Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File:                     2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier:          LcYwjtGAw4blCAmT3R1kjhTiv/5b+KcHTyPUqtafNWM=
Subject key identifier:   9B:4A:59:84:EC:5A:BF:69:A8:A1:6F:BC:EE:CF:6A:39:66:D1:E5:91
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer:       /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial:       01901DEB9CE5DFFAA906944A5E29A1F2009C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number:          10AF
Signing time:             Sat 15 Jun 2024 22:01:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:38 +0000
Files and hashes:         1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: xXCedZvj4J87IR6C7+roGLsKwDuZb9JBQU8b3GVL9Kw=)
                          2: hABOeqqat5JLiTMCVLGrTqt41hc.roa (hash: psG6evJtrdIOpvmhbqBt52h/nCmCObZ0lFSbIEsgPxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9c:e5:df:fa:a9:06:94:4a:5e:29:a1:f2:00:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
        Validity
            Not Before: Jun 15 22:01:38 2024 GMT
            Not After : Jun 16 22:01:38 2024 GMT
        Subject: CN=9b4a5984ec5abf69a8a16fbceecf6a3966d1e591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:e7:b7:7b:44:51:d2:fb:5d:d5:e8:44:9e:
                    b8:a4:4f:57:5d:25:8c:df:9e:71:c1:1c:68:09:cd:
                    02:33:d6:e2:e1:26:46:ce:76:71:19:22:95:1e:54:
                    7c:a9:6a:ce:9a:04:cd:af:3d:0f:56:1e:1d:88:3d:
                    ea:7b:ce:f1:a6:6a:29:22:84:dd:f9:ce:20:f1:87:
                    c6:79:fc:e1:98:cf:9e:1f:5a:a1:7d:c6:a6:40:9c:
                    09:7a:16:a4:36:3f:72:d7:b8:0a:86:27:6f:ef:99:
                    97:7f:b0:43:77:a6:ff:4b:6f:dc:d9:49:ec:54:73:
                    be:dc:66:5f:a9:06:75:21:3e:a5:3e:e3:8b:7c:28:
                    2e:4e:0a:14:2f:9f:77:8d:d8:04:09:21:dd:6b:69:
                    06:41:a2:36:bf:da:02:79:91:6b:77:84:82:79:e1:
                    7f:4e:63:91:b6:2b:c0:08:49:a6:cb:d0:c9:56:8e:
                    63:b0:f5:c8:e4:71:74:9f:52:24:61:78:7b:65:3b:
                    cb:10:98:cd:fb:70:55:bf:e7:bd:be:5d:63:ea:20:
                    1b:4a:d7:c1:d0:51:60:b4:e4:f4:0a:01:7e:52:8b:
                    c2:3f:91:f2:db:6d:00:4b:c1:39:33:51:9d:72:1e:
                    c7:fe:3d:75:5a:22:6e:23:29:02:21:a8:60:79:a1:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:59:84:EC:5A:BF:69:A8:A1:6F:BC:EE:CF:6A:39:66:D1:E5:91
            X509v3 Authority Key Identifier:
                keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:6d:2d:79:62:34:c2:94:fe:59:77:07:d6:f8:67:17:69:
         53:bf:e3:d4:25:82:b0:c1:31:51:57:b9:95:2e:62:ce:e7:15:
         13:76:51:ec:49:d1:3f:66:8d:2a:5b:dd:d4:dd:d3:0d:b1:bf:
         26:29:c1:e6:d0:ef:6a:fa:91:d1:b0:88:93:b3:13:e0:d6:b6:
         6d:f3:c9:c1:e5:de:f2:d4:c6:78:44:00:d2:34:b9:fd:80:67:
         39:c4:95:99:f3:c6:b0:8c:70:b8:0b:98:c3:aa:63:bc:46:64:
         67:14:d3:1b:b5:a0:24:2f:18:ae:47:73:b2:d6:e1:e7:0b:65:
         b6:b9:2a:9a:2d:31:f8:5d:8e:ae:e1:36:bd:03:fa:61:86:2f:
         fb:b7:93:9e:6a:a0:f2:25:0a:a6:81:8f:7b:88:27:03:d7:ee:
         c9:23:69:16:41:b1:5f:ef:4e:49:95:f1:21:c7:b9:8a:44:52:
         89:b2:12:c0:56:1f:1d:48:81:09:91:7b:2b:60:48:a0:f1:48:
         8f:82:84:51:c2:31:39:83:36:70:51:20:40:50:ce:3e:b3:f1:
         01:8c:e4:40:28:34:2a:5e:cf:cf:be:07:df:05:b1:33:f3:68:
         b9:9e:67:ed:7c:02:9c:24:85:59:70:d6:88:2a:43:d2:63:15:
         af:fe:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:53:31 2024 by rpki-client on console-fra.rpki-client.org