Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File:                     Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier:          APU2b34tWNUULCi6e/hKIqfRvDDawBAcPyvHlVizo2A=
Subject key identifier:   D8:4E:0D:2C:04:81:D5:2C:23:40:92:EB:B6:23:8D:BD:44:9E:12:51
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer:       /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial:       018F96BB5070212186617D577261775AEF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number:          0B02
Signing time:             Mon 20 May 2024 16:00:09 +0000
Manifest this update:     Mon 20 May 2024 16:00:09 +0000
Manifest next update:     Tue 21 May 2024 16:00:09 +0000
Files and hashes:         1: 7SbEh-AMTINoPBeRDFl9IAaoOj0.roa (hash: DTHvxHNRnhltXB1qkvHOwQUfn/i3xqHHxwHie2YvUeU=)
                          2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: 1VYUNiAT1CXj6O8JXiAFrOHVOoxETLV9mN8Dkgk1Gyo=)
                          3: XCNeQd7Y8IAtSvrMWwBxsYCBbMw.roa (hash: H9DzuSqupPCHtER3HPswiJACgIrMw5Fjm4h+WwNPBAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:50:70:21:21:86:61:7d:57:72:61:77:5a:ef:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
        Validity
            Not Before: May 20 16:00:09 2024 GMT
            Not After : May 21 16:00:09 2024 GMT
        Subject: CN=d84e0d2c0481d52c234092ebb6238dbd449e1251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:f5:98:8f:c2:ff:3c:cc:1c:03:4d:7b:e9:
                    21:38:5c:a0:8c:8d:50:af:3a:24:73:07:b6:89:51:
                    88:d9:7c:48:6b:89:c8:7b:d8:4d:d7:cf:d4:bc:2a:
                    58:5a:b2:79:bf:73:eb:6d:01:da:af:e8:59:88:5c:
                    89:08:83:50:15:7d:5e:e9:8c:f4:18:1a:1e:53:ad:
                    c2:4d:9c:d5:a7:a5:12:8d:9d:6a:cd:67:d6:94:13:
                    f0:a9:f5:d0:18:dd:50:5f:8b:26:c1:10:4a:9f:3e:
                    6c:c6:ab:5d:6d:b2:b1:ba:d4:6e:9b:28:3f:21:50:
                    33:64:e5:a4:af:83:33:53:70:8a:bf:9e:3f:89:26:
                    42:94:f6:7d:a8:dd:ff:6a:f5:1d:9a:03:f2:c8:22:
                    2a:3c:a5:83:dc:11:a9:c7:d0:00:54:0d:df:56:53:
                    52:18:5d:0e:3f:ca:de:57:7e:b1:1e:59:d1:75:64:
                    d9:22:ce:5f:e3:b4:13:5f:b2:f3:46:3e:2e:d7:46:
                    6a:0b:7c:7e:dd:1b:ed:8b:14:11:40:da:43:b5:a0:
                    4b:7f:cf:be:f2:c3:4a:84:22:91:b0:24:0c:d5:a0:
                    fb:a0:7a:3a:7e:03:c4:ca:ff:e9:14:fe:d7:53:e0:
                    53:b1:74:1f:cc:9a:c2:86:32:3a:10:d3:4d:ba:d6:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4E:0D:2C:04:81:D5:2C:23:40:92:EB:B6:23:8D:BD:44:9E:12:51
            X509v3 Authority Key Identifier:
                keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:63:c6:2d:0e:1d:57:26:dd:84:98:f4:d7:87:53:8b:d1:
         6e:d3:ab:ee:83:66:9d:1c:73:97:b7:55:73:5a:31:5b:84:3a:
         05:40:0f:ac:f9:80:30:a4:89:27:9b:fc:ac:ef:89:ad:ef:fe:
         c5:65:3d:67:ce:9d:ba:6e:7c:05:73:48:1e:f8:63:ff:b5:05:
         7d:d3:92:d2:be:c2:bf:8d:7e:96:8d:01:66:eb:c8:d9:99:21:
         27:cb:18:90:c3:fc:17:19:62:57:06:51:af:9b:ea:f4:f9:38:
         94:0b:bc:41:6b:37:fe:20:88:7b:6d:dd:a2:97:57:e2:5e:24:
         6d:e0:63:35:a8:1e:54:6c:64:ce:97:2a:81:15:64:ff:c2:29:
         6f:89:5b:8f:b3:aa:f4:25:a0:43:6a:8b:c1:4a:c2:34:0c:d3:
         ad:f0:79:44:8c:65:d1:e0:d9:57:41:dd:01:56:2e:48:9a:c1:
         12:91:fb:de:c7:6b:71:f0:f5:ba:bd:d9:09:14:8c:15:16:43:
         6f:17:3a:9a:0b:c4:96:a9:2e:30:e6:bb:41:ce:2e:9d:ba:b0:
         34:13:f9:e6:7b:ca:ae:f3:e1:5f:b3:31:72:3c:ce:02:13:a1:
         de:c1:29:d9:1a:6c:de:28:a4:c3:88:fa:c9:ac:ed:2f:5e:7c:
         11:5f:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:29:28 2024 by rpki-client on console-fra.rpki-client.org