Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          74m0wR229leevI7EiaGYYfLL/79daEmTJ7i1ioTBb2U=
Subject key identifier:   C5:D8:2B:78:65:7C:D3:2F:C7:21:10:72:25:8E:C7:75:0F:FF:DB:6D
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       018F4B6C9F0387A841E39EA2DA38654D4D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          0801
Signing time:             Mon 06 May 2024 01:02:40 +0000
Manifest this update:     Mon 06 May 2024 01:02:40 +0000
Manifest next update:     Tue 07 May 2024 01:02:40 +0000
Files and hashes:         1: 2xfKppgWle2n7kYCuYbhhQAKhtc.roa (hash: XdrnQ84azWgproX67aRx62T19XPV0DaeFAKNgPfQjXM=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: dMm0bqXHhevc7lGnZ2fooMTfv0NEVwwF6ApsP1H3N2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:9f:03:87:a8:41:e3:9e:a2:da:38:65:4d:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: May  6 01:02:40 2024 GMT
            Not After : May  7 01:02:40 2024 GMT
        Subject: CN=c5d82b78657cd32fc7211072258ec7750fffdb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:5a:66:fb:6b:88:33:3e:36:af:a3:78:31:
                    a4:80:e6:a2:52:94:7c:f3:e6:d9:c0:fa:6d:3d:51:
                    c2:a0:f5:d0:af:6b:e9:30:8d:b1:5a:78:e6:89:e7:
                    fb:e7:1c:98:c5:e6:6f:d6:bb:8a:00:3c:33:30:a6:
                    2e:19:65:40:55:6c:45:c4:6a:56:09:2e:9a:4c:5f:
                    62:a6:82:af:55:db:a7:62:3f:bb:4c:5f:17:a8:6d:
                    ef:6f:5f:f4:90:8b:a1:c1:b7:38:e1:b2:8f:5c:cf:
                    ee:7c:65:67:f9:fc:7f:4b:95:66:10:f5:9a:2e:2a:
                    e2:6f:67:4e:7a:90:cd:25:99:7b:da:7a:67:e0:a7:
                    81:18:42:bb:fd:35:ca:66:b8:99:48:60:ef:05:c8:
                    c7:f7:84:07:f4:e7:d5:9f:87:c8:e4:8a:96:d8:5f:
                    81:d3:76:1d:5e:7e:9d:66:ea:b5:4e:f4:fb:21:26:
                    2d:69:a6:0d:e2:4a:85:5c:9b:55:13:37:4a:d5:74:
                    ee:35:ad:23:80:24:8e:eb:a9:98:d7:cd:80:d2:08:
                    ad:36:26:d4:f1:63:25:33:89:8d:89:a0:71:aa:b3:
                    59:0b:1f:7b:76:b8:c4:f1:43:83:1b:19:6c:53:1e:
                    50:61:fd:5a:ca:4d:97:76:77:77:82:a0:b5:f0:fc:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:2B:78:65:7C:D3:2F:C7:21:10:72:25:8E:C7:75:0F:FF:DB:6D
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:25:4e:46:27:50:ac:56:9f:6e:75:39:b1:2a:39:b9:e6:
         af:e5:ae:28:1c:49:6f:a1:d2:5d:f3:48:fc:5c:e6:6c:72:9d:
         7a:cf:d9:c1:15:0a:eb:2d:55:1a:e0:23:5c:95:c5:6f:42:fb:
         fe:0a:02:9a:3f:c5:29:73:07:31:84:9e:a8:05:a1:e1:fe:a6:
         ae:88:63:08:81:2b:e3:a4:ec:fc:d3:5c:e4:7f:cc:89:8d:e7:
         d5:ba:0e:81:ac:6a:2a:86:65:e7:6f:f8:0d:08:5d:d9:5d:58:
         af:21:eb:08:f9:bd:49:d8:2c:e5:6e:21:34:74:09:29:bd:85:
         a9:21:3a:a3:e4:e5:24:92:6f:44:3f:f2:c8:52:70:a1:e1:17:
         cd:c7:d2:06:30:63:04:b8:a2:1c:bf:e2:c4:49:22:a4:6f:15:
         d8:9a:0d:1f:4d:b4:2e:02:29:fe:c3:ff:d5:86:78:f4:69:14:
         32:e4:cb:64:11:ed:86:61:84:09:fa:91:91:c2:4d:b6:3f:25:
         ac:b0:14:3c:ad:90:33:97:43:d9:80:3a:92:15:80:79:48:40:
         7c:77:84:bf:0f:4c:6c:38:42:01:fa:1f:ae:42:3d:ce:c8:bd:
         1c:13:4b:ff:c6:b1:ec:1e:1a:f5:4f:11:1e:62:59:74:9e:1e:
         78:d9:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:54:09 2024 by rpki-client on console-fra.rpki-client.org