Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File:                     dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier:          0SVsNXy1nRvW06oQ68v1hYF3ckNTjOp1Gvvq8PjTqIs=
Subject key identifier:   39:AB:54:EF:26:29:0D:90:DF:C6:DB:72:CD:49:B0:E4:94:F1:40:99
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer:       /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial:       018F8748CF694C2ABCD7C303F12EF769599B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number:          0A97
Signing time:             Fri 17 May 2024 16:00:46 +0000
Manifest this update:     Fri 17 May 2024 16:00:46 +0000
Manifest next update:     Sat 18 May 2024 16:00:46 +0000
Files and hashes:         1: 4qfPi2PCm4eW33gtiqhKUKqbsZg.roa (hash: yTaMTuMLWncLRO9993SlcHAL+VWMgHcyPVBl62qjjQY=)
                          2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: 6sRBFzd/akDYKFoVTtYBa4/KNb3kbanY2XhNHTdHIj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:cf:69:4c:2a:bc:d7:c3:03:f1:2e:f7:69:59:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
        Validity
            Not Before: May 17 16:00:46 2024 GMT
            Not After : May 18 16:00:46 2024 GMT
        Subject: CN=39ab54ef26290d90dfc6db72cd49b0e494f14099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:e3:ba:3d:8b:7a:de:c6:b3:1e:cf:3d:29:
                    fe:01:ed:fe:e8:e0:af:8e:8e:6c:50:a5:a5:6c:8c:
                    f8:10:15:79:48:c0:86:ba:02:45:49:9a:36:8c:16:
                    0e:c9:dc:1f:16:26:f7:da:bf:6c:fa:4d:64:3e:4b:
                    d0:86:1b:8c:fd:82:3a:42:b6:41:ad:39:8b:5a:a1:
                    b7:90:b4:e9:6d:00:91:3b:48:20:d0:a3:01:e9:f2:
                    92:ca:51:12:d5:93:66:99:cd:c8:54:3f:bb:24:08:
                    b2:a9:99:d5:5e:75:cb:24:b7:13:56:1e:a9:8e:b3:
                    4b:f3:c8:a2:2b:40:62:83:ca:b3:58:5c:d0:82:b1:
                    12:69:be:06:5f:24:d3:4f:6f:5c:4f:67:7a:28:a6:
                    4b:e9:ad:f5:99:9e:06:f7:25:1f:bd:01:48:27:62:
                    71:8b:72:82:d2:c8:e3:d3:38:11:c9:1a:af:3d:57:
                    c3:67:fd:ed:5b:b8:25:1d:b5:72:87:e5:a0:0a:49:
                    37:43:b1:05:12:07:15:7a:1c:28:cc:fa:fa:a9:30:
                    b4:51:93:7d:51:9f:cb:47:96:7f:6a:97:74:7d:13:
                    3e:28:68:68:91:69:71:7e:ca:7a:6b:36:42:5c:17:
                    2d:be:6b:ab:6f:d9:44:40:df:f1:93:c1:5f:30:15:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:54:EF:26:29:0D:90:DF:C6:DB:72:CD:49:B0:E4:94:F1:40:99
            X509v3 Authority Key Identifier:
                keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:80:a3:98:05:f8:eb:9e:d0:9d:40:42:20:53:cb:1a:8b:
         9b:37:57:cd:8f:28:ce:df:5f:23:4b:40:1a:9a:2e:44:97:8c:
         4e:3f:7d:0d:89:51:72:ae:5e:06:e0:7d:40:cf:54:cb:30:ac:
         ae:1a:79:cf:37:88:65:de:26:ac:d3:1a:1a:67:53:a2:12:47:
         00:51:d7:9f:00:fe:6b:8f:2f:5a:02:a0:a4:2b:64:35:2f:34:
         97:64:c6:25:99:0a:8b:6a:8c:23:fe:f9:01:82:fd:1c:34:ea:
         63:31:af:ab:da:5e:dc:9e:db:23:03:77:52:61:ec:d6:73:0e:
         d4:1f:b6:1d:9d:00:7e:82:72:fd:d6:ca:9c:00:f4:90:d0:96:
         f8:87:99:de:39:5d:a9:9a:28:91:7d:39:12:63:6e:46:de:8e:
         82:06:f9:a8:41:bf:16:3e:ce:9e:a8:6a:c0:79:f0:b8:46:1a:
         0f:e3:6e:82:a5:43:da:06:bf:74:3a:8f:ed:d9:c1:ca:43:f9:
         61:c0:80:d7:29:58:17:92:0d:ff:5c:c8:d3:a8:86:59:28:08:
         c2:b3:c5:6d:92:bb:09:b0:f9:dd:65:81:30:e3:fd:e1:23:7f:
         c6:c1:b1:a5:62:f8:54:c1:85:cb:f5:93:de:5c:7d:19:07:2e:
         f4:17:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:54:01 2024 by rpki-client on console-ams.rpki-client.org