Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
File:                     8OcppUzHa4icgy4NE5WJSvfA5f4.mft (raw, json)
Hash identifier:          W7AdoS0tuJhG3W9ajDFSl0RoYgp2MN/qQiUL2qtbJeE=
Subject key identifier:   66:C9:55:D7:B9:84:82:FE:B5:5E:7D:08:4C:99:11:41:93:CD:73:34
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Certificate issuer:       /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial:       018F55EEC1FC0A6E86197008E5A9C14AEE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
Manifest number:          0746
Signing time:             Wed 08 May 2024 02:01:01 +0000
Manifest this update:     Wed 08 May 2024 02:01:01 +0000
Manifest next update:     Thu 09 May 2024 02:01:01 +0000
Files and hashes:         1: 2n-uA3DK4qP028QKZbkLBsXhlJ8.roa (hash: QYCjOkJXzcGnmrGx4yREfLOZJUhoKdoNLjvgnx0gXJ8=)
                          2: 8HBUzKgaYNgbs3J8Job9vljZ9vk.roa (hash: NaqXRPHP9U34qPZEOFRx3JCRqWiZXgAV44O1XgxXEoQ=)
                          3: 8OcppUzHa4icgy4NE5WJSvfA5f4.crl (hash: iqMbTZEPZG5m2fB9gSkf1dos07QRVfZWiGOEFNGgTLA=)
                          4: G3dAEd49H19eqVwMq7kY1NK4YPU.roa (hash: K1I1qP7rEF6jgj/n3FqWtJR4FpibXZFIvuzCrczliPg=)
                          5: OYAbsv-ODgtdM5nTnFXIbaI2Dko.roa (hash: a+LvdqWzXU9GZE8wSnbdx1jImLBDun9TdGNHP2pYFJ4=)
                          6: TpmGQnMH7JhENm2qG5ur9OMd7B4.roa (hash: qCXgVuMk3zYHXyMgoKp5mYjIpezEXujV2d7rhuRfvLE=)
                          7: Wjq_4qXKFYAsS4mylcmPnSrL1r8.roa (hash: MNdU4J5fI/RQ2VtFXgCXw2IgLZapIkhAKksl6Pauonc=)
                          8: tgwEwLbVEXrP-lBEQu6MSttR5KM.roa (hash: u8+165Dy1vc74O/ehwJy0sNsITcspBWp06+xTuCyblQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:ee:c1:fc:0a:6e:86:19:70:08:e5:a9:c1:4a:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
        Validity
            Not Before: May  8 02:01:01 2024 GMT
            Not After : May  9 02:01:01 2024 GMT
        Subject: CN=66c955d7b98482feb55e7d084c99114193cd7334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:7a:71:68:43:45:ad:24:64:14:66:73:10:
                    25:86:21:2a:f9:04:41:23:d2:1a:a1:69:2e:bd:7b:
                    cc:ee:0b:30:83:bd:3b:6c:25:5f:30:34:4d:6c:b3:
                    56:31:75:0f:4f:d0:ca:fc:98:48:12:76:9b:0a:ae:
                    2f:8d:84:22:f3:25:6a:db:95:07:4c:a3:54:b4:98:
                    a6:a1:97:47:75:57:af:9e:56:7e:df:f7:c9:3b:ea:
                    ee:e8:ac:e0:0e:63:13:35:68:37:9b:67:9b:f7:da:
                    8e:ea:ba:23:29:06:5b:82:08:28:81:e2:07:0d:d1:
                    5f:4f:39:cb:9a:ba:4a:50:f1:cd:f0:a1:b5:d7:07:
                    f0:24:5e:be:1d:0d:f5:00:0a:37:6a:f3:44:c2:78:
                    76:3d:c8:44:1b:e6:76:8c:db:35:11:2d:d9:f3:7e:
                    af:2e:2a:4a:37:43:fa:eb:fc:a3:71:34:4d:fd:db:
                    ea:a4:74:15:15:3c:4c:fb:9a:65:1a:c5:c3:86:ec:
                    e4:13:3f:dc:19:52:e0:59:dc:55:8f:34:7f:d1:20:
                    c0:ce:b0:e9:17:13:5e:04:5f:75:77:00:6b:00:3c:
                    da:5c:ae:4b:72:7c:4b:42:b2:44:16:9b:97:57:6e:
                    cf:ab:51:5d:0b:b2:1e:e2:a8:59:dc:34:3b:93:d9:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C9:55:D7:B9:84:82:FE:B5:5E:7D:08:4C:99:11:41:93:CD:73:34
            X509v3 Authority Key Identifier:
                keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:01:b0:84:74:7f:2d:f1:b2:9a:4a:28:4d:8f:8d:22:9d:
         8e:44:5a:ec:3b:d1:1e:ea:14:90:88:cc:3f:78:90:f6:e3:20:
         da:9b:4b:a8:93:e5:86:b5:77:24:5e:07:fa:e5:8f:0a:77:b9:
         74:18:78:40:af:ac:09:65:8e:64:8d:36:9a:6e:c8:f9:03:50:
         bd:a6:d0:f8:30:be:20:40:68:35:22:f2:b5:e0:a2:89:5d:18:
         cb:8f:f7:31:20:69:0c:6b:bf:13:44:b5:ed:56:48:4d:b5:59:
         10:94:af:0e:f4:3a:e3:80:d5:f7:d6:55:21:04:83:a5:86:9d:
         c7:c4:b7:38:7a:f7:cd:92:43:82:ad:8d:d4:33:1f:8a:1a:47:
         3f:6f:26:78:90:c6:44:cf:78:dc:16:cc:55:45:ef:28:3b:9d:
         ba:9d:07:5f:58:30:a0:dd:5c:c8:be:6b:94:05:c8:c4:c9:2e:
         bb:3e:cf:70:c6:30:bf:fc:4d:fe:95:ad:aa:41:4b:07:33:c8:
         64:e2:d7:7e:ca:2b:09:df:52:ca:fe:fb:48:fb:b0:8a:bb:cd:
         91:b4:c6:3c:90:9a:8b:fe:46:96:74:37:5a:0c:7f:f9:ef:80:
         fd:c3:c3:2f:d8:7b:89:66:44:11:de:0e:ec:23:ea:55:ea:6c:
         39:b4:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:09:29 2024 by rpki-client on console-fra.rpki-client.org