Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File:                     wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier:          SeZcil1e4ZeUeMz3mA7K3HveoXT3RnMaN1YT+hIHBiw=
Subject key identifier:   4A:DE:A2:12:E0:BF:5B:F5:FE:60:14:61:79:92:F3:50:C5:B0:31:1E
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer:       /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial:       018F88249C2B5D557F83F840F95CE87A11DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number:          10CE
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: O7YSl_EIIVZV7MBCfIp0ILkYuJs.roa (hash: RSOgcmsY08E8CkYLMD80W6fC6WjIB1gMFkprZvUEub8=)
                          2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: cnxkpsc6vK6UBZpUfY1oLgnPTL/C5sS5l3vwHzIngXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9c:2b:5d:55:7f:83:f8:40:f9:5c:e8:7a:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=4adea212e0bf5bf5fe6014617992f350c5b0311e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:5e:e2:4a:0a:85:1b:b7:0f:0e:81:6f:32:
                    43:e4:ac:81:69:db:cb:c0:51:73:45:b3:1b:18:28:
                    8a:b7:91:0c:83:d5:ed:17:07:0c:d7:44:63:ed:d6:
                    52:21:91:c0:4c:26:b7:a8:1b:7c:6e:08:31:2d:25:
                    dd:60:05:11:5e:7f:ac:65:e2:dc:7e:b9:96:6d:1d:
                    3d:c9:f1:c5:dc:aa:09:93:38:92:5a:ac:7e:9a:61:
                    3b:9c:4b:fa:2b:68:be:b3:7e:bc:93:38:8a:2e:f1:
                    2a:33:d9:ac:aa:e9:2c:c1:f0:55:1d:fc:1f:75:4a:
                    c2:53:cb:65:b2:8a:1b:3b:93:c1:94:2e:43:24:ce:
                    7d:4e:82:4d:a7:fe:49:90:41:19:c6:c9:95:c3:bc:
                    2a:dc:bc:4f:a1:e1:6a:2c:51:57:2b:18:0f:c5:09:
                    b1:6d:06:af:05:ba:5d:d2:bd:6a:32:73:a9:25:c1:
                    f0:9c:9e:53:8c:d5:c4:53:0d:69:e3:4d:af:6c:95:
                    15:80:d6:20:6d:6f:9f:f9:4a:34:97:46:a6:15:1b:
                    f7:0c:19:e2:9e:70:88:b4:db:05:df:be:4f:f5:ef:
                    8a:0c:64:43:6e:c7:39:78:a2:9b:06:12:2c:46:0e:
                    8f:9a:bf:4d:18:08:e2:43:d0:c9:4c:d4:8e:59:cd:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DE:A2:12:E0:BF:5B:F5:FE:60:14:61:79:92:F3:50:C5:B0:31:1E
            X509v3 Authority Key Identifier:
                keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:aa:ef:10:77:53:cc:8f:0b:3f:13:61:07:d3:81:ec:99:
         d7:3d:0e:ee:fa:7a:84:ae:9e:e5:6d:b3:44:e0:f8:79:26:be:
         e1:3e:c7:a1:36:0a:93:10:e9:99:22:51:dc:a6:cb:7f:94:9f:
         83:b1:7f:76:ac:0d:12:56:af:a9:05:ad:e9:c6:ba:d6:fd:c2:
         38:2d:d2:c5:f5:86:59:fe:0c:18:ff:cd:a3:b9:0c:86:6e:84:
         ab:24:1e:1b:2f:b9:21:54:a6:23:ff:46:96:fd:26:a3:28:e5:
         16:01:8e:7d:3c:77:26:c2:29:79:ef:39:75:94:14:c1:74:e2:
         91:ca:a3:05:9a:67:40:24:93:29:5f:c6:96:6e:dd:1b:a9:f0:
         bb:70:80:38:a1:fa:98:a2:b2:df:26:32:45:18:d7:ff:24:3d:
         da:90:43:db:47:54:d1:91:89:a2:c6:d8:22:bc:73:03:15:8a:
         b9:64:c6:c6:2c:60:d6:90:03:dc:13:f8:be:1c:b2:16:41:97:
         cd:5b:aa:4f:8e:b8:22:7b:71:b1:07:9d:d2:66:6c:39:e8:98:
         e6:63:b1:7f:44:35:ad:08:32:52:b9:e2:f1:8d:8a:9f:ca:2a:
         7d:95:9b:58:68:da:59:64:91:66:79:3d:0f:62:0c:ba:dd:27:
         d5:2e:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:33 2024 by rpki-client on console-fra.rpki-client.org