Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          tqXgAdxMXEpRXRapgl6qtXT+HTWut3eQiI49rQve+LA=
Subject key identifier:   C0:AE:2D:A8:36:09:D1:B2:CC:67:7A:5A:AD:62:A2:FD:B5:C5:D3:5A
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       018F8749D35A9BD0832F2F22D548FC4CF388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0768
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: cJv7FApnKFTFkE-Ij2tA2zbH-qM.roa (hash: GJ0JiJ2Tc06wq3K0S6yGrMA63wzZVsfcMIB8DISnOr4=)
                          2: e6dF8KcXe_cJKJPN65fLx3Bb3kA.roa (hash: DSaWXMwSxoAcB2W7vAOqgKMFSL+jUVE4Bv2jY4ylI0I=)
                          3: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: nWtkmE/1xp8Y6NObyKDgqKJt5O+enqSRu4jb+BzBdoU=)
                          4: iNPNhqlXLeACNaczHjgurUsi-Ik.roa (hash: ZICiOQbZhufkRppXhZFWK/Cp+orRldU7qyPg5arp6mg=)
                          5: kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa (hash: tVAUPEFZqNJGQp7qspso2WUxFR7Tztlar7CyCAxAMLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d3:5a:9b:d0:83:2f:2f:22:d5:48:fc:4c:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=c0ae2da83609d1b2cc677a5aad62a2fdb5c5d35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:4c:a7:5c:70:db:1c:32:f9:28:ca:ca:65:
                    94:86:07:be:e1:d7:b6:57:e0:7b:7e:29:5d:3c:59:
                    27:8a:4a:82:a2:e9:67:01:99:27:10:c9:f7:7a:56:
                    4c:3a:fe:64:90:ef:e0:72:35:54:99:59:1b:e7:db:
                    fe:27:57:3c:dc:28:da:d1:46:cc:34:a2:31:c2:3c:
                    d2:63:7d:36:33:4d:80:71:5e:82:38:26:3b:8b:10:
                    4b:60:f9:8a:2d:d9:90:7c:a8:f9:fb:b8:20:78:8c:
                    be:e0:78:d2:72:d2:aa:04:7e:1b:53:aa:a9:7a:7d:
                    49:12:9c:04:bc:c5:25:06:fc:27:c8:2d:e0:0f:16:
                    6c:be:94:0b:52:c2:c8:8c:33:c6:82:33:13:24:69:
                    6a:f5:53:65:ba:ed:8d:c1:5c:a5:36:8e:df:48:e2:
                    52:aa:92:fc:85:a2:84:ea:03:2b:eb:d0:59:e0:58:
                    09:db:84:39:dc:af:f8:14:af:5b:50:a6:58:16:80:
                    1d:de:72:bc:e2:e1:50:6e:77:dd:da:5e:30:a8:fa:
                    b4:d6:cc:57:2f:fd:71:3d:dc:70:0a:db:f1:3d:d1:
                    da:a6:e9:0c:80:cf:3f:44:af:cb:15:c9:79:30:85:
                    b4:0a:91:92:72:58:8b:aa:eb:cc:9e:5e:6b:70:ae:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:2D:A8:36:09:D1:B2:CC:67:7A:5A:AD:62:A2:FD:B5:C5:D3:5A
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:1b:48:77:5d:f5:4f:08:d5:77:0b:b5:6e:35:76:56:45:
         4a:1b:d7:9b:4a:d4:e7:af:8a:0e:51:30:fd:28:e2:7a:ca:ac:
         31:52:0a:e3:e6:80:15:39:80:f8:7f:47:42:0c:02:c1:25:2a:
         68:35:54:04:48:71:be:02:1a:48:82:32:84:b8:2d:84:29:3f:
         b8:43:99:e2:08:1d:e7:eb:9d:4d:fe:2d:e1:8d:62:83:db:20:
         83:49:14:a2:1f:b2:95:05:5a:c4:2e:f8:71:75:95:b6:a8:9f:
         9d:5e:af:71:c6:1b:f4:24:bd:ed:03:cd:fd:d5:5f:1f:51:8c:
         9a:9b:6e:09:fc:06:88:64:e0:ca:f5:cf:9b:71:1b:39:1c:2e:
         83:40:74:69:b9:84:3b:71:1a:18:5f:57:85:44:98:26:2e:d5:
         4f:70:d9:24:d5:47:35:03:42:e5:48:14:39:87:4d:87:ba:46:
         32:29:8c:7a:f5:8a:c8:8e:bb:00:12:cb:40:64:71:6e:08:32:
         9b:d1:4b:16:a5:14:83:f3:55:4d:f5:05:52:71:9f:85:88:d1:
         01:46:b5:f3:ae:17:6d:81:d1:31:06:cf:1e:46:d6:13:c5:be:
         88:36:5e:1a:6e:99:db:6d:26:5a:5f:8d:87:82:39:6f:a5:13:
         78:d5:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:22 2024 by rpki-client on console-fra.rpki-client.org