Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File:                     y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier:          EHStaES+JtxqJB9irdVc6DTlcu5NsqreUMV9BSUCapU=
Subject key identifier:   30:2F:2F:D2:FA:AB:88:EA:F7:91:6D:ED:1E:07:CB:8A:24:C2:37:9F
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer:       /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial:       018F96BD1617863B514365E0997C31671E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number:          DB
Signing time:             Mon 20 May 2024 16:02:05 +0000
Manifest this update:     Mon 20 May 2024 16:02:05 +0000
Manifest next update:     Tue 21 May 2024 16:02:05 +0000
Files and hashes:         1: Ewv14BvtFSgw8NBPZ2dohBy9vqg.roa (hash: 8Gi41HTw3ZY6ZQYqrEFlrqdgCD0C1k6djjMkLnVhwOU=)
                          2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: kbkDQ9YnEJKoCUzYLNK67TgoqbrJh6xscmzeQQ9IVww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:16:17:86:3b:51:43:65:e0:99:7c:31:67:1e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
        Validity
            Not Before: May 20 16:02:05 2024 GMT
            Not After : May 21 16:02:05 2024 GMT
        Subject: CN=302f2fd2faab88eaf7916ded1e07cb8a24c2379f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:37:1c:fc:b5:8b:7e:82:b1:71:d1:9c:27:
                    2d:32:96:05:5b:61:9b:6d:8f:d0:d9:14:9a:9d:4d:
                    bc:4b:53:c9:37:34:ad:ea:c7:05:34:2a:27:cc:18:
                    b2:0c:9a:b7:1c:0b:09:ac:e8:e2:53:e3:fc:bc:b3:
                    26:db:30:05:46:82:bc:2b:0b:54:25:df:f4:0e:7a:
                    5f:ea:55:73:56:ca:e6:23:61:81:42:67:1a:90:74:
                    49:79:3e:14:a0:88:22:5b:fa:d7:8f:3c:c0:38:31:
                    a6:63:e1:85:fa:ed:34:ae:66:70:c3:ac:e0:a7:de:
                    02:73:6a:7a:cb:9b:aa:dd:52:ff:6d:38:65:a7:3f:
                    48:72:1c:64:fc:ae:81:01:4e:f2:27:13:be:6e:c6:
                    56:41:68:60:ac:ef:7e:a3:0a:b0:ce:68:12:62:39:
                    b4:b0:50:71:5a:d8:c2:1d:22:16:24:90:cc:3f:80:
                    e0:c6:b3:7a:fc:52:da:da:4b:89:73:19:04:e0:3b:
                    23:8b:fb:37:1e:91:e8:d4:ea:ea:43:0c:9d:d9:1e:
                    80:68:68:61:fb:08:93:16:a5:a0:69:96:8f:27:1c:
                    74:89:13:69:ef:32:fa:43:57:b9:67:49:c4:53:54:
                    b3:1b:6d:6b:53:a6:b9:7d:96:ce:87:34:2d:d4:f5:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:2F:D2:FA:AB:88:EA:F7:91:6D:ED:1E:07:CB:8A:24:C2:37:9F
            X509v3 Authority Key Identifier:
                keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:3d:e6:87:2a:31:00:da:5f:6b:42:51:c6:a2:8e:51:6e:
         fb:ca:23:b7:06:aa:37:c1:a8:dd:64:6f:fa:da:e4:f9:6e:ea:
         92:da:7d:19:af:ae:56:42:5f:17:c6:ee:1d:07:e6:c1:94:0b:
         49:34:87:95:3e:54:ce:5d:b0:df:cd:54:39:c5:51:d1:a4:05:
         66:24:a0:09:0e:d1:e6:d7:c8:22:99:8f:e0:18:4c:02:d1:9e:
         9a:d1:b8:a8:5e:75:4b:c2:17:7f:d8:45:6f:81:8f:7f:bd:22:
         8b:0c:1d:6c:0f:5f:26:48:ac:79:81:b6:79:75:01:8a:09:2f:
         ac:9f:75:9c:ee:93:d1:77:db:6d:0f:10:4a:79:78:19:7e:e2:
         24:fb:fe:c1:4f:3a:e7:a6:55:72:9e:c6:b6:36:b9:68:8c:29:
         c9:98:00:a3:98:db:10:a1:11:c5:da:e6:6f:fc:09:b6:40:46:
         a8:9b:f5:e5:ee:6f:02:f8:1f:e7:00:9a:f8:0a:6e:54:72:e3:
         54:1c:11:25:12:bd:25:56:73:6a:aa:a2:57:26:45:89:00:06:
         e8:ee:9b:ac:3e:43:2d:e6:5b:bc:b0:55:bf:e4:0d:8c:0c:ef:
         bb:e4:0b:13:1a:b5:c5:91:f1:b1:bf:e5:98:11:85:62:ec:b2:
         91:67:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:13:47 2024 by rpki-client on console-fra.rpki-client.org