Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File:                     u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier:          R0Ez29lqgpWE4uN4Siz9niqlIVaGZg7iClqn7mWQIeM=
Subject key identifier:   2C:DD:F9:93:F6:A6:54:74:C6:15:4B:C6:9E:AF:BE:C1:10:5B:32:64
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer:       /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial:       0190448C8C0001FBAAA00D53E98118224C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number:          0C33
Signing time:             Sun 23 Jun 2024 10:02:59 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:59 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:59 +0000
Files and hashes:         1: GhJPedVhNXBWi24dCzz_8rK0hk0.roa (hash: mdJpypEYe5AAUb7SATMLtGb5TsWj+8+NH+pRF814jD8=)
                          2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: ZlLjfPccEI/InRRqursmVByO7jX586+tbETAWEr7teE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:8c:00:01:fb:aa:a0:0d:53:e9:81:18:22:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
        Validity
            Not Before: Jun 23 10:02:59 2024 GMT
            Not After : Jun 24 10:02:59 2024 GMT
        Subject: CN=2cddf993f6a65474c6154bc69eafbec1105b3264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:d9:56:cd:e2:bc:f5:c8:a3:1e:9e:cd:3b:
                    6c:6c:53:a8:7b:06:88:c0:d2:15:bd:f3:59:eb:01:
                    dd:de:d8:2d:8e:77:b4:b0:7d:19:e1:ff:4f:f3:ed:
                    30:8d:b9:40:89:5f:22:48:5d:ed:99:a7:08:a9:4e:
                    97:96:74:3b:eb:62:0e:e9:41:40:b8:8c:d2:ca:9a:
                    7c:7d:d7:8d:c1:59:cc:17:74:1a:77:45:d9:bd:ea:
                    74:89:86:b1:cb:5b:33:14:66:2f:c2:b4:0b:ba:8d:
                    5b:42:fa:0f:ef:a1:aa:1c:92:15:7b:21:42:51:1c:
                    c4:3b:ce:f9:a1:63:ce:ef:8e:6f:17:cd:8e:36:58:
                    42:a2:cf:6b:76:fd:dc:72:d3:36:a9:c7:ef:59:34:
                    39:6c:f8:e4:af:5a:6d:96:f3:b8:b3:ae:0e:60:a7:
                    1f:c5:0b:e1:3c:38:32:2b:4c:cc:44:6c:f6:fd:a9:
                    4a:17:00:8d:dd:55:2c:be:af:18:5e:20:6c:94:95:
                    90:42:84:da:25:af:24:b9:51:a8:6e:26:d4:5a:2e:
                    0e:31:53:af:9d:3c:d1:8c:41:39:05:5f:85:f9:a6:
                    54:6e:ed:bc:3d:e8:d6:82:b4:9c:87:33:13:b5:d4:
                    79:a2:d7:07:50:dd:63:7f:d8:c8:7c:37:a8:e0:c8:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:F9:93:F6:A6:54:74:C6:15:4B:C6:9E:AF:BE:C1:10:5B:32:64
            X509v3 Authority Key Identifier:
                keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:94:33:f8:be:3b:be:4c:61:e6:0e:84:66:c6:2f:da:cb:82:
         20:ec:69:d3:a2:4f:3b:54:3f:26:4a:54:ff:1e:b3:1d:ad:4a:
         e5:1f:97:96:52:c1:51:a7:eb:be:ee:f2:eb:36:97:6c:50:dd:
         64:c8:32:48:0c:ae:99:c4:cc:ef:a8:d2:ed:d8:c2:10:90:01:
         27:7f:07:e5:5f:54:d4:60:53:78:d8:5e:43:1d:a9:84:95:77:
         1a:02:4e:f8:b9:ab:f6:f6:2e:42:d8:62:af:e4:86:90:6d:82:
         ad:03:80:8c:fd:eb:54:79:72:5c:7a:fa:a0:f1:79:f3:af:70:
         93:40:d7:4e:6d:17:00:25:be:87:74:53:28:d5:4f:3f:4b:31:
         cc:b1:eb:10:97:19:af:9b:f7:45:94:c6:5a:dc:9a:77:c3:9d:
         5a:f7:56:05:51:9a:3c:ca:15:3d:a0:94:d7:ba:2d:14:a3:1e:
         2b:70:f4:ba:bb:e5:89:08:bf:c0:47:a8:f4:94:b0:ee:26:ef:
         6f:75:93:38:a4:4c:be:73:92:65:6a:fd:39:fa:f6:6c:bb:bf:
         5a:52:45:7d:81:06:cc:89:27:47:5e:1f:66:f1:99:17:d9:a7:
         14:84:d1:8a:6a:96:03:7c:f5:42:0f:e4:f7:e5:fc:d3:6a:e7:
         9f:e5:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:07 2024 by rpki-client on console-ams.rpki-client.org