Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          rERjePqlW3osjIdbQBCpqO1dq672Xlox3IrIo6UhnkI=
Subject key identifier:   C7:DB:6A:BE:1A:05:48:43:81:76:25:5B:8A:1D:AE:F7:E2:01:B0:F9
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       018F98AC1423D98D7440F77C2B5439BC3411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          028F
Signing time:             Tue 21 May 2024 01:02:45 +0000
Manifest this update:     Tue 21 May 2024 01:02:45 +0000
Manifest next update:     Wed 22 May 2024 01:02:45 +0000
Files and hashes:         1: r-YLq4pYkpRLSApReMbUyyW7mqY.roa (hash: uOgPCqaDF88ZXO2nuRDweqsttHk1qJGY3VA0fI4Dd3U=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: OIfe5VZMgQrq4dkT1oFHDLx8wI9Y02lCAWJP77CneRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 01:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ac:14:23:d9:8d:74:40:f7:7c:2b:54:39:bc:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: May 21 01:02:45 2024 GMT
            Not After : May 22 01:02:45 2024 GMT
        Subject: CN=c7db6abe1a0548438176255b8a1daef7e201b0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:97:fc:77:3e:f3:0a:dc:91:c7:1a:31:63:
                    ad:58:0a:7f:69:86:57:cd:da:86:b2:53:6a:6b:2f:
                    10:4d:07:d1:ba:90:be:88:49:66:55:e1:67:aa:f4:
                    2d:ff:be:e1:37:11:e3:05:36:23:de:14:63:aa:f7:
                    39:68:69:a6:cb:1a:45:e0:5f:3d:1c:cd:5e:e5:27:
                    dd:df:92:f9:d8:33:48:1a:80:1f:8a:33:95:89:cb:
                    d1:f3:a2:e3:13:f4:2d:05:6a:ec:d5:6b:1a:74:90:
                    30:f7:63:d2:58:d4:90:df:5a:02:ac:86:9b:a8:77:
                    11:19:9c:fd:9b:39:17:11:78:2a:35:63:bb:a5:b3:
                    db:62:d6:60:cb:81:53:64:9c:40:ca:70:eb:e0:61:
                    70:86:6f:cf:1d:9e:de:7d:ef:46:1c:db:af:8b:46:
                    d1:42:c8:39:a8:f4:6d:ae:ed:f6:05:f7:a6:98:17:
                    4d:10:6d:b5:ec:21:02:70:a1:72:4b:ca:45:26:1e:
                    6c:69:9b:b2:6f:84:92:31:70:57:cc:c8:d7:fb:76:
                    67:a9:08:36:73:7d:b0:d0:1a:4c:7f:72:f1:1e:f7:
                    47:95:33:47:5c:29:00:89:d5:59:9d:60:9e:39:86:
                    8f:ba:43:ed:11:cf:d3:e7:f8:f6:7b:52:3d:cd:e8:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:6A:BE:1A:05:48:43:81:76:25:5B:8A:1D:AE:F7:E2:01:B0:F9
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:38:17:64:5f:dc:bc:ca:94:a1:04:d4:51:73:e5:de:b0:
         52:fc:62:49:41:9f:96:60:4f:ca:c5:d9:a4:cc:8f:04:4c:80:
         94:60:f8:10:85:5a:79:59:06:94:74:88:92:f9:67:ab:fe:e7:
         ea:32:40:b0:3f:07:9d:f1:19:21:3b:a4:86:ee:a4:41:e6:5b:
         d9:31:76:25:4d:c6:72:97:b9:08:68:4e:e3:c3:1c:72:45:59:
         55:5b:8a:e9:1c:cd:25:0e:90:68:31:d8:11:b1:69:ff:79:9d:
         03:d2:1c:e9:eb:45:f3:24:91:d4:d3:06:ae:06:2a:7b:b5:e9:
         07:75:8b:4a:42:8e:27:ab:b7:a2:76:35:f1:7a:25:38:70:03:
         cd:66:18:62:57:e5:50:73:32:63:56:1a:ee:c8:e5:81:6b:76:
         79:85:33:c0:07:f2:66:96:33:bc:f7:b0:8f:4f:b9:6d:1e:95:
         06:2e:10:13:7b:e3:f0:9e:29:ab:bc:9a:46:21:8b:de:40:81:
         1e:a8:bb:65:ce:2b:54:ec:24:32:49:3d:3c:e1:2a:7b:c4:1c:
         7f:27:4e:ca:1b:6e:cf:ee:04:6d:58:c3:62:bc:32:0a:88:8a:
         c8:c1:90:0a:2f:30:47:cd:a0:e6:15:ce:19:66:55:52:e1:3a:
         3a:f2:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:35:42 2024 by rpki-client on console-fra.rpki-client.org