:
         ad:82:c6:4c:84:91:de:1e:98:87:96:59:57:d7:f3:0f:52:2d:
         f3:07:08:64:6a:17:7d:c8:5b:8d:d1:07:45:4c:c8:73:2b:8b:
         29:6e:3e:6e:64:67:a1:57:fa:a7:ba:4c:a2:77:2f:53:dc:58:
         53:2b:ee:a3:f1:70:0f:1a:5f:d1:dc:a0:1f:cf:1f:9c:88:52:
         17:10:15:f1:d9:ba:34:09:3b:59:ac:59:a5:29:29:43:bb:77:
         84:38:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:34:03 2024 by rpki-client on console-ams.rpki-client.org