Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
File:                     kRiebt9T5AZyybXx81GXKCkewu4.mft (raw, json)
Hash identifier:          YHAHAM7VsmWd6L6JQ8s+d6vGGjEFvfuHIB3DG5JY3ho=
Subject key identifier:   C0:8F:6E:CA:94:BB:60:EB:87:03:7C:95:90:11:8E:7C:BA:D3:A7:A6
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Certificate issuer:       /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial:       018F7C20C789353BCBA51DC10686E3882BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
Manifest number:          07ED
Signing time:             Wed 15 May 2024 12:01:13 +0000
Manifest this update:     Wed 15 May 2024 12:01:13 +0000
Manifest next update:     Thu 16 May 2024 12:01:13 +0000
Files and hashes:         1: TGCjsX6EUhP35Fo6ApM9Lp-hI-U.roa (hash: 3G/VLccyUf34pvLoaETRc2PcivrIA4ve1MywWwQkWi0=)
                          2: kRiebt9T5AZyybXx81GXKCkewu4.crl (hash: aqJ6N9oYFDJUl1HuEV49I0AgLt113MfmmTVgNjk8+Oc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:20:c7:89:35:3b:cb:a5:1d:c1:06:86:e3:88:2b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
        Validity
            Not Before: May 15 12:01:13 2024 GMT
            Not After : May 16 12:01:13 2024 GMT
        Subject: CN=c08f6eca94bb60eb87037c9590118e7cbad3a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:3b:16:16:e2:72:7c:46:7c:3f:f3:30:dc:
                    b4:04:46:1d:c0:0a:c6:d7:c9:2e:e8:c0:f5:7d:a5:
                    37:61:2d:5a:bd:89:f0:f2:d7:f2:17:ca:b9:fa:5c:
                    50:5c:e4:25:17:a7:18:25:0d:6d:07:cc:f3:1d:c9:
                    61:c3:1d:2e:97:a6:20:27:17:f1:1b:4a:e0:41:11:
                    30:df:fb:e9:40:f7:4b:83:5c:3a:80:cb:87:d3:a2:
                    61:e4:94:d5:27:39:6f:7c:81:d2:84:19:59:05:24:
                    9b:ba:bd:f2:7b:26:1d:30:87:15:8d:1b:d2:dd:05:
                    80:44:57:b1:44:22:7a:b3:b7:21:b8:ee:7f:3e:61:
                    05:b5:7e:4e:a1:0c:e1:ad:ee:b5:7f:53:cb:46:7c:
                    34:23:aa:ed:ef:2d:19:01:e0:ba:27:1f:dc:15:a4:
                    21:7a:11:f7:6a:46:7a:b5:c8:dc:4c:60:20:45:9a:
                    32:23:10:b5:01:ff:28:b0:66:39:bf:82:e2:52:9b:
                    c9:68:e9:49:36:c9:3e:a0:4a:6a:45:06:5a:74:fc:
                    de:5c:60:2c:93:ac:18:17:1d:da:d8:3b:a3:0c:ef:
                    8f:d9:e2:98:8c:3c:5e:e4:3d:94:54:f5:b5:6c:12:
                    38:b0:57:22:c0:6a:03:61:84:c1:e3:ca:18:f4:37:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:6E:CA:94:BB:60:EB:87:03:7C:95:90:11:8E:7C:BA:D3:A7:A6
            X509v3 Authority Key Identifier:
                keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:3e:bf:45:5d:8c:e5:eb:09:9a:7b:e2:70:a1:71:f2:49:
         c4:70:04:19:4c:a1:9e:f8:33:8a:f7:f8:d7:8b:53:35:7d:db:
         60:96:a2:78:66:2c:2e:ef:d8:5b:cb:89:01:2b:d6:05:45:2d:
         fb:3a:a1:04:0a:12:46:2f:e7:89:de:38:e6:f6:68:df:68:73:
         27:89:68:c2:ef:12:88:11:e0:77:53:f9:2b:08:a1:fd:1d:6f:
         1b:27:6f:75:f1:49:90:16:50:d0:62:3d:d1:f8:70:0c:a6:13:
         ef:7c:ec:75:ee:bf:3e:3b:70:12:2b:28:9c:d3:e4:dc:c7:f1:
         e8:14:94:85:95:18:1c:a8:b8:85:58:b3:a1:f0:c1:14:bf:11:
         37:9c:86:5a:77:dc:59:10:88:ca:83:1a:64:a8:bd:92:50:73:
         4c:ae:2b:05:d5:a8:65:65:3c:ed:12:49:33:6d:a2:9a:8e:8a:
         63:f2:a7:7b:0a:2c:5a:60:05:eb:ac:1d:0e:5f:d2:60:51:6b:
         2e:ef:f7:a9:83:55:9c:2e:86:e5:11:8c:95:0e:7b:f7:55:ba:
         f3:00:34:38:bd:9c:c5:c1:18:05:c8:f0:78:80:7c:50:49:d4:
         c8:70:bb:42:b2:74:a2:1f:81:e7:d1:92:41:2d:a9:74:fc:44:
         3a:03:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 22:03:01 2024 by rpki-client on console-fra.rpki-client.org