Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          /4Z3bxDarnzCuO0RBFKP3CH0soGAhoZGX7V/7H5Fq4s=
Subject key identifier:   FF:34:A8:20:0A:90:F3:D6:B3:46:1A:A5:F8:AB:D0:32:60:10:C1:45
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       018F4E356EDDF40B9F29CBFD4CEEB83FCEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          0867
Signing time:             Mon 06 May 2024 14:01:15 +0000
Manifest this update:     Mon 06 May 2024 14:01:15 +0000
Manifest next update:     Tue 07 May 2024 14:01:15 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: +7IX7uS80p5k60QtQjQ2ogAPuqWZ3pjv14/T951g9w4=)
                          2: VjWbi91n7LVPAsOvJIj6SDhybEM.roa (hash: +aZd4751GrEj983OsK468CvW3x5ttqqW0m/fkxTtXTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:6e:dd:f4:0b:9f:29:cb:fd:4c:ee:b8:3f:ce:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: May  6 14:01:15 2024 GMT
            Not After : May  7 14:01:15 2024 GMT
        Subject: CN=ff34a8200a90f3d6b3461aa5f8abd0326010c145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a5:80:32:62:a3:06:9d:ab:e0:ff:cd:bb:d0:
                    ba:cb:64:19:86:3f:87:e3:34:43:2d:c8:3b:56:62:
                    2b:d1:5a:f4:00:b7:aa:53:38:ba:a2:5b:9e:f2:ae:
                    56:32:5b:7b:1a:76:fb:79:c5:a3:a9:17:9e:fd:c5:
                    ce:16:13:af:04:8c:58:ec:b5:88:1c:83:b5:33:95:
                    94:4f:85:e7:2f:1e:92:04:55:f0:dd:42:d6:4a:97:
                    75:28:0f:cd:61:67:f3:2f:eb:34:69:83:1e:49:60:
                    61:ac:7b:a2:17:53:cb:da:10:5e:d6:d3:a3:e3:0e:
                    dc:fb:c2:a3:e9:77:76:06:87:9e:39:7d:d0:c9:0a:
                    21:38:41:f0:17:c9:c8:7a:eb:e3:7d:5e:a8:a2:d7:
                    28:36:45:e1:22:0b:77:f4:5e:52:da:1f:02:fa:50:
                    5f:a1:25:e8:cf:c0:56:1c:1b:e4:08:2b:27:21:cc:
                    5c:44:cb:f4:b0:0b:f0:56:4e:dd:04:8c:3d:36:e8:
                    2e:c6:0d:74:ab:5c:b5:cd:5b:b5:af:58:8c:40:0f:
                    68:1e:ea:2f:4d:c2:08:45:af:52:7b:d4:59:94:4f:
                    6b:16:1b:25:b6:44:57:0e:1f:70:72:70:bc:43:56:
                    6e:fc:be:c5:08:a5:df:22:14:0a:cd:03:28:c0:e6:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:34:A8:20:0A:90:F3:D6:B3:46:1A:A5:F8:AB:D0:32:60:10:C1:45
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:55:35:df:8a:8c:85:7e:53:0b:cf:80:ab:bd:da:06:f4:
         66:cd:73:55:9c:03:2b:f4:a4:79:16:b2:82:1a:70:29:75:af:
         77:26:c1:2d:c6:80:14:eb:90:95:33:5c:6b:d3:fd:b4:97:69:
         39:a6:17:9b:e4:9a:79:7d:db:40:1d:d3:c6:cf:97:20:da:c1:
         4b:e3:e4:7c:0a:e5:99:01:26:97:a6:68:10:8b:45:14:ac:8a:
         d9:c5:d1:91:00:98:37:df:57:e7:66:9e:8c:e7:79:b1:08:62:
         50:50:82:8c:41:25:53:29:43:d6:f4:c0:82:11:22:84:84:eb:
         0d:ff:44:26:5e:08:0a:bd:2e:f5:c5:5b:26:fd:68:3b:2d:13:
         1c:c7:1c:a2:89:46:6a:c3:56:f1:be:93:d8:15:7b:61:31:99:
         09:58:54:6c:66:38:5c:3d:1c:e5:c0:5d:44:9d:34:a1:bc:8c:
         bf:7a:00:b8:a9:d9:cc:bf:0c:d7:21:bb:04:41:31:3d:98:ab:
         83:7f:58:7d:18:6e:35:3b:20:ee:36:8a:81:a5:6b:f2:88:87:
         22:67:2b:e7:5e:5b:28:60:bc:3d:91:8d:00:06:e3:8d:26:aa:
         64:54:7c:61:42:3c:ec:7b:30:c0:20:e1:6a:7d:83:4a:5c:9b:
         71:fe:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:46:28 2024 by rpki-client on console-ams.rpki-client.org