Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File:                     k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier:          36ehF/m22EBEx0R2Xbm/LNC6NsEUh/ySUQq13WyxsEA=
Subject key identifier:   26:E2:80:D9:53:D6:25:95:E4:A6:8F:00:9F:7B:60:79:76:DD:43:FD
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer:       /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial:       01901FDA70A6D0E5D2C926CA99A00767CB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number:          0A21
Signing time:             Sun 16 Jun 2024 07:02:07 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:07 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:07 +0000
Files and hashes:         1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: z7T7sLYV3CCGq2T6oKlUlTN6D6da1ARoN0iZiVGo4bY=)
                          2: vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa (hash: 67WpJMIoQ0bI5lvuDKx3m+hoHpr7MT3Tnm6JsCOmbTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:70:a6:d0:e5:d2:c9:26:ca:99:a0:07:67:cb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
        Validity
            Not Before: Jun 16 07:02:07 2024 GMT
            Not After : Jun 17 07:02:07 2024 GMT
        Subject: CN=26e280d953d62595e4a68f009f7b607976dd43fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:c3:31:41:a0:d1:35:f5:4e:bf:b0:ee:f4:
                    24:8f:45:e4:eb:9c:33:bc:dc:3e:54:98:e2:89:fb:
                    95:03:e4:fb:1d:28:f2:4b:c7:8e:84:c5:6b:11:32:
                    8f:bd:10:24:e3:89:21:e3:7b:fb:ca:85:e6:64:aa:
                    d2:69:4f:18:e3:bd:e3:07:94:55:a7:53:f7:99:ef:
                    28:0f:6f:42:0b:bb:2c:ed:1b:0b:fd:8a:29:de:54:
                    bc:08:f5:35:09:a2:56:d6:7d:45:39:21:77:37:05:
                    bd:6f:5f:15:cd:7c:cd:29:f1:cc:ea:45:57:d1:df:
                    c0:48:6e:a5:b4:a8:d0:58:7b:6c:3b:90:24:84:ad:
                    02:6d:10:a5:08:55:bd:0b:cc:52:e8:a0:f9:50:d3:
                    b8:d9:37:33:29:cd:18:e0:3a:eb:c2:ff:dc:e6:5b:
                    ec:08:56:fa:16:03:17:30:d6:72:2b:c5:a4:c4:58:
                    b0:f7:5e:3c:e8:7d:91:2c:46:98:17:11:09:91:ab:
                    9e:33:e7:ee:65:66:1a:fd:3e:ec:71:7e:a1:12:98:
                    10:d3:c5:46:67:9f:a2:04:4d:e4:67:14:0c:b2:1b:
                    37:26:3a:25:e1:52:42:36:9d:b0:56:28:60:00:9d:
                    a4:4c:e4:f1:0f:2e:fd:41:aa:78:3c:0d:e0:95:a6:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:80:D9:53:D6:25:95:E4:A6:8F:00:9F:7B:60:79:76:DD:43:FD
            X509v3 Authority Key Identifier:
                keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8e:51:86:d8:22:2d:3c:f3:30:25:22:5d:bd:a8:9a:94:a1:
         0f:9d:f9:e8:1a:d2:42:fb:7e:c4:70:d7:98:8f:27:b3:2b:2b:
         96:df:62:d8:e5:e8:d4:17:c6:a6:0d:73:e6:6f:53:b4:49:61:
         e0:8b:53:a5:c8:4c:d8:08:4b:9e:82:b1:79:fa:f5:07:73:2b:
         9b:47:2d:b6:2b:b6:fe:70:83:ce:1e:fe:15:1f:9f:ee:8f:51:
         e9:74:ac:59:a8:70:bf:8b:12:cf:8a:c9:49:6b:90:ea:c8:17:
         54:87:4e:ec:df:d8:08:26:25:09:32:46:29:e8:e0:a5:8d:ca:
         b7:59:aa:7b:6b:62:9a:27:12:f6:25:6d:4c:a6:b1:8d:3c:77:
         62:8f:b8:31:7d:ab:2a:55:19:c0:b3:2d:e5:9d:e8:dd:8e:5e:
         1a:a9:7e:06:d9:ce:97:f7:98:68:65:1f:03:50:f2:e4:72:60:
         40:ee:81:f1:6d:c3:7a:d9:0c:56:a2:7e:4b:c6:d4:f3:eb:0b:
         8a:d3:f2:5e:d5:3b:13:77:5c:86:69:b0:69:25:47:27:ad:ec:
         1a:2c:8e:e7:6e:ea:23:31:a7:4a:c4:8e:36:d7:83:86:f1:73:
         19:c5:35:39:08:72:a7:04:82:29:52:9b:cb:7c:a8:bc:47:94:
         3d:9f:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:57:20 2024 by rpki-client on console-ams.rpki-client.org