Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File:                     RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier:          nI8tAiMRbZPPWBFq9eduDBcc68evksL99Xxp7DaVB74=
Subject key identifier:   54:C5:AE:F4:A6:76:E7:61:12:BA:98:C4:37:3B:5E:81:40:17:C2:4C
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer:       /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial:       018F8824A59C46C2450CFCA9BDA9E73DCFE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number:          04C4
Signing time:             Fri 17 May 2024 20:00:54 +0000
Manifest this update:     Fri 17 May 2024 20:00:54 +0000
Manifest next update:     Sat 18 May 2024 20:00:54 +0000
Files and hashes:         1: AR0rKzKjv6fQrjvsfMgvnTZcxJA.roa (hash: RbQGjys1SBNRDXY1HtQaDIG1cfz7SCVpdVIpgR3/0iE=)
                          2: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: MqoM/lVFlSUvW93TMouR2gi/khfoJrxdvwXralfODzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a5:9c:46:c2:45:0c:fc:a9:bd:a9:e7:3d:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
        Validity
            Not Before: May 17 20:00:54 2024 GMT
            Not After : May 18 20:00:54 2024 GMT
        Subject: CN=54c5aef4a676e76112ba98c4373b5e814017c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:cb:c4:77:0b:d3:25:1d:ad:ee:40:07:ff:
                    ce:37:fb:3a:dd:6f:83:7e:cc:5a:ec:01:cd:66:f6:
                    07:89:80:3d:75:d6:d3:8a:90:43:50:cc:35:67:ce:
                    76:da:80:89:66:9f:12:20:43:0d:59:31:86:e1:ee:
                    c4:0e:b4:2b:c0:8d:5d:24:1e:c6:cb:bf:c2:f9:d6:
                    0c:79:9d:b4:38:14:af:14:2c:b3:19:78:50:3a:aa:
                    31:29:84:12:3c:cf:0d:b1:75:a7:3f:77:4a:a8:e9:
                    c7:60:ca:b4:4f:1e:00:54:32:a4:32:4d:20:7b:c5:
                    3c:16:7c:44:43:a5:83:7c:ef:cd:9a:02:a0:b2:4c:
                    fd:7a:2c:7f:51:f7:9f:99:33:10:24:9f:40:33:32:
                    77:2d:8b:39:6a:c2:af:35:67:d2:39:6d:4d:2e:c1:
                    a5:98:80:71:de:a5:d9:b8:81:82:30:da:a2:07:bf:
                    04:ef:81:51:24:61:c4:94:56:7a:a0:fb:f0:a8:36:
                    fc:13:17:82:0e:0d:34:1d:f2:82:b3:74:5f:8b:2c:
                    cd:40:35:cc:f8:b3:ea:3c:71:76:3c:de:19:bf:1e:
                    b6:a4:65:70:3b:f1:c0:fa:92:ab:c4:11:15:d0:4d:
                    cd:86:9d:36:52:3c:9d:df:46:e0:84:c7:eb:a0:d1:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:AE:F4:A6:76:E7:61:12:BA:98:C4:37:3B:5E:81:40:17:C2:4C
            X509v3 Authority Key Identifier:
                keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:cc:b6:0f:64:05:14:5c:95:0f:bd:4d:a8:91:4b:da:cb:
         6a:ee:f6:4b:13:b8:3e:4a:85:87:6e:e8:28:a9:b9:e1:61:db:
         96:26:69:ca:f5:27:97:7c:3a:8b:e4:dd:ae:1a:19:33:5f:2c:
         c9:61:f0:ff:20:4c:ed:7b:a6:75:e5:08:45:8f:67:85:5f:16:
         76:4b:6a:68:05:69:83:20:60:a6:9f:62:d2:90:db:e7:49:d5:
         31:78:08:e0:6b:de:03:77:00:05:f0:24:8d:ff:ca:66:e3:a8:
         94:ed:df:03:1f:3d:e9:b7:f2:f2:f5:ab:29:1d:ef:68:88:d6:
         75:3c:dc:7a:81:4f:88:2b:c8:c2:d7:cf:ff:d3:1a:1b:e3:35:
         b5:65:a6:5d:6a:5a:59:f7:82:ca:0e:25:ad:69:91:32:3b:c7:
         d9:0b:9e:c1:03:96:ba:ae:9e:db:c8:53:f3:ff:58:59:9f:89:
         fe:f5:fd:19:23:03:2c:41:74:80:00:d8:9d:ec:fb:4f:8c:55:
         ce:b7:b2:de:40:21:74:3a:a2:09:d0:a1:4b:f9:83:97:aa:ec:
         7c:5d:de:bb:b3:c3:60:f2:f9:79:c4:72:78:86:4c:76:fd:74:
         0b:87:3b:d8:26:9d:46:0e:e4:82:83:a6:48:74:a3:10:90:28:
         30:d9:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:29 2024 by rpki-client on console-fra.rpki-client.org