Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File:                     9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier:          AK2A1qAgKtkorVEO4J7VJsRylYlVbEFy9xi8bfFFmFg=
Subject key identifier:   43:E2:72:03:52:5A:53:35:C6:FC:44:8B:4B:56:87:35:84:60:59:53
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer:       /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial:       01901DEC6E22477A7A6C335B61BD49A8D68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:32 +0000
Files and hashes:         1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: NxVK6YaDHSgesS8TbityjShnWhifSUYL4wBLRwI+6tc=)
                          2: Ik_D8ub1_usofNl0IE7xV2juSKo.roa (hash: HWJc95/voPz35SaXMJ1Ep6YlgKGsqL4sDkMC+6TOvPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:6e:22:47:7a:7a:6c:33:5b:61:bd:49:a8:d6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
        Validity
            Not Before: Jun 15 22:02:32 2024 GMT
            Not After : Jun 16 22:02:32 2024 GMT
        Subject: CN=43e27203525a5335c6fc448b4b56873584605953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:c8:8b:d8:f3:04:b3:b5:ab:17:e0:9f:ef:
                    34:06:4e:e4:ef:50:fe:ac:31:1d:eb:62:8c:18:59:
                    c8:4b:52:59:73:1a:d7:05:15:27:9b:02:88:30:3e:
                    56:40:27:8f:31:f8:e7:a0:0a:a2:20:dc:10:16:5f:
                    a0:a5:51:85:4c:33:10:81:9d:da:4b:de:53:f5:71:
                    72:0b:ae:9c:94:8e:5c:8a:73:64:cc:75:e7:f9:8e:
                    18:80:78:53:85:84:17:59:bf:dd:03:3d:88:8f:d4:
                    f9:57:34:0c:30:a9:ec:29:32:fd:e2:10:cc:0d:c8:
                    76:dc:1f:c8:9a:fd:fe:ae:0f:b5:ed:92:94:07:45:
                    9b:77:93:3b:da:f3:de:75:92:b2:28:a5:fe:b1:e2:
                    43:81:8b:35:63:00:0b:f0:c6:54:64:3f:87:68:49:
                    92:d7:1d:57:7f:c4:21:ad:eb:77:ef:ab:0b:35:92:
                    fa:b1:ee:f0:1a:12:cc:25:cd:fa:6b:ec:14:87:c3:
                    2f:80:b1:34:0b:b3:ca:46:5d:81:f8:68:e8:fd:7f:
                    90:fd:02:ce:45:9b:2f:f4:2a:cd:f6:55:61:70:d9:
                    93:fb:f9:51:0f:a8:1c:12:90:6d:54:69:d6:fd:70:
                    a0:02:80:37:5c:89:54:09:1a:25:4a:63:26:ee:1a:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E2:72:03:52:5A:53:35:C6:FC:44:8B:4B:56:87:35:84:60:59:53
            X509v3 Authority Key Identifier:
                keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:76:28:5b:e8:12:fb:3e:5a:01:a9:e8:4b:9d:80:f1:bc:
         ef:73:d7:f0:1e:bd:48:b8:e7:eb:6b:f3:4b:c2:ed:cb:e8:6f:
         fd:53:9e:10:1a:e3:ed:6b:9c:d6:ee:96:5f:2a:7c:26:45:af:
         73:2a:f7:45:bf:62:ad:60:bb:84:12:6e:89:72:b5:7f:b8:ab:
         1e:56:38:c4:1f:fb:85:a0:90:11:6c:65:5f:55:39:95:3c:8e:
         60:26:57:5c:f2:ca:80:62:4e:70:5d:32:96:30:92:62:f8:24:
         02:1a:5c:cc:4c:0e:01:0c:0a:0e:93:c7:4b:b7:0c:7f:ad:28:
         74:db:2b:1f:99:83:ba:de:be:65:f9:22:c0:bd:61:67:c6:63:
         b2:3d:35:e7:22:cf:68:8b:18:28:16:53:82:1c:92:27:1c:b8:
         ce:eb:85:52:75:32:14:42:67:5d:a6:8f:96:58:30:5e:59:59:
         41:cc:5d:53:55:05:aa:00:18:aa:ca:e8:9c:77:c2:77:b9:1b:
         3a:9a:21:e5:1d:fc:64:2b:87:02:19:06:b2:9f:4b:1f:82:a7:
         e9:7b:d8:b7:29:15:49:1c:1e:e1:11:90:6a:d8:af:48:3a:4d:
         15:ed:3a:49:a3:1b:fe:8a:0a:0b:de:38:6e:e3:c7:15:a3:7a:
         8f:e3:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:54 2024 by rpki-client on console-fra.rpki-client.org