Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File:                     IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier:          L+G5XLmUUVShu4hfmxGacLOOJxploYTLy7/9i+eCxzM=
Subject key identifier:   29:7D:6C:DB:E6:B1:2C:7F:F4:24:41:57:B4:C1:50:8D:0B:0E:4F:B5
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer:       /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial:       018F8748FE4B05169AB275C31D9345B819A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number:          88
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: KwBIXN7hzyxQ42itxJ8jREIefvT23JQB6I2XL/NrLsc=)
                          2: J_ibs2PQBr43Kpo4PXBOlmSfHeE.roa (hash: 42WS7fAXeaOj/zgZaHbSVIYZ8Nbbyy2iF1OdCj9E73o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fe:4b:05:16:9a:b2:75:c3:1d:93:45:b8:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=297d6cdbe6b12c7ff4244157b4c1508d0b0e4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:3c:a3:28:d1:66:25:d6:44:1d:fd:60:4b:
                    c5:d9:9c:d3:b2:7c:98:00:2f:be:1e:51:53:dc:e5:
                    b3:9e:de:07:cd:13:d3:9d:ea:29:54:ae:93:cc:e4:
                    45:b7:64:b8:ea:df:6e:f2:ef:a5:28:cd:c0:ab:8b:
                    d6:5f:15:dc:7f:0e:fb:43:33:2b:db:a4:1a:35:f0:
                    2b:d6:be:d2:33:02:24:05:89:f3:db:e0:01:97:9f:
                    7c:0d:2e:81:b2:33:d5:b2:cf:03:0d:62:8c:ad:50:
                    21:d6:96:f1:1b:75:77:54:16:b9:9e:b1:85:4a:13:
                    02:a0:0d:0c:35:f8:ff:c0:58:64:50:10:e1:1e:f1:
                    5b:75:39:01:c1:9b:22:c7:bc:de:05:25:ba:20:a7:
                    0c:5a:36:72:32:5b:f3:aa:f2:33:e9:69:82:15:ac:
                    8e:67:70:06:44:30:ee:37:d9:d8:ae:1f:71:e1:aa:
                    a7:e4:a9:5b:09:06:a4:3d:8c:6d:67:c1:e8:3c:42:
                    7e:6d:ed:b0:38:ed:a4:b7:7d:ce:b1:a7:38:79:46:
                    ce:8c:8f:f7:5e:62:58:be:1c:eb:91:0e:e0:9c:97:
                    76:8f:6f:a3:9a:29:f5:93:f8:20:cf:d6:bb:bf:74:
                    7e:d9:6d:5d:ce:38:3b:1c:82:c2:12:a0:0c:09:8b:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:6C:DB:E6:B1:2C:7F:F4:24:41:57:B4:C1:50:8D:0B:0E:4F:B5
            X509v3 Authority Key Identifier:
                keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:ab:26:a2:a0:35:9e:eb:27:e1:31:ba:2c:12:23:5d:1d:
         11:10:75:a3:56:77:80:92:53:f9:5d:d8:c8:fb:ed:c9:36:ac:
         22:9c:6c:8d:ec:a8:c5:42:d0:37:af:68:fc:54:c9:a8:54:f7:
         dd:33:5d:03:9f:d8:78:b4:2c:f4:ca:01:36:cd:52:52:11:29:
         eb:30:c4:e1:45:ac:ec:6e:f3:02:05:6b:57:1a:a2:ad:f0:2a:
         a4:ba:4c:d5:a1:18:75:24:59:8b:5d:19:6a:03:de:1d:45:b5:
         f2:2c:d9:13:0b:fb:60:03:4f:13:84:b7:12:f8:9e:eb:ba:c5:
         ac:2c:ad:cd:bd:dd:0f:b2:85:c1:45:5d:4f:62:c5:dd:22:76:
         fd:b9:98:1e:09:6c:48:54:ea:b7:03:0c:7b:97:22:a3:70:49:
         6e:a0:fc:ff:50:5a:ef:a8:da:73:d9:f1:29:ae:6c:a5:81:19:
         22:e8:2d:35:7f:36:96:c2:bb:d0:1a:f0:bb:fc:49:eb:79:d4:
         be:cc:50:89:33:7b:e3:be:2a:68:c0:06:a5:13:3d:5c:3b:c0:
         83:96:e9:63:c5:8e:d3:25:c1:12:dc:02:6d:60:b8:b5:c1:4e:
         68:90:2f:ba:04:b6:eb:b7:0e:fd:cf:06:8e:6a:b8:70:a3:35:
         51:aa:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:41 2024 by rpki-client on console-ams.rpki-client.org