Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          6fbC6jxrKL/2K/tEQ8eC6egy8TjS9cf85DhSQWORbgY=
Subject key identifier:   33:C4:76:DD:E2:5F:F4:A5:04:EB:3E:B1:99:CB:16:B1:A6:1D:11:68
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       0190448C9CAE75D50EC346A4B04E1BE19461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          08C0
Signing time:             Sun 23 Jun 2024 10:03:04 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:04 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:04 +0000
Files and hashes:         1: PDnz1KEtZONuh0qWxtZT4vHX7R4.roa (hash: U4RhzzIZJM+qmOwbpoxz7FyczozGiw1DSDtt8doKcb8=)
                          2: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: YdNEDuzqHSKmFzP/duqt+S1oBYCZCmDyXPq4BgF2OFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:9c:ae:75:d5:0e:c3:46:a4:b0:4e:1b:e1:94:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Jun 23 10:03:04 2024 GMT
            Not After : Jun 24 10:03:04 2024 GMT
        Subject: CN=33c476dde25ff4a504eb3eb199cb16b1a61d1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:02:ce:65:57:fd:aa:8c:2a:28:c0:99:ee:
                    5d:1e:d6:d9:76:72:45:aa:3e:26:e1:fb:4b:41:05:
                    6d:40:ed:70:c5:cf:8f:78:61:0e:59:eb:c6:95:d1:
                    10:ff:d5:9c:9e:64:4f:ff:f5:f6:0a:b3:66:39:3f:
                    41:52:f0:91:06:6a:e4:09:f9:ef:3b:38:f5:b2:56:
                    d4:2a:f4:ae:0e:c6:91:a9:f3:a5:d8:85:73:81:27:
                    48:0b:96:cc:0a:7c:54:b3:2a:a8:dd:3b:ff:42:5b:
                    b3:92:da:36:ad:63:ec:41:04:8e:be:1c:b3:3a:46:
                    e5:6d:72:a6:84:49:45:2b:12:1e:17:ed:88:87:eb:
                    a6:75:5f:7f:ae:a6:67:c9:18:01:d0:84:11:96:b7:
                    73:cc:4a:ec:46:89:f0:10:4f:c2:cf:12:6b:e9:d4:
                    38:72:62:2c:c8:dd:f6:81:50:ed:6d:4d:72:8d:b9:
                    4d:cd:4b:29:b0:5f:a0:f1:94:f3:9f:78:d2:e5:c7:
                    57:93:45:af:7a:03:ba:c5:ab:52:f6:64:ce:41:65:
                    8f:bd:bd:b2:5c:3a:07:c3:b9:a7:c4:20:8f:66:8e:
                    b4:ba:c3:42:d5:da:f0:7f:f7:d4:39:a2:26:ac:52:
                    d8:8a:5f:87:1c:18:fd:45:7d:2c:7f:81:37:67:81:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:76:DD:E2:5F:F4:A5:04:EB:3E:B1:99:CB:16:B1:A6:1D:11:68
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:09:66:bf:7a:c9:69:7e:ca:4a:9b:43:fb:fa:34:5e:1f:2a:
         0a:b1:0b:2c:0e:d0:a5:43:0e:ce:f9:fd:16:5d:01:d2:44:c4:
         17:49:8a:ee:df:fc:9d:6d:29:94:f6:41:c2:c4:4c:e1:7d:c2:
         99:28:eb:15:0f:87:5d:0a:cc:4f:a8:d6:23:68:b5:35:4b:74:
         a4:2d:3a:45:91:64:5d:86:2d:18:bf:06:ae:34:1d:45:da:57:
         6b:87:3b:b9:e8:93:61:ee:49:cd:91:2d:bf:15:1a:c3:5f:1d:
         58:5f:d2:e0:9b:45:bf:4e:90:11:95:f3:c1:fc:22:9b:99:08:
         34:a9:78:21:71:ce:fc:e8:9e:dd:1f:32:eb:03:44:5e:0b:7a:
         48:dc:0e:87:40:b7:97:22:d8:7f:89:09:3f:bc:7f:0f:95:47:
         f9:28:b7:5b:71:82:36:0b:da:89:3e:45:fc:a8:72:9b:07:7d:
         3c:2c:e9:d1:c8:9a:ad:f4:ba:2d:5f:25:c5:7f:73:5f:d3:03:
         7e:60:e5:4a:f4:b8:f0:66:af:34:2d:cd:53:d6:9a:07:0c:c0:
         b7:7f:96:f9:47:93:2d:48:e5:0c:95:c8:95:a9:a1:38:67:f9:
         9c:d8:5a:f6:06:6a:eb:a6:87:1b:57:ac:ad:27:aa:5a:32:02:
         61:15:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:34:00 2024 by rpki-client on console-ams.rpki-client.org