Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
File:                     65Hpk6SkDOfl2chjJfGG3waeys0.mft (raw, json)
Hash identifier:          tnR7M/w/O908Pg1rjvj5G4WV6GnFSXwx6OCJB1eTVuU=
Subject key identifier:   2C:2D:07:61:11:E2:B6:FA:CF:76:57:58:CB:E4:48:E1:94:53:E1:13
Authority key identifier: EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
Certificate issuer:       /CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Certificate serial:       018F874A1835AB1B1745483865CE6EDA5A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
Manifest number:          0261
Signing time:             Fri 17 May 2024 16:02:11 +0000
Manifest this update:     Fri 17 May 2024 16:02:11 +0000
Manifest next update:     Sat 18 May 2024 16:02:11 +0000
Files and hashes:         1: 1cZQBNYM1LyIFNPwuC1563tkW0E.roa (hash: SNMmHisT+OZk98VlkRsyG6U2Fj7njMmvtyinhcZLtOQ=)
                          2: 65Hpk6SkDOfl2chjJfGG3waeys0.crl (hash: lKXZ5k0vvvARrXoq48y5g+7Kf1Ni5GHftL7Xbkoyemk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:18:35:ab:1b:17:45:48:38:65:ce:6e:da:5a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
        Validity
            Not Before: May 17 16:02:11 2024 GMT
            Not After : May 18 16:02:11 2024 GMT
        Subject: CN=2c2d076111e2b6facf765758cbe448e19453e113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:e1:52:9b:ae:03:86:16:e6:5b:22:a6:65:
                    59:31:5d:17:8c:b8:11:71:7a:36:2e:99:eb:f8:69:
                    9d:83:8b:98:47:e4:aa:60:2d:e4:4f:9d:0a:55:b3:
                    24:ff:a6:fd:c9:32:a6:81:e4:af:44:f7:48:97:4c:
                    2f:42:6a:36:05:18:30:35:66:b4:50:a1:a5:4a:a0:
                    2e:01:78:b7:42:63:cc:e5:74:8d:2a:53:3c:f4:1b:
                    ea:25:49:e8:41:a9:30:99:58:ac:a1:3d:c6:cf:bd:
                    a3:f4:88:34:f7:a5:59:1b:56:ef:82:da:5f:f5:eb:
                    bb:23:18:bf:21:5c:23:7d:62:e7:c3:a5:f2:58:c6:
                    09:8b:3d:d4:0e:d4:df:d7:2f:bd:a4:a5:e9:4a:6e:
                    16:75:77:a1:69:4d:a1:a6:1e:b1:78:86:b5:43:3c:
                    9b:ba:25:e8:3d:74:03:ed:39:d3:90:59:72:77:ca:
                    0e:7a:e5:4c:ed:2c:81:a2:6d:70:d0:54:62:52:72:
                    cc:26:0c:b1:d9:6c:2f:89:e3:7e:18:e9:21:63:9d:
                    7f:e7:3c:cf:13:af:ad:31:e8:33:5c:72:2f:af:37:
                    4a:c1:26:31:97:75:09:3d:8a:27:c8:79:9f:80:36:
                    a0:aa:f4:fb:c4:25:d6:4b:bf:f3:54:d5:7e:58:93:
                    e3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2D:07:61:11:E2:B6:FA:CF:76:57:58:CB:E4:48:E1:94:53:E1:13
            X509v3 Authority Key Identifier:
                keyid:EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:25:ab:96:72:bc:61:7b:56:e8:38:b5:79:74:dd:b1:83:
         28:38:40:b9:e4:c5:20:bf:47:f2:da:6d:71:55:2b:64:fd:53:
         94:b4:25:fa:73:58:a1:aa:d8:3f:09:06:1c:47:85:40:fe:7c:
         17:7c:6e:64:e6:c4:5e:de:6a:3e:f2:b4:9d:47:67:09:f3:b0:
         70:37:af:72:f1:f5:4c:2f:f1:36:7d:d7:ef:20:45:bd:81:3f:
         cb:33:50:9d:70:46:24:72:f2:c1:34:57:71:06:99:da:39:d9:
         eb:0c:67:6b:ba:d5:21:58:25:97:c1:01:6d:29:ab:55:66:95:
         8e:d0:67:13:90:ee:ca:7b:69:95:b8:5e:98:66:38:ea:e5:37:
         41:7a:4f:30:79:fd:ff:a8:c0:3d:13:eb:cd:c2:74:1e:f7:93:
         d6:77:aa:be:0e:71:6b:ac:c8:0e:7c:62:ae:91:63:e4:2b:f4:
         c1:93:10:53:b3:ee:a1:22:17:d6:ae:57:e5:b3:07:98:7e:7f:
         72:a3:15:84:a0:30:7b:bf:86:e0:1e:38:3c:9d:fd:e2:b5:4c:
         1f:30:ea:2b:a0:b7:16:18:76:89:bc:8b:08:70:bb:b6:52:c1:
         30:6c:22:c4:06:cf:45:3d:30:5b:02:25:f3:a4:27:42:35:71:
         59:81:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:08 2024 by rpki-client on console-fra.rpki-client.org