Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File:                     shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier:          KecoNWMyMkfRWYIWMRhEuzb4S+jCXsF+x9NRB1uMFMs=
Subject key identifier:   D5:1B:07:AA:18:C4:A9:1A:31:69:F5:1D:41:B7:53:4F:1D:B0:00:0A
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer:       /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial:       01901CD8A221EC850F73514D8931A6F2587C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number:          112D
Signing time:             Sat 15 Jun 2024 17:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:17 +0000
Files and hashes:         1: 2dKilKmnrO047nsJYxv6pZukh6o.roa (hash: 9izQfIm7YEDH5xz6bUdkiunYBsfazKkmc2YsGvrgnFk=)
                          2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: qHobyGRVz2ywC2Iv00B7oAdDm89kPlKoRabpHcZnFbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a2:21:ec:85:0f:73:51:4d:89:31:a6:f2:58:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
        Validity
            Not Before: Jun 15 17:01:17 2024 GMT
            Not After : Jun 16 17:01:17 2024 GMT
        Subject: CN=d51b07aa18c4a91a3169f51d41b7534f1db0000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:66:ef:9a:47:e1:ac:35:2a:41:54:91:04:
                    d7:ee:f5:9b:55:ef:a5:b8:cf:98:1c:cb:53:56:71:
                    68:1b:cb:da:ca:c9:4f:d3:f4:e5:09:92:6d:89:c6:
                    51:5b:28:cb:6a:f9:4e:f9:76:22:fc:86:21:74:b8:
                    8c:ce:6d:88:74:f0:eb:fb:26:3d:c1:92:90:e4:1b:
                    ab:af:3d:6f:3c:9c:cf:84:76:11:d1:ae:29:4f:b8:
                    53:c1:c6:1d:9d:09:f7:fb:54:9b:65:90:63:f5:c5:
                    17:0f:43:85:b6:2a:3f:f2:5f:34:90:8e:12:66:42:
                    f3:a0:5c:31:9e:c0:86:51:e2:73:bd:1e:84:ed:2d:
                    10:9c:d1:63:ef:3c:fd:5f:47:f8:5f:62:0c:56:df:
                    f1:18:0d:2a:57:87:c5:7e:e7:48:2b:d0:e6:69:9d:
                    33:78:6a:2c:9b:12:c9:c9:8e:bb:28:a4:b9:28:a6:
                    1e:d4:be:99:1d:a6:89:86:45:b9:8f:9c:6a:54:84:
                    1f:49:1c:d7:e3:0c:11:90:07:5c:8d:d9:3e:b8:4f:
                    f3:de:86:e6:c3:02:37:59:cc:0b:40:08:70:1b:98:
                    05:b4:52:98:7b:f5:b2:1f:44:51:20:70:a8:e2:bf:
                    a2:18:d1:6b:3a:a2:3b:e9:bc:00:25:c4:61:6a:18:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1B:07:AA:18:C4:A9:1A:31:69:F5:1D:41:B7:53:4F:1D:B0:00:0A
            X509v3 Authority Key Identifier:
                keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:31:18:40:9e:37:c7:32:a2:73:29:e3:c2:72:b3:51:34:5a:
         f2:e8:d5:3e:06:9e:8d:6d:a9:c3:5b:99:d3:e3:e4:05:78:c3:
         8b:dd:33:40:fc:9e:3a:65:e5:db:b1:59:ab:7d:d7:c0:8e:c0:
         eb:4c:28:ba:73:84:00:45:d9:09:63:f8:2c:c6:44:b5:73:7d:
         36:23:ba:d9:51:29:86:f6:e7:ec:ee:e2:e6:a8:a6:60:b2:da:
         f1:87:e7:1d:14:d5:a2:ac:e3:92:0e:2e:75:dd:43:5b:1c:a5:
         5b:69:e9:fd:fb:7f:b4:d1:59:d8:d6:02:7b:fe:7b:98:58:2a:
         4e:ee:76:38:a7:3b:80:75:25:74:eb:fb:0e:87:ff:6d:29:85:
         5c:6a:c6:af:5f:0c:08:d0:31:2b:e9:28:da:22:7e:17:93:da:
         1c:a1:e6:9f:b7:65:84:8f:e2:b1:7d:57:81:0c:83:67:fb:be:
         26:cc:e7:28:db:61:74:aa:a9:c9:95:39:06:2f:8d:c0:c7:79:
         29:67:9d:be:21:b7:40:26:6f:ad:7b:67:2f:de:36:55:d7:f1:
         59:83:de:b1:d0:c0:03:2a:64:4a:c5:f6:da:cf:bd:d0:6e:54:
         9a:f7:16:b9:3e:79:b5:9f:90:ec:57:b3:5c:01:0f:fc:6e:e2:
         93:77:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:58:48 2024 by rpki-client on console-ams.rpki-client.org