Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          +1WxY4NW2Zz/iy4c56RqWO4HLKgmPmP1wM1SP5hLPyk=
Subject key identifier:   28:34:80:78:ED:C9:A7:8C:0D:AC:54:B1:B3:A7:E2:C6:50:51:1C:B9
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       01901E8F96332D82F664088495D67A4A48DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 01:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:44 +0000
Files and hashes:         1: mCCA04gUcqahes9gv_eKFJntiBI.roa (hash: CpV+lev41mENs+/F4KKr6SPMkSNwhSvBgMCwL/WAyN0=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 4uTiCCxXHLND4MRaoNATv9YWSeEyEF/uPtY1WRZkfVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:96:33:2d:82:f6:64:08:84:95:d6:7a:4a:48:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Jun 16 01:00:44 2024 GMT
            Not After : Jun 17 01:00:44 2024 GMT
        Subject: CN=28348078edc9a78c0dac54b1b3a7e2c650511cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:f6:d7:6e:62:bc:b4:12:e6:66:37:00:d9:
                    97:43:86:4e:89:42:05:cc:2a:ee:64:bc:2f:10:c7:
                    45:94:0c:26:71:ea:ed:a3:a4:84:52:60:73:f1:98:
                    84:e9:e0:70:76:a3:0e:2a:ba:dc:46:09:9d:6b:b2:
                    0b:93:85:c9:83:92:d4:31:32:11:ea:2e:6c:fb:32:
                    df:c8:77:78:61:98:1f:10:af:44:66:15:73:62:7e:
                    1e:2e:14:fa:dd:a6:d1:7b:1d:74:e0:62:8e:87:14:
                    2b:7f:8b:57:12:9d:2e:aa:23:54:d0:ed:4d:4a:e0:
                    d6:dc:a8:18:ef:13:84:5c:68:50:a8:d1:71:1b:3b:
                    05:62:29:0e:c4:ba:a1:8c:00:f8:7b:3e:13:0e:87:
                    97:91:3e:d9:5a:e1:ca:fc:c9:d3:38:8f:4d:10:ef:
                    ee:f0:2b:16:be:38:b9:18:af:2e:00:90:4c:a8:9c:
                    97:fe:ed:38:f8:a0:cb:54:82:ef:83:4c:01:fd:62:
                    ba:5d:49:1a:1b:2f:8a:88:e8:ee:a7:2a:db:4e:88:
                    a9:82:11:58:0a:89:ba:b9:9a:b7:5c:be:47:0d:15:
                    66:5b:01:ba:43:50:7e:62:9d:06:be:1b:17:e5:6a:
                    13:14:ea:b6:7d:43:a1:0c:e0:67:e4:ca:f0:ac:8a:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:80:78:ED:C9:A7:8C:0D:AC:54:B1:B3:A7:E2:C6:50:51:1C:B9
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:7d:9b:76:94:8d:c7:cf:8b:ff:d7:6c:aa:53:86:28:b5:
         55:27:a8:82:b0:bf:ef:41:0b:e2:69:72:08:cf:42:8c:20:27:
         53:b2:d5:4b:75:f7:c3:80:85:d0:ee:9a:d2:af:3c:d2:09:51:
         30:4e:ff:e6:bf:15:39:44:07:4f:cb:4d:f9:78:9b:aa:db:12:
         7a:fa:d9:11:82:4a:f2:2e:97:29:54:4d:49:11:e1:65:88:46:
         c5:b2:c4:e3:21:6f:94:6e:ab:9f:9a:b4:8d:b1:85:5a:20:37:
         10:13:a6:0a:22:cd:d8:40:b5:52:df:b3:a1:a3:d8:3e:2d:c5:
         17:2a:8e:01:01:fa:9d:71:16:53:98:bb:96:6c:fe:c1:78:97:
         16:cd:54:34:2b:d4:80:43:e3:60:fd:f5:df:3a:88:b7:51:08:
         74:7d:5f:cf:7b:e0:14:03:d7:c6:b1:cb:bb:39:09:28:51:b4:
         1d:9a:0a:96:4d:71:56:c3:39:d9:89:28:13:63:2d:b6:9c:af:
         ba:a8:32:45:c9:58:f8:3d:3a:8c:82:32:ca:da:32:34:56:04:
         a0:58:c7:18:8d:fe:0f:b6:d1:50:0b:54:6a:b8:8a:5c:3d:5a:
         cf:f6:c3:ba:e9:4c:63:17:71:06:9e:27:d5:d2:d6:3f:c0:19:
         ae:d2:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:47 2024 by rpki-client on console-fra.rpki-client.org