Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File:                     xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier:          ive4Y5DBwJqP93HPuICUeMKpgzK1VH+2C3q+vWIB1gk=
Subject key identifier:   23:FE:7A:9D:7C:BE:FE:CF:EC:EF:59:FC:B3:45:F4:85:A9:8F:4B:CB
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer:       /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial:       018F87488212BA8CAE93712CE078549A48FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number:          07DE
Signing time:             Fri 17 May 2024 16:00:27 +0000
Manifest this update:     Fri 17 May 2024 16:00:27 +0000
Manifest next update:     Sat 18 May 2024 16:00:27 +0000
Files and hashes:         1: j_fLnKtJ-5Tx0vVwCNIg3pU8O5U.roa (hash: H78q+AjxVSF06DFSnkkKSewSMoV1IINV7VZ/h1xYs8A=)
                          2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: Y3zOTXSoGRCyBVqZ2BHyQrhITpoz0jYh5iNT9onF6G4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:82:12:ba:8c:ae:93:71:2c:e0:78:54:9a:48:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
        Validity
            Not Before: May 17 16:00:27 2024 GMT
            Not After : May 18 16:00:27 2024 GMT
        Subject: CN=23fe7a9d7cbefecfecef59fcb345f485a98f4bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:c6:a1:78:ce:ab:9c:e0:a7:76:99:e2:fb:
                    6a:4d:6a:42:4e:b3:bc:08:aa:6d:1d:7e:d3:fa:25:
                    fd:64:b2:fb:32:a2:dc:30:13:d1:10:1f:eb:95:78:
                    c0:10:11:7d:1a:a6:26:14:99:8b:df:8c:6a:21:5f:
                    59:12:62:2e:54:4f:10:14:f2:1d:3b:fd:d9:6d:57:
                    7b:3c:e8:21:ab:39:30:6e:01:1d:a7:b6:34:46:39:
                    89:21:dd:36:4b:1f:25:75:26:a6:d2:4d:7d:6c:be:
                    b4:b6:3c:35:cd:aa:f0:a6:ac:46:8e:f9:30:68:ba:
                    47:4e:9f:21:7e:48:a4:81:de:76:d8:37:b0:d3:f1:
                    68:dd:c1:a8:af:f6:d3:2d:8b:f5:ed:ce:61:1b:4b:
                    03:ac:e8:04:2c:02:af:03:a8:3f:9c:39:3a:17:8f:
                    a7:25:07:49:db:26:3b:c8:86:69:7b:d7:25:da:38:
                    b5:13:06:33:0a:53:f4:cc:87:be:b3:7d:6f:af:02:
                    6a:75:37:da:27:13:29:5a:b8:ff:93:46:8c:49:06:
                    c2:8b:a3:a3:0a:cc:10:1f:00:4b:be:2d:80:c0:15:
                    e9:a3:df:17:cb:00:15:59:8f:ae:9d:52:f1:53:f4:
                    bc:78:8d:b8:12:2b:0d:76:20:6f:d2:25:80:2c:ab:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FE:7A:9D:7C:BE:FE:CF:EC:EF:59:FC:B3:45:F4:85:A9:8F:4B:CB
            X509v3 Authority Key Identifier:
                keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:1b:c2:0b:ac:4a:63:68:09:0b:f2:6b:d9:06:fa:a8:7c:
         7a:16:1b:7b:27:ec:a1:e4:7c:3e:88:07:c3:c2:c3:91:10:7a:
         2e:24:34:55:c1:89:3f:ea:6c:6b:27:57:ea:1b:a6:83:0a:71:
         20:9d:9c:cc:96:3a:ff:8d:a3:90:0b:09:f8:c4:37:46:f8:ea:
         07:f8:3a:2e:b2:0d:ef:19:66:2e:ce:d8:e4:5b:c8:49:c5:8c:
         ac:9e:78:05:bd:27:9b:d8:d9:b6:da:3f:2a:aa:52:3e:34:b7:
         68:ca:21:47:25:ad:de:41:54:1d:4e:80:94:6f:74:0b:71:99:
         2c:e5:f4:58:75:8f:44:d4:b9:4b:f9:04:fb:7e:81:de:a3:13:
         26:39:b2:9e:a5:a2:4d:c0:c4:dc:84:73:c7:5b:3e:ed:88:50:
         65:74:40:80:f6:65:7c:c2:b8:53:8d:8e:25:c3:c0:e9:a1:ec:
         4c:9a:7a:99:82:1b:85:8d:09:5a:39:3c:78:39:a0:90:51:83:
         f5:69:c6:9a:bb:9a:9a:5d:fd:d3:bd:1b:63:b6:e6:a9:67:9f:
         cf:51:5d:5a:24:41:28:30:bf:68:d9:03:bb:9f:2b:73:8c:36:
         b9:08:65:9b:c1:62:4f:a1:44:d2:23:69:b6:2e:57:b5:1d:3c:
         3d:11:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:10 2024 by rpki-client on console-fra.rpki-client.org