Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File:                     fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier:          IxycqW0G1jg7gRoE5a5SXtMd8mwT4m+lJESC/v1L498=
Subject key identifier:   E6:00:47:17:04:5C:0F:C1:82:3B:61:98:7E:A1:DB:5F:A8:64:A6:05
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer:       /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial:       018F87ED9078B16443BB4CFFC4489F529BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number:          02EA
Signing time:             Fri 17 May 2024 19:00:44 +0000
Manifest this update:     Fri 17 May 2024 19:00:44 +0000
Manifest next update:     Sat 18 May 2024 19:00:44 +0000
Files and hashes:         1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: ZklvbzEiFPgbsTbQq+Y4EO5tsXw5M/oxTNTV987CNCE=)
                          2: f_yS8wyTnF4H0u7JPqgHYHP7oRk.roa (hash: rIhYSNZ7XxoVo+X7LocGmxHXasQDo9UnOT0yZ3VswpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:90:78:b1:64:43:bb:4c:ff:c4:48:9f:52:9b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
        Validity
            Not Before: May 17 19:00:44 2024 GMT
            Not After : May 18 19:00:44 2024 GMT
        Subject: CN=e6004717045c0fc1823b61987ea1db5fa864a605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:bf:60:32:c4:9b:08:3f:af:f6:a5:b5:24:
                    36:79:52:5b:72:7b:a1:ec:b5:27:7f:c3:03:9c:88:
                    b6:ad:9f:cd:7c:ee:79:3b:83:8f:01:8b:6f:36:54:
                    86:ac:fe:2f:14:13:59:6f:96:7a:58:29:8c:da:61:
                    c0:7b:7b:66:db:0a:b2:41:69:75:2f:e5:e2:d2:db:
                    92:d7:d6:81:8d:85:08:16:64:ee:af:7c:3e:ea:25:
                    74:bf:35:8e:63:80:04:0c:e8:96:54:50:85:e7:3d:
                    32:1a:ed:19:ca:01:d8:67:5c:df:38:82:38:bc:f8:
                    5a:e0:b9:07:8d:a5:b8:11:55:b2:2c:61:5e:06:e2:
                    a2:06:5b:17:fa:bb:58:e7:9d:f5:61:32:d3:c5:69:
                    d7:35:00:3b:04:17:11:44:2f:91:f0:15:19:90:bc:
                    49:de:f3:bb:a9:0a:61:09:17:fc:28:cd:af:c8:c2:
                    87:7c:c6:68:92:6b:b8:e3:7f:4f:ae:f5:48:59:ff:
                    0f:12:d0:14:05:db:91:3a:ed:70:1c:15:65:56:56:
                    2c:2e:ed:03:f0:12:bd:94:97:5f:73:50:f5:22:fd:
                    65:b4:6c:ce:91:5e:07:2c:8c:9f:35:e9:5b:d8:f6:
                    fa:4e:3f:bc:b2:02:2b:cb:be:92:b2:90:d6:32:57:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:00:47:17:04:5C:0F:C1:82:3B:61:98:7E:A1:DB:5F:A8:64:A6:05
            X509v3 Authority Key Identifier:
                keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:14:6d:36:ef:af:6a:13:c6:8c:71:51:7b:26:9a:b8:64:ca:
         38:6f:78:a6:14:d4:3b:fe:82:73:06:77:b1:0e:3d:ff:80:5e:
         89:06:60:dc:76:0f:f4:9b:23:39:86:7b:83:c8:d0:aa:c9:00:
         67:50:10:5d:8a:50:a6:5d:de:63:a4:f5:5f:c7:f8:1c:f8:05:
         c8:f8:41:7a:cd:63:c9:21:c7:32:8b:74:51:6d:30:63:72:de:
         b0:43:93:88:76:8a:08:40:02:5c:27:e1:30:05:2f:13:8d:91:
         8d:8b:fe:f2:5f:88:8c:8a:70:68:5b:69:51:b4:93:2f:87:c1:
         8a:e8:d2:db:e4:34:3b:19:e3:71:4b:be:51:bf:a3:c7:2d:eb:
         f4:9b:78:c8:e3:bf:ae:40:06:07:2d:22:ac:09:d7:27:32:31:
         b2:93:24:3e:ad:95:f3:0f:28:14:79:ce:de:1c:f3:8d:50:75:
         aa:1f:e5:f7:f8:cd:a9:39:50:6d:69:f4:7c:0b:30:86:47:d6:
         f2:83:7e:fd:1c:8b:e2:0c:3f:4c:f4:44:c4:f6:72:e0:e6:0a:
         93:45:4b:d9:ac:0d:46:b3:05:40:86:d9:16:61:86:03:7f:62:
         7b:93:5f:ac:04:b4:52:89:12:0c:24:0a:2a:4b:68:dd:b8:02:
         d5:04:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:15:01 2024 by rpki-client on console-fra.rpki-client.org