Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          QEOnIyOFhm3zvFwWv2vWeMwvwqqHiJLB0CTloKukmYA=
Subject key identifier:   0C:7B:BA:B4:36:11:87:89:B2:36:CE:B9:BC:19:38:57:EF:D3:53:2F
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       018F8748C713623299425436EC2C38426C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0617
Signing time:             Fri 17 May 2024 16:00:44 +0000
Manifest this update:     Fri 17 May 2024 16:00:44 +0000
Manifest next update:     Sat 18 May 2024 16:00:44 +0000
Files and hashes:         1: WNBYWn0LIlkzLSWjeP5zgHyTuL0.roa (hash: MPiHfGme1N+ptxn19drb0sDwhgEeX9K0rcvcCI4VlMY=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: z28mA/Zcd7HhkWd3wYGVdyxCxLrjbYr0SRSVrMVNnDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c7:13:62:32:99:42:54:36:ec:2c:38:42:6c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: May 17 16:00:44 2024 GMT
            Not After : May 18 16:00:44 2024 GMT
        Subject: CN=0c7bbab436118789b236ceb9bc193857efd3532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:d8:16:4b:e2:ec:b6:96:c5:84:76:46:c8:
                    57:4d:c4:ff:b4:bf:61:f3:7b:de:9c:30:c2:c7:6b:
                    ef:a1:28:dc:44:cf:3a:2a:5e:b9:da:26:c0:d4:3a:
                    20:a8:fe:45:b0:b7:3b:89:60:16:eb:7c:ae:a2:7c:
                    bd:9e:15:7c:d9:57:1d:51:ff:f4:55:0a:b6:f1:f2:
                    64:11:e9:87:ff:51:68:02:2f:46:f5:d6:2a:a9:3a:
                    c1:9f:83:ab:ec:dc:27:ca:a3:b8:de:11:ae:bd:33:
                    e8:b2:54:52:57:98:b7:b0:5a:c8:66:13:b8:d9:67:
                    9f:1e:86:bf:d0:c4:19:fe:50:5d:a2:8d:1b:2b:21:
                    78:a7:8f:92:8a:8f:70:ce:14:e0:3d:58:4f:64:33:
                    07:c3:d0:d0:c1:74:41:a9:0d:71:38:07:b0:17:4e:
                    d4:c5:6c:df:f5:cc:a3:88:c9:e4:c9:aa:39:2b:4d:
                    91:5c:98:dc:1d:fe:bb:7e:6d:97:f3:8a:bd:80:7b:
                    42:95:e8:32:dd:26:37:20:b3:d3:cc:3a:08:1f:70:
                    c2:4e:27:e2:ac:04:57:00:e2:d9:0e:69:ce:a4:da:
                    be:45:63:1e:3e:c1:19:6a:8f:e6:71:b3:04:b0:a9:
                    93:1a:30:f0:89:e6:ff:26:09:b8:4c:5f:b0:aa:47:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7B:BA:B4:36:11:87:89:B2:36:CE:B9:BC:19:38:57:EF:D3:53:2F
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:50:49:03:79:b5:77:5b:a2:4c:21:8d:e0:0f:80:5f:27:47:
         be:14:6f:0b:2e:56:c4:e8:9b:60:b5:b1:86:af:00:9e:ee:6e:
         0f:b5:a6:4b:dd:49:84:be:ca:6b:2a:03:37:51:5e:63:5d:6e:
         93:5c:d1:63:ad:da:61:d2:aa:7b:b0:10:d7:c6:e5:73:aa:6f:
         b5:ae:69:57:d6:d5:c8:ca:33:8f:3e:2d:c3:79:4b:22:5a:9e:
         58:d7:f3:d7:5b:ea:09:da:ba:a4:93:42:31:6c:9e:33:69:56:
         b6:db:14:78:ef:46:2d:b6:f2:d1:f1:6f:42:04:9e:ba:62:cd:
         3a:df:17:4d:6f:0c:59:0c:10:42:37:0d:38:6a:0d:44:94:da:
         4d:54:68:1d:58:a4:5f:ed:be:7b:87:61:d3:81:9a:ce:ca:d2:
         91:39:ba:e3:5e:ff:9d:cb:11:c3:0e:f4:e1:14:6d:3a:11:b5:
         30:cb:a9:dc:5c:6c:1c:2a:ee:a7:08:80:5a:29:f3:f7:18:3c:
         7e:3e:35:b6:ec:58:b2:d4:47:f8:af:a8:e7:34:13:10:9b:74:
         73:53:ab:3a:dd:fd:48:62:4c:30:c1:5a:ae:e8:14:90:00:29:
         a9:c5:fc:0f:d4:48:19:3a:2a:f0:79:e2:99:9b:2e:d4:88:f0:
         fb:80:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:50 2024 by rpki-client on console-ams.rpki-client.org