Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File:                     7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier:          AAdW8jETqwq9b5f9XzFgFlEzqIXITL5nXXf8HsAhzLU=
Subject key identifier:   BA:DE:38:F7:FA:65:11:32:2B:2A:EB:9C:10:75:62:85:47:C5:7D:45
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       018F3A777E39C7C2D448E4BF04A646612998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number:          10A9
Signing time:             Thu 02 May 2024 18:01:00 +0000
Manifest this update:     Thu 02 May 2024 18:01:00 +0000
Manifest next update:     Fri 03 May 2024 18:01:00 +0000
Files and hashes:         1: 5HFQoNbqEyIEAoI0x6eGh3Cgf7w.roa (hash: JsKpRia/bCEI9LdomquX90wtKfIK6XJsu2Rxqgrtd8g=)
                          2: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: oZgWOUx3F0cf7yuvYwWgGRMXcWxFghVphT65FU5l+iU=)
                          3: cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa (hash: uhhbyqUilx8ko5cCKuTrU1VMN2JJ82KWYLkNNB4pS5E=)
                          4: ce6cWT6p_-ZZz0EHOMK65yFcU68.roa (hash: cGVX0rm99cSkHxKQV4uqpQpFraaGQQIieI/X72hPA+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:77:7e:39:c7:c2:d4:48:e4:bf:04:a6:46:61:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: May  2 18:01:00 2024 GMT
            Not After : May  3 18:01:00 2024 GMT
        Subject: CN=bade38f7fa6511322b2aeb9c1075628547c57d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:a1:a1:f9:33:04:51:ad:b2:3a:86:12:50:
                    29:af:f1:f0:e2:66:20:7a:a0:a4:66:af:27:fd:96:
                    1a:85:f3:07:04:6c:f9:5d:f5:6f:72:8f:2b:d1:c8:
                    95:f4:e4:7d:4e:5a:9f:18:da:72:29:68:58:1f:9f:
                    df:8a:aa:43:47:96:82:53:97:6b:37:42:40:3b:cc:
                    70:9c:ad:f5:01:8f:b1:37:ae:a7:f0:40:7b:61:5f:
                    58:04:64:62:a3:be:c8:0b:b2:86:89:c0:76:cf:09:
                    69:24:d0:97:95:96:5a:c6:69:57:36:27:fe:6d:40:
                    d8:48:7e:a0:86:67:b6:e6:c7:ec:a2:53:b3:10:86:
                    e3:5b:69:34:f2:fc:fe:e6:68:01:b3:46:bb:c7:53:
                    5e:90:75:a0:32:9e:77:a2:4b:bc:2f:a4:bd:7e:fa:
                    c8:6d:24:0c:bc:1f:56:fd:81:53:ac:ae:c9:03:90:
                    f6:0f:14:6c:6a:73:dc:42:23:da:0d:cf:e9:77:f6:
                    2c:20:47:c3:2b:f2:e8:bb:40:62:03:27:01:9d:fe:
                    a9:33:7c:8b:55:0f:d3:ca:a1:84:2e:8e:d0:58:1e:
                    bf:56:a6:c1:14:62:20:60:9c:b4:3d:c6:52:67:4d:
                    2b:2f:f5:49:4c:93:75:f8:82:1f:47:76:08:75:ea:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:38:F7:FA:65:11:32:2B:2A:EB:9C:10:75:62:85:47:C5:7D:45
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:08:7f:77:df:a9:08:21:26:32:5a:3a:f3:13:47:79:40:
         65:48:33:a0:27:4b:29:53:14:9b:8d:9d:ca:36:b9:d3:72:ac:
         10:97:f7:74:95:d6:3e:d8:a2:23:1c:e7:33:80:26:20:23:64:
         05:ed:c7:c4:35:2a:a6:14:73:14:dc:9f:b9:8b:00:c6:53:17:
         5a:f8:b8:e9:a2:3c:23:6a:22:06:df:89:bb:03:e6:4d:69:cf:
         11:01:fb:c4:2b:06:b4:f5:75:93:61:4e:b2:6a:7c:2e:e3:a7:
         d8:70:cb:7a:f3:4d:36:13:0f:60:dc:c9:48:d5:13:e8:8b:df:
         39:a5:43:1a:97:d0:57:32:14:c4:7d:96:bc:d5:13:f3:01:38:
         31:7f:2d:72:33:e3:ee:a9:f8:5f:78:a3:2e:f8:33:28:78:f7:
         37:6a:3e:cb:f6:51:ed:1d:ea:72:34:bf:36:96:3e:d4:46:ba:
         a7:88:8b:6a:2f:fa:57:5b:da:b6:c4:37:fd:15:00:ba:b9:5f:
         7d:f8:d9:d7:93:a6:06:24:96:03:6c:bd:a8:d7:68:99:85:c5:
         b9:66:e6:3c:50:aa:82:78:6d:19:bb:23:4e:13:3a:e6:17:53:
         26:27:16:0f:80:1f:e7:c3:d1:cc:57:ea:cf:60:ad:3d:f0:d9:
         6f:72:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:56:20 2024 by rpki-client on console-ams.rpki-client.org