Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
File:                     Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft (raw, json)
Hash identifier:          VA87sX8RxnJoHiemo//t4dEIYHqC4QN4nL5jMXM6hDo=
Subject key identifier:   8B:D7:5C:6C:F2:FB:A6:39:5F:5C:F6:74:DD:3B:78:93:CB:27:7B:CD
Authority key identifier: 46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
Certificate issuer:       /CN=467860b38613921c0085d47a34f66a1b64bceb0b
Certificate serial:       018F8711563A5A16A64BDC1D090A3AE2E1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
Manifest number:          B2
Signing time:             Fri 17 May 2024 15:00:11 +0000
Manifest this update:     Fri 17 May 2024 15:00:11 +0000
Manifest next update:     Sat 18 May 2024 15:00:11 +0000
Files and hashes:         1: MKpNiy-2ICzqDbfIJy8TbRE0FxY.roa (hash: Mo/zJygH0sWyXyQlIQ7uRmzabILHCTB1Eup5ieRutO0=)
                          2: Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl (hash: t/KJ4hmyRGl2pUi6mxB3G1LYWx6ZYjIvZWbdWhI8ykU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:56:3a:5a:16:a6:4b:dc:1d:09:0a:3a:e2:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467860b38613921c0085d47a34f66a1b64bceb0b
        Validity
            Not Before: May 17 15:00:11 2024 GMT
            Not After : May 18 15:00:11 2024 GMT
        Subject: CN=8bd75c6cf2fba6395f5cf674dd3b7893cb277bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:ce:1d:0c:f8:42:fa:61:6c:17:0f:57:e5:
                    81:8e:81:93:0f:d8:91:b2:09:b5:df:11:e4:2e:b0:
                    8f:e9:08:ae:35:82:d6:b3:f9:ff:2f:80:c7:49:ae:
                    a0:17:90:11:d3:2c:88:46:5c:60:4a:ea:05:83:ca:
                    7c:87:66:19:67:6a:27:c6:25:3a:c9:32:0c:bc:f3:
                    c7:82:23:a2:34:a5:46:47:1b:6a:a3:e9:34:9f:0d:
                    d2:6a:71:28:9c:e3:57:8a:df:e8:28:6d:ba:1c:f2:
                    fe:bb:f1:d1:a6:17:c0:8f:51:1f:da:84:4c:f0:39:
                    b5:11:9d:51:d1:b4:37:e5:45:52:e1:08:d9:fc:ed:
                    c6:b9:f5:56:f7:77:53:60:24:7b:3d:38:03:28:0c:
                    77:76:e4:ec:66:8a:72:85:61:7f:34:6b:ca:2a:77:
                    95:56:eb:38:8f:a8:0f:ba:3f:dc:4d:a3:d1:88:8f:
                    3d:3f:21:f4:d3:98:24:bc:d1:f3:97:51:8a:28:b0:
                    36:29:59:1c:e4:5b:ef:e2:91:a9:92:77:28:4d:73:
                    f9:02:70:12:07:27:7f:24:6e:cf:38:d1:ab:5f:c4:
                    c2:3f:43:2f:3a:2d:9e:11:a1:5f:fb:4c:4b:49:3e:
                    f8:29:4f:36:03:b7:b2:79:26:f6:ec:83:d3:82:9a:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D7:5C:6C:F2:FB:A6:39:5F:5C:F6:74:DD:3B:78:93:CB:27:7B:CD
            X509v3 Authority Key Identifier:
                keyid:46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:20:0e:6c:07:a2:99:bf:3c:f4:a1:a0:8f:74:24:38:cc:bb:
         69:f4:1d:5f:a9:f7:10:26:9b:36:0d:14:19:c2:11:d4:f4:98:
         c2:3c:40:a4:87:d8:5d:e8:07:ed:0b:9c:16:97:c0:9d:d4:42:
         be:ac:e5:14:00:c5:b5:b6:91:75:e5:c1:a2:ef:c4:fa:d2:36:
         8f:86:b4:a2:ed:bb:5a:ca:6f:35:24:ae:e7:e9:7a:53:50:1b:
         d8:bc:2e:06:f1:26:b8:ba:2a:88:8b:c5:e3:4b:c6:9c:6d:99:
         07:80:67:9d:e6:6b:41:a1:a3:ae:7f:6c:36:16:b1:3c:67:a1:
         84:80:47:07:71:e1:f2:31:b9:96:a2:3b:63:d3:27:ff:17:1e:
         23:8b:0b:81:d4:8f:59:0a:54:97:13:e5:7d:c4:12:1c:41:61:
         76:50:90:6c:56:f9:33:7f:d2:49:0a:42:56:21:3e:72:68:85:
         35:78:c4:e2:54:d8:58:f8:a9:5a:32:35:9e:43:29:c2:95:86:
         8f:a1:37:09:8a:61:bb:3f:4c:a0:d7:33:32:87:f8:a2:aa:ca:
         eb:f1:2e:8c:22:8c:b9:1f:a9:a2:10:65:c9:6f:d3:1a:4f:05:
         27:98:5a:dd:f0:89:41:ee:7a:6f:0d:de:e5:b2:bc:38:1c:da:
         e1:ba:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:21 2024 by rpki-client on console-fra.rpki-client.org