Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          1VOxkonp/DucNlUZtM47wqsYIqj11dSf+itoGx+QbQg=
Subject key identifier:   CF:2D:F4:5C:F0:A0:C4:F0:35:00:B6:01:7B:A3:B1:9F:F0:A7:A0:D9
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       018F5136D6A777C3A80639C291EB5E6F0A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          0828
Signing time:             Tue 07 May 2024 04:01:39 +0000
Manifest this update:     Tue 07 May 2024 04:01:39 +0000
Manifest next update:     Wed 08 May 2024 04:01:39 +0000
Files and hashes:         1: 1-QbTMJLLKzhnCi8dnis7s69kL8M.roa (hash: 5YcJz68koD27szy6FZSiW4F9LJjvvdfQdgmi+XrCIlg=)
                          2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: T+Mz8vsLo/HZ05TAhr0wTcgDeRcioKpbP8wdm+DOdsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:d6:a7:77:c3:a8:06:39:c2:91:eb:5e:6f:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: May  7 04:01:39 2024 GMT
            Not After : May  8 04:01:39 2024 GMT
        Subject: CN=cf2df45cf0a0c4f03500b6017ba3b19ff0a7a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:e0:8a:5e:a5:76:f5:e9:2b:45:0e:d8:92:
                    ba:88:dc:af:85:1b:db:3f:e8:4c:fa:bc:1d:c5:a7:
                    dd:dc:6f:af:53:9c:56:91:ac:78:6a:db:ef:cc:1a:
                    98:b7:cb:ac:76:c3:96:ec:ad:70:f3:31:76:bb:51:
                    2c:41:19:93:73:85:e0:b8:5d:51:56:ba:82:d0:59:
                    90:11:f7:23:21:e8:a4:30:da:03:56:ad:66:0b:8f:
                    35:d2:14:df:a6:1a:d0:d4:f8:2a:de:ab:6b:ae:3e:
                    19:8d:bc:dc:88:46:bf:71:f7:d6:51:25:83:a6:bf:
                    0a:8d:a2:43:54:d3:7c:14:56:79:ab:d7:19:50:52:
                    1f:ea:f5:bd:b0:b5:90:d6:f2:58:c8:ec:16:b0:b2:
                    d2:43:04:2c:b2:2d:02:5f:e4:5a:86:ef:16:28:50:
                    28:1f:f0:d8:f9:8e:73:1d:dc:ff:b6:a5:97:b1:e3:
                    d0:8e:88:14:b4:d4:3e:82:27:2f:96:26:c1:00:dc:
                    ed:0a:96:eb:e8:23:cc:9e:e2:65:67:f1:14:f6:5b:
                    30:01:a2:a0:0f:80:f0:be:7f:6a:d3:66:b0:f8:67:
                    0f:da:a2:1d:59:00:3d:fe:f9:76:64:9c:e5:2a:20:
                    18:9c:fa:33:f8:cb:54:c2:e6:10:0e:d3:33:a9:ad:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:F4:5C:F0:A0:C4:F0:35:00:B6:01:7B:A3:B1:9F:F0:A7:A0:D9
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:14:fe:df:d1:f6:b2:38:af:9a:93:e6:00:12:3a:4f:73:
         e5:46:e9:98:63:24:87:9f:b0:f8:67:91:7a:75:a8:08:fe:c3:
         8c:bb:81:b1:4d:ac:6d:57:34:cf:e9:3a:df:3d:e1:04:72:34:
         87:f0:80:f6:3e:d8:0e:06:a1:df:64:d7:7d:bc:2b:34:09:26:
         34:e1:88:b1:25:1d:83:ba:41:5b:56:9c:6d:17:55:8b:8f:8e:
         25:55:20:ed:b2:46:9a:30:1e:8b:60:96:2c:5b:c0:cc:3b:d7:
         b7:b2:8a:0a:94:c8:43:4d:86:b0:8d:5b:15:d9:51:82:1d:e5:
         36:88:0c:fe:a9:7d:d3:9a:ec:d2:a5:62:a6:ee:c0:5b:2f:66:
         a6:a6:3b:4a:b3:06:e9:d5:02:07:9a:9f:21:08:a7:2b:af:9e:
         a3:56:d2:d4:97:a8:bf:29:32:be:71:4f:84:56:31:cc:6a:1e:
         c9:38:28:56:01:65:56:a2:dd:f6:e4:e7:1e:06:97:4d:8f:b5:
         98:4a:7a:10:33:29:43:09:b2:57:66:27:07:24:03:b9:08:1c:
         ee:7b:3b:13:f8:ae:6b:d0:86:fa:9c:1a:dc:31:90:cd:31:a1:
         1b:7d:29:bf:04:eb:fa:4c:24:1f:8c:8b:33:77:55:35:f8:87:
         4f:15:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:57:07 2024 by rpki-client on console-fra.rpki-client.org