Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          r7qgrJJnsfjzDvlMdGbfcGVhpzsTbyGCauoY2mGB7hk=
Subject key identifier:   00:C7:A1:CD:32:66:02:F0:C0:72:28:14:64:B5:EF:2B:BB:32:B8:5E
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       018F87ED9F3874254663A84FBE43A5AEF8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: 6mZN1nCwm8ztW4MUejUbgIoIwi4.roa (hash: eYDq7UXOQYWpnl0vNtD+VB+Bex+20xRyFgvsZQpHSHM=)
                          2: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: LPhGEgENJ/d+mwUabI77gY6R6LYeXQU2y2rca/+l6Hg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9f:38:74:25:46:63:a8:4f:be:43:a5:ae:f8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=00c7a1cd326602f0c072281464b5ef2bbb32b85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:b1:4d:1d:be:c1:01:a3:b8:68:76:7d:68:
                    9b:df:70:e9:77:03:c5:08:cf:e4:fc:3d:37:d8:85:
                    aa:42:af:04:a3:0a:cd:74:67:d0:a3:b1:ea:55:c0:
                    d9:80:00:97:4b:03:33:be:e5:39:7c:f7:f1:69:01:
                    c2:22:8a:be:78:65:79:22:c0:06:9d:16:f3:28:a6:
                    20:9e:ad:fa:f2:c7:1f:ec:c9:0e:2d:05:78:8a:a3:
                    72:7d:94:5a:7f:29:1d:40:a1:18:5f:3b:6a:7c:e5:
                    cf:39:2e:93:b0:62:9f:3a:e5:23:e4:2d:89:b6:45:
                    fe:78:f2:3a:66:44:a3:72:8b:3a:55:6f:c3:60:a4:
                    0f:6c:d4:af:8c:25:aa:30:0b:a2:8c:26:b9:58:52:
                    61:9c:ae:a9:45:28:cb:b4:f9:93:46:86:2d:db:51:
                    b5:15:49:ff:32:dc:d3:4c:f0:a0:5a:e0:73:30:9d:
                    08:e1:b3:49:6c:02:41:23:75:58:6f:89:de:71:01:
                    ae:07:46:85:0b:17:5d:f1:17:c2:f5:f8:05:86:10:
                    f2:78:0b:bc:07:35:b5:d8:bc:59:80:c3:d1:5e:29:
                    a9:ab:5a:6a:a5:a1:fe:d1:51:28:ad:ea:83:99:a4:
                    0e:6a:6a:2b:bf:d1:04:06:40:2b:7e:b1:e2:13:ac:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:A1:CD:32:66:02:F0:C0:72:28:14:64:B5:EF:2B:BB:32:B8:5E
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:c7:74:f9:b0:01:aa:58:59:c5:0e:28:a8:cc:17:9c:b1:
         ea:10:9e:59:d3:59:b1:3b:24:43:71:64:89:a7:c4:be:49:e9:
         ad:f6:c3:43:e6:b1:eb:0e:e4:c3:68:17:b7:78:84:e3:09:aa:
         21:39:da:e2:93:f0:f1:d3:18:c1:9f:e1:9b:f6:03:99:da:a8:
         77:de:42:19:c4:f4:ad:c9:c2:1a:dc:32:46:cf:31:f3:83:f8:
         30:c2:db:6a:21:7d:93:1c:13:3c:6d:c8:7d:7b:ae:be:e4:6e:
         8d:af:24:76:c7:ce:35:c9:b0:8e:65:d0:39:0e:ea:f2:c8:1d:
         77:1a:cc:ed:8b:63:d0:cf:9d:c4:96:fa:87:d3:0e:c3:5d:77:
         04:c6:dc:21:28:d4:8f:3f:45:c0:a7:27:e0:cf:7e:68:9e:e3:
         f8:54:06:94:cf:5c:44:ef:4e:b1:08:98:ce:fa:84:73:32:8f:
         0d:a2:cb:b4:fc:69:e1:ca:07:94:c7:96:88:d0:7b:a8:ff:73:
         53:e4:05:c0:bc:0f:b9:b5:89:22:74:25:95:14:97:50:91:c5:
         51:b0:e0:46:d9:5f:2e:f5:d9:66:e3:4a:aa:2b:5c:8f:b0:1b:
         d0:b1:37:d6:1a:75:2f:2a:82:f8:2d:9a:5d:c8:6d:f4:4e:aa:
         ad:34:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:22 2024 by rpki-client on console-ams.rpki-client.org