Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File:                     zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier:          jWkGBlQPOz2OGPcxSyOFS0lW4pqJ+OtvViGbBb1gxDU=
Subject key identifier:   FB:79:7D:31:6D:A5:73:8E:4B:01:FB:B7:83:A1:52:D6:97:EC:CA:A2
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer:       /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial:       018F87490DBC8EDF9C2F5DFEAEA4AFDD9CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: 1-8h05c-wk97m9L81JVVxwTFysFo.roa (hash: sb+xxScH5wWLmO3vHL/BOTPZQlitly/UgGDyT5pggJM=)
                          2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: SzWvwgRfsIWUhotOEYaXdMflDHA77tttuYNvHbxT3XQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0d:bc:8e:df:9c:2f:5d:fe:ae:a4:af:dd:9c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=fb797d316da5738e4b01fbb783a152d697eccaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:f7:00:22:d6:6f:12:80:d5:ba:0c:77:26:
                    45:d2:76:08:be:11:76:a5:a9:f9:c1:84:24:2a:bd:
                    93:19:a1:93:ab:2e:fe:cc:56:f6:35:e8:8b:76:dd:
                    79:05:0e:64:84:ad:64:a9:72:5a:a3:43:99:47:06:
                    ed:f1:9c:fa:5d:07:78:3a:00:74:58:fa:37:1b:4c:
                    9c:98:b3:f1:71:06:f7:f8:9f:90:53:74:97:d6:ea:
                    3a:76:b0:47:fa:0e:55:0e:d9:56:91:c0:e7:45:45:
                    49:23:a5:ae:ae:bd:58:6d:a6:87:cd:66:19:ae:44:
                    ff:1c:f0:a3:9d:82:bc:a8:8d:2f:11:e3:db:4e:bf:
                    28:27:71:92:39:8f:4d:02:1e:34:4a:68:4b:af:87:
                    f6:f4:6b:5a:80:4d:19:4e:eb:ac:86:0c:10:19:56:
                    5a:d8:4a:2f:a7:a4:3b:42:1a:f8:32:0e:f7:f0:de:
                    c0:23:38:9e:d0:84:93:7c:7f:ab:f5:d8:c0:b8:97:
                    f0:cf:e7:df:6f:73:d2:42:67:c0:b0:a0:44:00:ae:
                    7f:71:06:52:9a:cd:0b:a7:8d:f0:2a:f5:9f:ca:1c:
                    ed:c0:33:f9:f2:c8:3b:1a:e4:39:00:1c:70:c8:ec:
                    b6:96:5e:97:80:f8:17:4c:71:e0:cb:14:35:26:92:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:79:7D:31:6D:A5:73:8E:4B:01:FB:B7:83:A1:52:D6:97:EC:CA:A2
            X509v3 Authority Key Identifier:
                keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:fe:54:ee:28:23:e2:c5:fa:95:d1:56:85:d7:de:63:a5:
         c8:a9:26:fa:e1:16:d3:9f:99:c1:a9:59:75:f4:99:e2:16:02:
         e1:b6:82:44:86:b2:08:67:35:95:03:7d:10:8c:5c:61:68:02:
         3c:bd:f5:93:df:c6:02:f8:4d:73:65:dc:b8:fb:44:51:4d:f2:
         00:28:1d:34:83:e7:8c:d5:7a:67:3a:3b:6f:7d:c8:7f:bf:cb:
         ac:37:58:5e:bd:6d:b6:ea:51:cc:20:a2:f5:57:31:72:55:62:
         00:66:39:de:39:62:97:61:93:65:39:3d:0e:12:27:a8:ef:74:
         63:0a:e0:06:76:80:08:8c:57:63:4d:4a:6d:ec:55:a2:29:4f:
         75:84:f2:70:20:61:20:30:ea:87:d6:52:64:5a:48:05:ea:a4:
         51:ba:de:cf:1a:9e:b5:a3:bf:02:f7:d0:57:d3:03:c7:ca:d5:
         c0:53:a5:81:cd:53:b1:be:66:0a:89:73:35:af:d2:ef:b9:95:
         ce:36:03:f9:2d:cf:80:bb:29:80:78:72:68:f4:4a:94:2e:d4:
         12:f3:91:47:9b:a7:99:4b:be:8d:7e:3c:72:4f:69:b2:3d:81:
         7d:e8:87:20:19:0d:9b:d6:0c:e1:ef:21:84:e6:6c:d5:2b:90:
         8e:4a:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:37 2024 by rpki-client on console-fra.rpki-client.org