Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File:                     XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier:          /SJ6bPCzEWlmHVk/oHyJXFbXsBQEOFn1y66kRa8ugEk=
Subject key identifier:   AF:B6:EF:E1:DD:B6:B4:AD:D2:48:E8:6D:AF:5F:52:4C:12:20:87:08
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer:       /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial:       018F88243457ACB870C820381686FFF18369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number:          072D
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: 8cE2rhnK2_q3J2bBkRoc96uJWkQ.roa (hash: L8I/RcxqAMtBdn2E8BQ8asvFM2qutJcAbEB9h4PKS9E=)
                          2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: rX/xgA/cFupQdq2y4rzoMx3xIO0OUXCDPcxHje0Vbi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:34:57:ac:b8:70:c8:20:38:16:86:ff:f1:83:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=afb6efe1ddb6b4add248e86daf5f524c12208708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:71:07:98:07:2a:10:66:c6:c1:fc:79:50:
                    4a:2a:1f:15:de:44:e9:84:da:02:c6:50:b6:63:8a:
                    2a:65:05:a6:0b:53:fa:39:36:f0:c4:de:b3:fa:c4:
                    50:d5:64:5d:26:2c:ad:60:22:09:c2:a4:7d:0e:ce:
                    1b:7e:2d:22:0c:95:95:6a:5e:cb:95:09:29:dd:c0:
                    cc:1c:b0:be:c8:07:71:24:6b:97:75:24:3d:7b:37:
                    f5:d2:30:8a:29:4d:a3:8f:8d:c0:e0:1c:3c:18:8b:
                    41:b6:b7:ee:ac:aa:e8:7f:9e:4a:5c:2b:89:42:55:
                    bf:71:6d:f3:b0:c4:3b:2f:89:f4:a1:43:fb:e4:fb:
                    49:5f:b2:a8:38:55:59:03:c6:78:aa:d3:ce:b3:69:
                    ca:14:1b:15:88:02:96:5a:55:6a:e4:7f:cb:27:c9:
                    14:3e:00:28:b8:73:0a:fe:c8:58:c3:bb:23:a8:35:
                    f0:89:1a:f3:59:ab:a9:4c:e5:c8:a3:9e:9a:4f:12:
                    2e:6e:01:2b:2f:b2:68:e7:3c:1e:52:db:26:f0:58:
                    64:c9:b9:c5:67:58:e3:45:7c:f1:f9:b9:71:4e:53:
                    2a:da:4a:6b:f0:87:ce:8f:f6:dc:79:12:85:87:8d:
                    89:57:85:52:51:45:b7:b7:fb:88:bc:d0:0c:c4:7b:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B6:EF:E1:DD:B6:B4:AD:D2:48:E8:6D:AF:5F:52:4C:12:20:87:08
            X509v3 Authority Key Identifier:
                keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:18:15:c0:b4:0d:3b:58:0e:bb:ae:83:83:45:05:25:16:12:
         09:52:13:69:d4:93:6d:9f:39:7e:d1:4c:3f:43:3a:05:0f:95:
         ea:0b:39:94:cf:e2:a4:a8:ec:2e:40:fc:69:ad:1f:ee:86:b6:
         1f:a6:42:81:d1:6f:91:51:03:8a:c9:ec:a3:01:78:81:cb:52:
         e8:62:ca:91:02:36:2b:dd:94:d6:57:3c:07:39:f8:37:91:a4:
         be:7f:4b:2e:3e:b8:47:ea:7b:c0:08:94:2f:7c:40:40:30:e4:
         93:91:c5:32:c5:b4:73:22:00:0a:fc:d0:9a:4c:05:c4:83:52:
         db:e1:c6:68:0a:a4:f6:9d:98:1c:ab:5a:e6:3a:7d:ec:bc:ce:
         7b:bf:31:a5:1c:25:a3:d8:70:df:2a:d2:8d:94:34:e1:ba:57:
         c6:45:49:86:0c:74:49:9c:a2:b1:a3:d2:f0:77:ab:e1:b4:78:
         c7:3b:77:24:54:1e:f8:16:65:5a:63:a0:4c:06:ae:96:09:71:
         01:19:d3:f3:d4:86:c2:5e:8d:f0:cf:a9:1a:92:c4:4f:31:5d:
         38:86:94:22:f4:45:18:94:5b:3a:b4:0e:1d:3b:47:05:61:f1:
         f8:12:99:f6:2e:41:da:c4:11:80:26:40:67:20:75:e5:a7:21:
         a0:f8:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:28 2024 by rpki-client on console-ams.rpki-client.org