Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          pv9BFZHOL2cNj4nzH7FL9k/udCDS4LWBNqBPAVEaXik=
Subject key identifier:   BB:7D:F4:BC:03:C5:FD:A7:9C:ED:6D:05:26:6B:CA:EA:4B:51:7A:D3
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       018F3CD3EFF7F0BE72483EBE2A078D95B5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          10E2
Signing time:             Fri 03 May 2024 05:01:13 +0000
Manifest this update:     Fri 03 May 2024 05:01:13 +0000
Manifest next update:     Sat 04 May 2024 05:01:13 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: qKQQ/1CYFj6P8kIwvqAuPaiiWh9m3uvWtbpkYbZujPw=)
                          2: RUUozLRKgnpm2jc2d48gox8j53M.roa (hash: 1Eyuu6B0TqC0wSh/LxwlNvKgvtM0na/BFiExXuncREo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d3:ef:f7:f0:be:72:48:3e:be:2a:07:8d:95:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: May  3 05:01:13 2024 GMT
            Not After : May  4 05:01:13 2024 GMT
        Subject: CN=bb7df4bc03c5fda79ced6d05266bcaea4b517ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:37:a3:48:f0:3c:31:d6:5b:75:52:6f:1b:
                    bb:44:18:f0:29:87:4d:06:d7:9d:41:a1:66:a1:f5:
                    2d:15:7e:fa:2e:fb:e4:36:40:19:95:81:ee:30:c2:
                    b8:29:6f:a1:21:1c:6e:9c:e6:6c:51:ba:0b:1d:ce:
                    00:7b:bf:8d:f4:a7:6c:64:3c:a0:32:b6:7f:dd:20:
                    d5:27:f0:13:2a:1e:77:ed:56:b0:92:dc:e1:1f:7c:
                    bd:e1:97:ce:d2:7e:70:64:1e:37:a8:68:14:c6:0d:
                    5c:13:30:44:73:f7:de:67:30:01:48:5f:72:83:8b:
                    cb:8c:21:b4:bb:dc:18:4b:e0:65:2d:03:5b:6e:cb:
                    51:df:ba:9c:2d:8d:aa:33:f8:95:fd:24:2a:38:69:
                    7d:cf:3f:e1:1f:8e:dd:a7:18:63:72:db:28:27:a9:
                    57:5f:ee:f3:6f:63:39:ab:7f:6f:83:18:21:c7:3e:
                    d0:5c:58:50:82:c6:21:4c:fe:76:f6:db:f0:d0:4f:
                    4d:20:2a:2c:71:30:1c:12:a2:c5:b0:e4:c3:9e:3b:
                    83:2c:b9:27:cf:46:be:b6:45:2f:3d:d1:d7:32:b5:
                    ea:ab:57:82:68:89:1d:b4:20:f1:a2:2b:65:e8:df:
                    e2:50:32:a1:8a:1a:78:cf:3d:f4:b2:58:31:d1:50:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7D:F4:BC:03:C5:FD:A7:9C:ED:6D:05:26:6B:CA:EA:4B:51:7A:D3
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:15:5f:cf:8e:d9:f2:b9:38:55:cf:8c:fc:2a:60:28:b1:5e:
         9c:9a:20:a8:a3:10:c5:33:55:31:50:19:6c:15:2f:8b:80:26:
         06:24:02:22:d1:c3:02:26:af:6c:41:18:4d:be:0b:38:cf:ed:
         30:d0:1b:c4:59:3c:6f:5f:d4:fc:18:de:d2:51:f3:9c:36:3f:
         a5:da:94:82:e8:77:ee:c5:cc:e1:16:7a:80:8e:be:02:c9:d4:
         dc:2e:c3:a7:39:b6:c4:f9:37:33:bd:3a:f9:e2:20:ac:e6:c2:
         02:4e:c1:7a:dd:eb:e9:3b:1b:38:55:87:3f:cb:08:50:e1:00:
         f8:b9:d8:1f:0a:2e:e9:49:e9:05:6e:8b:f0:87:4c:e7:02:63:
         41:76:e4:5e:14:07:bc:75:b9:17:6d:9f:ee:60:27:08:03:60:
         d5:02:17:99:ab:96:66:b3:83:9c:c4:4b:3a:73:86:1c:6b:e6:
         f9:d8:77:ee:e0:00:01:41:73:c1:e3:25:31:46:63:bd:07:da:
         96:58:ab:01:2c:a5:a4:58:f1:41:ba:a6:19:b6:97:17:69:e5:
         10:ef:8f:33:da:aa:c7:f2:35:1e:f8:cc:8f:f2:d5:97:55:61:
         ac:e3:49:b8:5c:a2:60:63:f1:50:bf:9f:af:5d:fb:57:a9:b0:
         57:db:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:07:16 2024 by rpki-client on console-ams.rpki-client.org