Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File:                     rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier:          QnMse0HbWj2MWnA5Qktl/BrhjWDF/rxqEvd7OQqThvM=
Subject key identifier:   B5:7B:71:D3:34:FF:03:3C:E8:A5:7C:B6:1D:9D:8E:50:EB:DD:4E:D5
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer:       /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial:       018F9C875B10E96C2E2856B9AEDCA14250BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number:          A0
Signing time:             Tue 21 May 2024 19:01:07 +0000
Manifest this update:     Tue 21 May 2024 19:01:07 +0000
Manifest next update:     Wed 22 May 2024 19:01:07 +0000
Files and hashes:         1: qwb8nF-ZD-uMosapm9u4lx1dVic.roa (hash: YWT0yUfqmQRnq3vf9AovfAlreSHxaZoUAfFRJltcEYw=)
                          2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: fAoaC1NmwRlTra7dxHDAAlE+lhPUL1BphizG6LtK6o4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:5b:10:e9:6c:2e:28:56:b9:ae:dc:a1:42:50:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
        Validity
            Not Before: May 21 19:01:07 2024 GMT
            Not After : May 22 19:01:07 2024 GMT
        Subject: CN=b57b71d334ff033ce8a57cb61d9d8e50ebdd4ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:20:89:72:f2:94:46:c7:1b:cb:25:fb:a4:
                    08:c4:a2:c5:9c:12:e3:08:d8:6b:ef:76:a5:78:20:
                    56:f3:17:8b:29:7c:85:34:e3:2d:37:4a:a7:46:ec:
                    25:ef:45:1c:c9:0e:29:eb:07:af:b7:a6:66:ea:e1:
                    21:70:27:1c:4f:6f:e4:b0:b6:b9:79:72:d9:79:15:
                    e4:8e:df:9c:ec:e7:d5:b1:99:5d:bc:ce:67:6e:f4:
                    db:dd:6d:bf:c3:d6:5a:2d:ad:78:33:10:14:fb:02:
                    30:bb:fb:10:da:20:39:08:19:d4:35:03:95:b0:71:
                    27:7a:a0:29:48:cb:b3:01:cf:62:99:c7:e7:ff:c1:
                    00:d0:41:78:12:6f:22:0a:69:0c:f5:ad:e5:60:b4:
                    6b:bf:57:ad:19:39:5f:48:21:05:27:33:8f:47:7a:
                    39:da:1f:ac:48:4f:07:42:9c:26:58:31:93:5c:d0:
                    a1:32:67:e5:33:a4:28:67:e6:56:fd:22:06:97:d8:
                    ca:44:22:23:1e:4a:a0:8d:80:77:0a:08:c6:b1:62:
                    b5:f9:84:81:9e:35:cd:a4:c7:52:de:00:42:f1:50:
                    73:73:e3:ae:ae:e2:17:e5:c6:38:c5:bd:39:81:9c:
                    35:b0:c3:a3:e6:a8:6c:51:f8:a6:cb:6e:db:88:78:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:71:D3:34:FF:03:3C:E8:A5:7C:B6:1D:9D:8E:50:EB:DD:4E:D5
            X509v3 Authority Key Identifier:
                keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:60:82:0a:20:05:79:a7:b4:53:d6:dd:c5:fc:a6:49:42:5b:
         ec:15:6d:ca:ef:a7:3e:d3:86:d0:cc:c1:ff:a5:98:2b:3d:62:
         8c:84:98:04:35:dc:14:44:b8:e5:82:a3:28:a2:02:b1:82:5c:
         c9:89:1a:8e:30:6f:4f:3b:43:4f:a1:1a:df:4c:45:c8:58:9d:
         aa:31:72:73:a6:44:42:33:ea:45:42:c0:7b:2a:9d:de:1e:de:
         c7:e4:5a:39:3f:f8:c5:9d:52:06:ff:be:9e:18:d6:88:94:3a:
         f2:c7:be:b9:99:81:0d:0b:18:d0:dc:7c:bd:91:a7:60:0d:be:
         0e:74:6c:9e:b6:58:1e:19:89:c7:0e:fe:9a:b4:2e:83:06:eb:
         e9:98:cc:34:e0:21:9c:81:d6:ec:ac:f9:01:c5:68:fd:f6:82:
         83:d3:5f:3c:a9:fb:32:b6:e8:78:2a:47:ef:12:1a:aa:77:65:
         28:03:cc:08:f3:58:04:cc:c6:58:cc:ef:ef:33:1c:40:1b:5d:
         c3:50:bb:b8:9e:70:6e:a3:8d:03:fd:67:c3:0f:91:7e:1a:e7:
         48:7f:77:b6:01:ec:5d:46:86:d0:98:a0:13:72:4e:68:bd:12:
         3d:b8:d7:f2:69:be:55:ce:7a:68:7b:17:26:c2:a5:4d:c7:bc:
         f4:46:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:59:09 2024 by rpki-client on console-ams.rpki-client.org