Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File:                     XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier:          1PsC8238fcTELuhe/Qoag4Ar1KWcdOjX613AmNOd8qw=
Subject key identifier:   D0:CF:D3:6F:31:C0:A7:CF:E7:DA:D6:5D:73:01:9A:65:E5:CD:C8:72
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer:       /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial:       018F874929F7D2FEC102514FD3222BC08BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number:          050C
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: 6RBKAqggjec7fqJu8S0b9OHUJqA.roa (hash: bGQSSKjplcMFq9Qj6W1umq13pl7ZIN4nO1Gz5RwQgx4=)
                          2: D-Gs-2SD1PY77eRssGfvbkWIrY4.roa (hash: gWNa7e2+Wwn2m/kpuBmue1RJNasRwh2ea6Un53QzB4M=)
                          3: DexpTYz9TRL_9xZ64_7hmiiZv38.roa (hash: fR27O1uUfqM71FqtrlvQgUMyt7i2COdDN0cmI8Q7Z6A=)
                          4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: 06hbzt2lygQOgZvqpe/j1+BSTQ5AgFbUmKhoEkQb4lQ=)
                          5: mu7TvsuJqYdSpNUItYdo4FFUDhc.roa (hash: rz5WXPw5usbJ/nuOXs7HLweGW5GgFxOr9HbKzHDRwps=)
                          6: p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa (hash: MfS9+u+DO9ViWOYzt78xK1takkhYVXYS1lbmc0npnmA=)
                          7: wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa (hash: +/hnPOFf7hNwCCpdMJYdk1ev6cDqz6CkpB8jfLbmfR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:29:f7:d2:fe:c1:02:51:4f:d3:22:2b:c0:8b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=d0cfd36f31c0a7cfe7dad65d73019a65e5cdc872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:aa:8d:ae:32:78:e1:17:d1:e0:1a:58:63:
                    fe:54:25:01:64:4c:9e:9d:a2:9d:b1:55:b8:6e:8e:
                    45:70:02:69:11:69:06:10:f1:af:cc:8f:d1:dd:15:
                    98:d6:d9:63:fc:ec:07:0b:86:cc:79:bb:9a:e8:47:
                    11:7e:89:42:01:9a:4d:6a:b1:66:8c:16:06:04:90:
                    cd:ec:44:7a:04:84:e0:8b:ca:57:9e:e5:b6:cf:d2:
                    3d:ee:c9:00:07:bc:e3:22:cf:3a:f2:11:6e:35:24:
                    4b:2c:f9:f7:c8:b8:09:d2:62:a6:ca:65:cf:53:c8:
                    b8:37:6f:ac:ae:0e:bc:49:0f:e0:c8:27:9c:81:12:
                    07:6c:39:41:20:c5:4e:a8:13:7f:32:a1:49:ac:10:
                    bb:cc:11:d8:7e:06:63:10:ff:9c:d3:b0:c6:31:1d:
                    c8:ba:59:55:dd:e2:14:57:57:71:29:7f:31:8e:ba:
                    85:a3:3c:d6:28:68:42:02:4f:6c:ca:e4:d2:8c:21:
                    95:83:9a:5e:a2:6b:d4:8f:ff:70:00:88:59:a0:fc:
                    1e:9b:d3:df:34:c0:ee:d9:b8:4c:bb:52:6d:5e:2d:
                    43:6d:40:a8:9f:c4:fc:2f:dd:84:bc:38:72:51:c1:
                    bd:3e:9c:56:2d:0f:74:0c:17:37:56:5e:c0:91:78:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CF:D3:6F:31:C0:A7:CF:E7:DA:D6:5D:73:01:9A:65:E5:CD:C8:72
            X509v3 Authority Key Identifier:
                keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:2a:13:01:74:1f:7a:24:68:d4:ca:52:72:3e:e6:a6:71:
         5c:21:34:af:f6:06:e2:8e:7f:28:11:cc:fc:62:49:75:b7:b7:
         af:ef:5a:db:d9:22:e3:0f:70:28:f1:7a:bf:02:14:79:8c:52:
         11:59:d7:40:dd:b3:29:a8:de:8c:46:82:a5:fc:da:e3:00:c9:
         b7:d8:18:89:84:36:51:40:8a:28:82:7f:12:65:ac:02:2c:95:
         cb:a3:66:cc:83:6b:a6:04:d9:69:25:fd:49:4c:86:36:6f:a5:
         0c:83:94:da:f0:5a:77:16:b1:ac:32:fd:ed:e5:16:9b:ed:4f:
         ad:d5:1d:7e:0e:b1:71:8b:37:b2:ab:6f:84:3c:e0:21:e0:ab:
         67:e6:d2:82:5c:40:81:26:38:71:32:55:24:66:5c:09:44:da:
         72:76:f3:d6:40:66:17:c5:a7:c6:14:fe:69:be:c8:16:ae:cc:
         0d:fc:00:95:6d:f8:22:33:a7:56:4e:71:0c:aa:92:21:a1:d8:
         ff:ea:40:2e:ce:fb:9f:5a:60:d7:72:50:7d:68:30:c3:2d:75:
         d5:7e:3b:65:2e:5b:fa:60:ab:27:ff:74:38:50:15:01:ee:d7:
         47:cc:9d:00:b3:84:bc:0a:7e:29:63:e4:71:57:ec:45:e3:c1:
         64:98:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:11 2024 by rpki-client on console-fra.rpki-client.org