Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          6tlKfs6Jjy5EN2nWmO5A5uRkoqA8+oybu8o7T8wXx/s=
Subject key identifier:   B1:4C:F6:BA:E2:EC:85:05:23:CA:91:7B:A0:99:80:43:C2:E1:EB:AF
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       018F87486D2746EF8D2460DFB278CD057298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          0BDA
Signing time:             Fri 17 May 2024 16:00:21 +0000
Manifest this update:     Fri 17 May 2024 16:00:21 +0000
Manifest next update:     Sat 18 May 2024 16:00:21 +0000
Files and hashes:         1: dxDgHKlUwmAhhERgwp5qhD8Obus.roa (hash: 3lMoJ09W2SK0IQVQVC6l9G7H7+ydVSg14rBfcdmVIuM=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: R4Z0G4dsYHZR7rX98iFPVxuMTgd0AyDpYqxCinTTS5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:6d:27:46:ef:8d:24:60:df:b2:78:cd:05:72:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: May 17 16:00:21 2024 GMT
            Not After : May 18 16:00:21 2024 GMT
        Subject: CN=b14cf6bae2ec850523ca917ba0998043c2e1ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:cc:32:4f:62:1e:f6:40:a1:35:7c:44:de:
                    df:d3:f0:76:18:d8:e5:9a:48:a6:80:93:f7:dc:c6:
                    44:0b:64:c7:2c:fc:e0:71:09:8c:8d:14:82:62:7b:
                    28:6f:bd:7f:3d:4c:e8:b0:26:64:9d:44:f9:3e:06:
                    c6:4b:55:a0:ba:f1:d6:47:2a:58:37:8c:32:89:95:
                    45:5b:52:68:6d:69:c5:e6:bf:0d:73:9d:89:34:e3:
                    46:93:a5:ab:78:6d:4d:25:57:6f:6a:be:92:ff:4e:
                    47:1d:f6:06:7c:6f:92:83:64:d1:f3:44:eb:56:fc:
                    d4:4d:af:1a:48:70:2d:7c:d2:87:c2:9c:05:a7:ba:
                    bd:bd:08:a5:7b:0d:f7:9e:a3:15:d0:67:9e:7a:25:
                    23:0c:a3:af:d5:6e:7e:0a:8e:0d:82:02:ed:2a:5e:
                    6a:26:04:ac:42:57:1c:db:89:dd:7d:68:d5:b8:97:
                    21:43:91:2c:6a:7a:84:2a:95:88:db:5f:7a:52:15:
                    54:c4:a6:94:c8:4a:ff:9a:99:af:ed:34:88:d0:ab:
                    7c:4e:5f:9b:16:c0:78:a5:5d:08:61:37:0e:70:31:
                    7c:6b:95:d7:08:10:f3:b8:07:fc:56:5f:c7:64:1f:
                    12:32:e0:1c:7e:08:20:a9:84:6c:63:06:1e:63:f8:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:F6:BA:E2:EC:85:05:23:CA:91:7B:A0:99:80:43:C2:E1:EB:AF
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:b3:4a:5e:1a:4f:37:45:01:46:14:f4:42:3e:fe:20:ad:
         20:08:2b:8a:63:9f:1e:56:6a:50:69:46:1b:05:8c:14:63:2b:
         c0:67:92:61:54:89:01:99:c6:15:c1:06:f2:c1:f8:24:4d:47:
         5f:86:10:09:d3:b5:eb:a8:93:b9:6a:99:4d:48:e9:22:2f:6c:
         65:ad:c5:3a:87:a4:10:0a:ab:db:16:f9:d0:a3:c8:86:18:9d:
         1c:a8:f2:99:52:16:b3:f3:15:27:26:c9:ae:57:10:c7:de:f5:
         19:8c:1b:a5:fd:f1:55:4a:7d:91:83:8b:2e:73:88:6e:07:28:
         12:70:18:7c:e6:0c:97:a6:55:29:b7:1f:45:89:dd:28:52:a8:
         0e:c7:f2:2d:e3:27:14:3d:df:9c:32:ac:cc:80:47:be:dc:62:
         7f:48:21:c7:49:82:b2:7a:4b:4a:bb:47:86:6f:10:c0:64:52:
         55:71:c4:38:1f:11:d8:c1:84:8e:ca:d1:09:2d:21:34:f4:2e:
         3d:dc:2f:37:09:41:b8:59:73:1b:4f:39:e1:55:2f:af:a2:83:
         16:f4:60:80:2f:d4:43:d6:12:c0:d5:c8:2a:6a:13:9d:ad:47:
         62:84:54:c5:6b:a7:71:bb:9f:54:21:92:c9:ef:ec:e8:b5:cf:
         9d:35:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:19 2024 by rpki-client on console-ams.rpki-client.org