Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File:                     _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier:          oGLXeSM2O371FE+6IHK938kYtSQknKpRHUEiLhnLu3Q=
Subject key identifier:   45:AB:C7:A6:89:9B:BF:86:8C:B3:F8:8C:80:02:7C:89:6E:D2:AE:10
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer:       /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial:       01901E58FC1F1361018CFA78EDE5F3F1B39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number:          08F9
Signing time:             Sun 16 Jun 2024 00:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:06 +0000
Files and hashes:         1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: RwY8WlAttnUyvQf+3UmYer8XON2os3zRa7gju5mJY80=)
                          2: l2vT3MoIQ1Laooa8K6w_pNtMBuM.roa (hash: DBMBQE+QFACFrYKBINIocPfEaNn2HCpAfN6Wqmpef/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:fc:1f:13:61:01:8c:fa:78:ed:e5:f3:f1:b3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
        Validity
            Not Before: Jun 16 00:01:06 2024 GMT
            Not After : Jun 17 00:01:06 2024 GMT
        Subject: CN=45abc7a6899bbf868cb3f88c80027c896ed2ae10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:91:03:f9:72:59:3f:c5:9b:af:d2:dc:50:
                    8b:b3:f9:43:c4:fe:25:ae:9c:ad:3e:00:e8:8c:f0:
                    d5:ee:03:b0:de:c8:48:13:f6:f8:44:47:c7:74:b8:
                    d4:82:ed:bb:98:68:60:e2:54:14:a0:9c:99:09:ae:
                    ba:2b:38:c5:a9:e4:3e:6c:1e:fe:5e:2f:cf:b3:d6:
                    b7:6a:02:17:47:9b:d9:cb:64:ab:3b:25:93:ed:14:
                    37:67:31:e5:ed:75:18:3e:a0:a4:66:9d:fd:92:08:
                    f0:dd:87:91:bb:77:41:c2:fa:39:57:7c:a8:2f:a6:
                    51:10:b8:c9:41:df:ad:6c:ba:6e:59:12:9d:24:19:
                    90:16:54:1b:2f:30:fd:4f:42:77:2f:9f:1e:51:2f:
                    e7:cb:b1:1b:de:a1:a7:7e:3d:59:88:97:16:0d:22:
                    bc:e8:f5:47:4c:15:e4:4f:ea:37:ff:f6:5a:bd:99:
                    4b:ff:c4:66:c3:f7:d4:b3:e3:a3:2f:28:5c:2f:74:
                    a2:5e:28:13:41:31:1f:6e:36:c5:44:2e:62:36:6c:
                    a9:48:96:0a:62:26:7a:50:73:4a:52:f1:7b:86:55:
                    6e:06:20:01:e9:11:f5:cb:69:8d:d9:41:04:d3:48:
                    fc:97:d1:bd:dc:31:5e:cd:fc:bc:1d:99:79:cb:ab:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:C7:A6:89:9B:BF:86:8C:B3:F8:8C:80:02:7C:89:6E:D2:AE:10
            X509v3 Authority Key Identifier:
                keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:4e:2b:3a:2b:17:6e:35:b0:57:34:e0:56:36:af:37:23:
         6d:8a:57:02:0d:e2:c2:71:11:95:c9:0b:2f:f5:e9:96:91:1d:
         fa:2f:87:a1:9f:df:b4:1a:41:45:a7:4a:1d:da:8e:43:bb:12:
         12:e9:1f:39:6b:db:ef:58:bc:ae:00:79:f5:7e:43:f7:8c:a0:
         7e:7d:77:45:e6:87:fd:2c:4c:a9:4f:3b:fb:d3:ed:ac:e4:c2:
         9b:0d:d6:ac:8b:cf:c2:91:ea:d0:b3:a6:83:e5:6d:99:e7:2f:
         f9:0f:1b:19:40:7e:22:37:b2:d7:da:c2:4e:e5:a6:cf:c2:74:
         52:95:4d:ae:8d:a1:ac:92:db:3f:c8:be:77:b8:70:2c:5f:7c:
         3c:bf:68:84:18:c3:e0:2c:ee:d2:be:3b:3a:f2:7e:04:cc:18:
         7f:0a:d5:1e:51:d1:ff:3c:a2:74:bf:41:e1:01:cc:de:ec:de:
         5b:71:5e:08:7a:e8:64:8d:bd:08:14:59:dd:0a:ca:92:e7:84:
         ec:f6:b1:e0:6f:ca:d7:47:e1:f5:a5:a5:ff:02:01:ff:9e:3e:
         d9:83:5a:5d:bc:cd:86:1d:81:54:9b:b2:5a:a7:45:3f:e7:84:
         cd:0b:eb:3c:6d:bb:02:43:19:fa:03:be:a4:4e:66:0c:aa:50:
         28:c8:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:00:01 2024 by rpki-client on console-ams.rpki-client.org