Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File:                     aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier:          SelrhUMChkl6Vd6t8Rry/7ait/YV9+JvpnrHybEZO2I=
Subject key identifier:   71:DC:6E:21:2B:BE:E2:3A:0B:AE:23:68:CF:B2:7F:ED:4F:BB:37:E4
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer:       /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial:       018F915E6E34FF8929CBDAC7339F6F435AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number:          06A4
Signing time:             Sun 19 May 2024 15:00:35 +0000
Manifest this update:     Sun 19 May 2024 15:00:35 +0000
Manifest next update:     Mon 20 May 2024 15:00:35 +0000
Files and hashes:         1: Ddo-rGp8Y15i3TXkElUp4jMgMBU.roa (hash: M7bR5rbg9GLuguhMNH1R1xL91r/ucZoK94UNG2CQXSU=)
                          2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: ky8KB2FEubh6YgTNRGQvXDTOoVG3q8c+kmExxiLP+Pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:5e:6e:34:ff:89:29:cb:da:c7:33:9f:6f:43:5a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
        Validity
            Not Before: May 19 15:00:35 2024 GMT
            Not After : May 20 15:00:35 2024 GMT
        Subject: CN=71dc6e212bbee23a0bae2368cfb27fed4fbb37e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:9f:a9:8e:6d:2b:10:c3:49:39:97:ea:84:
                    cf:bc:76:d2:0f:d8:b4:03:a5:29:5e:5d:06:a3:19:
                    11:87:fc:a2:6d:ef:4f:fa:f2:78:61:77:c8:28:70:
                    8d:67:d9:3f:e7:6b:2f:87:1a:2d:19:7a:69:96:6e:
                    34:f3:cd:d4:42:9c:35:e7:83:61:70:df:02:e4:13:
                    1a:d1:23:f6:e8:ba:83:02:f6:7f:98:03:0b:1b:18:
                    8b:94:72:3d:da:7b:7b:70:80:b4:47:11:6d:ce:01:
                    e8:4d:bc:98:1b:cd:42:6f:59:23:cd:d5:f3:cb:91:
                    63:77:86:c7:ba:47:e6:18:65:72:cb:6f:e6:5d:f9:
                    d2:b5:56:9d:a0:29:7f:ab:86:ac:03:8b:20:17:8a:
                    5b:09:37:7a:23:f1:f7:55:96:b5:b2:09:87:1e:5b:
                    4a:7c:e3:13:21:71:f6:89:52:52:3d:c4:5e:b6:a2:
                    73:fe:43:5e:10:3f:5c:d3:20:c7:a5:5b:2d:ca:05:
                    0e:8b:a5:0b:4f:ad:f0:e5:03:ac:a7:83:90:a9:2f:
                    0d:68:ef:bc:fd:b3:8f:6f:03:07:7e:b9:06:24:8b:
                    eb:ec:05:cd:a9:a1:5f:af:6b:7c:41:ec:b6:c7:c5:
                    3f:81:74:1c:9f:cf:5b:41:6a:3b:1b:a4:b1:af:00:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:6E:21:2B:BE:E2:3A:0B:AE:23:68:CF:B2:7F:ED:4F:BB:37:E4
            X509v3 Authority Key Identifier:
                keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:ec:fa:f8:c7:59:03:6b:62:c8:f4:3d:88:28:42:19:ec:
         f8:82:bf:4e:33:ef:ef:7a:40:d7:eb:c1:7b:49:76:b4:6a:4e:
         73:7a:74:20:99:cc:49:87:64:2d:55:81:d6:cc:e2:e2:e3:6d:
         03:88:92:ca:6c:a7:ab:d7:2e:ed:d8:13:50:05:c4:7e:24:f2:
         8b:98:0e:39:75:9a:66:7a:01:cc:35:4e:39:1e:e3:ec:76:56:
         eb:59:b4:29:0d:4e:83:b6:5d:86:8c:59:1f:10:c0:09:a6:4b:
         0e:62:e2:00:59:07:2d:cd:f7:43:0a:8b:75:cf:f7:66:57:42:
         fc:c4:bb:0f:f1:7e:88:7a:e5:c3:44:09:00:46:e7:bd:ff:9b:
         8b:af:8e:bc:f0:50:45:0b:c5:df:cd:32:26:3d:53:56:2e:fa:
         0b:1d:b0:72:26:35:a2:24:2a:de:4e:c0:ac:34:db:6a:73:18:
         b1:72:13:90:4f:8b:a3:70:64:ef:b3:6a:4f:3c:73:88:16:d5:
         fb:83:1a:2e:ad:08:7f:fb:89:6a:2d:c6:75:dc:8c:4f:dc:44:
         8b:cd:a6:bb:eb:18:73:aa:86:b0:36:43:57:12:b9:61:5e:d7:
         a3:f2:5f:cd:77:9c:ed:0f:8d:0a:8d:17:21:03:c6:da:55:8e:
         7a:f4:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:59:09 2024 by rpki-client on console-ams.rpki-client.org