Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File:                     0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier:          AthGM11VwH7eRrEaFPE0w2m9v/CsX19a+J0AdDhaXxE=
Subject key identifier:   34:A3:FD:C5:4D:77:F6:C1:81:80:B1:82:C5:47:2F:5A:72:34:FA:B7
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer:       /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial:       01901DEBB5EEE7A640159BA98C5B7A0BE687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number:          06E7
Signing time:             Sat 15 Jun 2024 22:01:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:45 +0000
Files and hashes:         1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: ovG8258UB8oI55ENq5VGHEDyXjJreA4DousJqbbCM2s=)
                          2: dyne9Sx2gtO_5CKucfL9pG0knkA.roa (hash: qUlp33TWV6qvVNboKZPBhYQrQYy3BM2MXLvanrwWGlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b5:ee:e7:a6:40:15:9b:a9:8c:5b:7a:0b:e6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
        Validity
            Not Before: Jun 15 22:01:45 2024 GMT
            Not After : Jun 16 22:01:45 2024 GMT
        Subject: CN=34a3fdc54d77f6c18180b182c5472f5a7234fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:da:39:1d:f3:e6:fb:77:a6:94:5e:72:25:
                    49:c2:81:ce:da:a9:49:f4:25:3d:38:00:23:68:cd:
                    99:9c:c0:13:db:08:d7:80:02:d9:55:bb:1b:b9:3f:
                    24:66:d0:60:b0:01:f8:2c:39:e2:5e:87:f5:67:68:
                    37:9a:88:3b:f6:77:e2:2f:7d:90:88:a2:de:32:96:
                    54:54:f9:31:87:d2:05:f0:60:3b:e0:5e:65:fd:bb:
                    58:94:bb:b3:65:49:9d:46:eb:c0:2e:24:23:61:f3:
                    ad:48:89:75:94:19:bc:34:e5:64:51:a6:cf:f7:60:
                    1a:9b:4b:1f:66:dd:fe:6c:77:6e:c3:96:2c:eb:1d:
                    88:1b:d2:ef:5d:f2:56:37:98:69:fc:05:62:d2:03:
                    e8:e8:74:3a:08:7f:87:6d:a8:47:9e:cd:4b:55:04:
                    a5:a3:b4:46:d1:80:fc:c9:67:21:2f:4b:7e:6d:eb:
                    c1:50:8e:f8:09:e9:71:3e:fd:d1:68:e9:47:82:ed:
                    0f:65:22:f4:99:3b:b2:b0:cc:ec:2f:2b:24:52:b9:
                    db:62:60:11:38:f0:a8:57:c4:c7:05:b5:b9:b3:f6:
                    90:ee:f2:b7:10:15:56:43:a7:6f:99:de:dd:83:9e:
                    f7:6b:83:1d:34:13:02:b9:2b:1f:e0:98:9f:5a:ba:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A3:FD:C5:4D:77:F6:C1:81:80:B1:82:C5:47:2F:5A:72:34:FA:B7
            X509v3 Authority Key Identifier:
                keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:cd:80:c6:a7:9e:a0:f9:d3:41:c0:80:3c:0b:b0:da:a9:
         d8:cd:c6:0c:1a:4a:80:e9:67:f8:4f:80:21:b5:9f:46:8c:6c:
         2d:bd:b2:eb:c2:7c:e6:80:c6:49:83:5d:10:a1:71:c0:5e:4e:
         63:99:6f:3e:aa:d9:99:ca:52:40:00:77:61:bd:25:da:bb:83:
         ed:06:b8:a2:31:0f:2d:cd:fa:fd:83:ec:e3:e4:1a:80:c7:9e:
         6c:a0:43:e6:ff:6c:af:bf:2c:68:b4:27:6b:9f:33:86:66:24:
         8f:6d:d9:9d:4f:40:98:2e:c8:7a:45:d4:3e:b3:45:ef:a9:7d:
         c6:67:ec:10:50:06:06:48:a6:38:65:dd:88:96:a0:22:f2:70:
         da:2f:19:ab:20:f7:a8:4a:41:85:f4:91:f2:99:03:41:5b:15:
         bc:fb:b5:4b:d9:2e:2a:54:41:d3:0d:eb:b0:4f:17:8b:dc:f1:
         86:64:27:45:e0:68:01:b1:98:91:07:89:53:05:7f:1a:3c:19:
         ec:a8:15:47:59:a5:55:1e:50:8a:82:c2:9e:72:72:ad:68:7f:
         37:c0:cf:f3:84:fb:c9:69:6e:19:c7:d1:b0:b5:e0:5d:d9:54:
         e5:c0:50:c6:2c:8b:aa:f9:c1:c7:e4:0d:1f:92:b7:6f:b3:94:
         d8:66:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:39 2024 by rpki-client on console-fra.rpki-client.org