Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          PcqgMag2hGpb3T9hhOgcleABGBxk6+LLQH6twh2hCNA=
Subject key identifier:   D3:30:35:DC:FB:D0:87:76:74:65:D5:CE:0F:16:DF:21:60:27:0F:AD
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       018F863637333C95BB8A47EC78F7C8891715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          108D
Signing time:             Fri 17 May 2024 11:00:50 +0000
Manifest this update:     Fri 17 May 2024 11:00:50 +0000
Manifest next update:     Sat 18 May 2024 11:00:50 +0000
Files and hashes:         1: 6Oir1QqhOzsGapzzK3NH8Gfc02c.roa (hash: 9zvRB9gegAvUoPHsNb72XjJ8fHELxVrrmZu0p/YeqGE=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: xyM624AxSr8NZQ3OPJRx8OZ9rUMSlbz37hqTQpU2DzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:37:33:3c:95:bb:8a:47:ec:78:f7:c8:89:17:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: May 17 11:00:50 2024 GMT
            Not After : May 18 11:00:50 2024 GMT
        Subject: CN=d33035dcfbd087767465d5ce0f16df2160270fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:97:05:53:0f:66:ab:de:b6:7c:09:42:3d:
                    c3:9f:55:2b:9f:ce:61:8b:5f:85:e4:21:76:f7:12:
                    38:26:c8:ed:57:10:49:9d:c1:e0:b0:af:c7:ce:4b:
                    b3:8e:0d:43:57:92:ce:1a:3f:58:d0:ef:60:08:48:
                    8d:cb:21:28:e0:d1:3d:ac:0f:67:ab:12:f1:97:cc:
                    7e:d6:3d:61:de:ad:97:96:2e:03:1d:04:be:04:db:
                    96:6e:a4:7e:9a:be:6d:55:2f:67:3b:44:44:45:60:
                    0d:7b:4f:6a:f5:86:df:f0:45:87:1d:27:1a:0d:e9:
                    ad:eb:8d:cc:79:f2:24:3e:da:d2:70:ad:eb:fb:21:
                    0f:b5:6c:42:65:5c:ef:d2:18:7f:7c:c8:af:6b:81:
                    8d:cd:8f:61:b8:23:f7:80:e3:dc:ad:08:ab:15:e7:
                    1e:2b:82:d9:a5:f1:e2:3b:91:0b:8d:e0:e9:23:46:
                    1c:70:01:32:80:b0:3c:6f:ab:d3:5a:66:0e:ac:44:
                    f7:3c:bb:b8:43:dc:1a:2f:62:2d:d4:19:85:95:b7:
                    e5:f1:07:f2:fe:15:31:31:67:ff:e0:06:74:e4:09:
                    81:50:61:f2:19:6d:ff:6b:3d:84:f1:68:3d:ad:07:
                    f7:51:1c:61:cd:47:5f:7b:24:8c:c6:ae:28:49:a0:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:35:DC:FB:D0:87:76:74:65:D5:CE:0F:16:DF:21:60:27:0F:AD
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:aa:8e:c7:ad:7b:35:a1:04:f7:fc:80:50:ee:4e:a8:cc:c0:
         66:25:b0:ec:05:5f:26:c5:3e:74:55:db:10:e3:84:6e:6e:7d:
         be:ed:8b:b9:3b:c9:7a:f9:5f:a0:47:d8:ca:f2:54:1a:1e:cc:
         71:a5:dd:4a:94:2b:90:f8:fd:f8:43:6b:ec:a6:94:c2:d2:8a:
         ce:90:ab:e2:eb:38:42:cc:2c:f1:5a:4b:c3:23:33:95:a3:c4:
         4f:a5:a3:db:01:4d:ff:46:85:0e:97:2f:68:80:2d:e3:5f:12:
         93:1c:29:da:e4:ea:30:d9:1a:d3:01:b7:da:f7:51:a3:c5:93:
         93:01:24:2a:a5:5e:32:80:ed:6e:79:4c:27:58:af:5a:ec:f6:
         d4:4e:c2:ad:dc:b2:a2:4c:1f:f9:fc:b1:65:06:a3:b9:5a:85:
         33:51:4f:61:dd:01:db:1c:dc:06:ae:ec:a8:da:a9:85:16:80:
         36:11:21:e9:0c:7f:e0:83:89:26:23:1d:18:57:63:3d:5d:89:
         a0:10:f4:cb:11:cf:aa:bd:de:fb:13:d6:2c:87:28:55:4b:c7:
         6f:43:6b:25:41:0c:2f:78:0b:2d:9e:a3:f7:9c:06:d1:07:a3:
         1d:de:3a:47:20:38:c1:92:80:36:af:e1:4a:cf:b0:ab:8d:43:
         2e:46:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:17 2024 by rpki-client on console-fra.rpki-client.org