Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File:                     2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier:          vVEYJnHAUAcgKtA4pOvuRd3/3ydz7iRLx+sFj6UgmPM=
Subject key identifier:   DF:47:29:68:AD:52:F7:A8:40:E5:E8:D2:71:09:44:86:85:DA:06:EE
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer:       /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial:       01901BFD7EC2C1FCB724FDAA148E06BFC043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number:          011C
Signing time:             Sat 15 Jun 2024 13:01:55 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:55 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:55 +0000
Files and hashes:         1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: PbrbSDmmLZYuUBZBU34HP1b69n8SXE0fvhjguewzw1M=)
                          2: GHpec7zHYPHVc-u31tFlje5Kw9A.roa (hash: U+XLC3cnnlaiYnkRCTpPc/nPXOo5/W6BMLWq2JqLK4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:7e:c2:c1:fc:b7:24:fd:aa:14:8e:06:bf:c0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
        Validity
            Not Before: Jun 15 13:01:55 2024 GMT
            Not After : Jun 16 13:01:55 2024 GMT
        Subject: CN=df472968ad52f7a840e5e8d27109448685da06ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:11:8d:e5:6a:a8:67:1c:c7:63:7e:d9:f4:
                    b3:ed:31:58:04:40:f9:de:89:38:02:6a:53:50:1c:
                    a1:27:db:74:46:2f:1b:57:9a:6e:2c:a9:c5:7e:af:
                    06:72:7a:3d:1b:dd:ea:f8:59:50:89:26:32:e0:ff:
                    6b:ab:2e:bd:64:ea:ff:09:e2:0d:bb:67:5c:e8:5e:
                    0d:53:33:29:06:d5:71:fc:4d:38:09:53:7a:a8:dc:
                    54:69:04:f3:0b:62:cb:eb:2c:f5:97:93:77:3b:a2:
                    82:c5:df:e0:9d:cd:2c:ab:9a:02:c2:92:e0:e8:2a:
                    f5:fc:48:06:b8:3f:e6:41:9b:80:3f:f8:30:c7:c1:
                    5e:d2:63:4a:33:4e:c1:ae:2c:27:21:c3:43:e8:3d:
                    54:90:8b:41:b8:cf:22:20:c3:63:51:49:cb:37:38:
                    d5:9f:bd:02:58:09:1a:5d:55:e6:b4:06:93:eb:cf:
                    7e:54:dc:40:25:ef:45:c1:e5:98:83:76:33:da:4b:
                    c9:5b:cf:e6:1a:cd:0c:3d:89:fe:77:a3:73:d5:c0:
                    16:e6:ab:14:07:0d:a5:a1:5c:55:36:9c:80:34:62:
                    4e:2d:95:93:38:0e:3d:10:11:12:dc:8f:3e:95:7c:
                    b1:f4:ef:3b:ec:21:e4:a6:f2:2c:91:0b:d0:1b:67:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:29:68:AD:52:F7:A8:40:E5:E8:D2:71:09:44:86:85:DA:06:EE
            X509v3 Authority Key Identifier:
                keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:2a:6f:e8:3b:2d:59:98:e8:17:80:96:ce:e9:71:c5:ea:
         75:b4:6f:16:fb:f9:f9:d6:fb:14:8c:74:d9:13:09:d2:fb:a3:
         11:7e:9f:1c:1c:bb:53:52:4f:cd:58:13:12:ff:51:a6:7e:d8:
         45:45:a2:eb:d0:f1:21:f1:42:97:61:57:57:ca:62:7d:f1:9a:
         c5:56:3a:80:4a:83:a9:cb:14:b8:da:04:f1:3c:37:c3:32:f4:
         b9:ff:09:b1:06:12:fb:74:de:20:24:fa:22:b2:71:06:a7:ac:
         5c:0a:e6:d2:23:3f:31:6c:aa:07:45:82:b8:d8:0b:be:3e:1b:
         4e:bb:bf:05:61:2b:74:c3:5b:65:25:6e:c5:7b:3e:5f:4c:2e:
         0a:8d:5b:33:bb:2e:ce:4d:fa:e8:1c:f5:70:e0:1f:8f:19:50:
         8f:87:3b:fd:c7:89:b5:42:64:cd:7a:58:81:01:19:30:66:7a:
         27:e3:01:dd:e1:94:a6:be:d0:a0:ce:5f:76:9f:08:9d:42:c9:
         a1:3c:0a:91:25:df:c1:55:2a:b7:0a:8f:63:0d:24:4e:03:f2:
         7d:43:c9:32:81:a5:12:5e:b1:5b:f7:d3:dd:fd:20:c2:e8:da:
         69:f7:cb:3b:63:c5:47:07:63:94:cd:16:f2:d9:dc:e5:0a:c7:
         cf:10:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:17 2024 by rpki-client on console-ams.rpki-client.org