Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          zS7Xjp5PrrCYZppD9q1CWh78V1zzBmTerkm3LGBH8JM=
Subject key identifier:   38:3B:75:33:1A:5C:CE:E6:47:34:12:B6:F1:E4:DA:CB:11:13:D9:B4
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       019040AEC9573FDA5A7646FDAECCB6777282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          116A
Signing time:             Sat 22 Jun 2024 16:01:54 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:54 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:54 +0000
Files and hashes:         1: A4F8YAHhzmBmN8MsIuhysBHZS1w.roa (hash: 12gdhXPFTWakw1hWJqC/qyXWdB6Elm16rTk8gSvZTsw=)
                          2: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: cvX2IpLHgeuyJJXBJGCaDQgMdlT5ThEOf1PggFCgx8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:c9:57:3f:da:5a:76:46:fd:ae:cc:b6:77:72:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Jun 22 16:01:54 2024 GMT
            Not After : Jun 23 16:01:54 2024 GMT
        Subject: CN=383b75331a5ccee6473412b6f1e4dacb1113d9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:12:60:d9:38:32:38:26:d1:5a:49:47:22:
                    ee:68:78:d2:47:e9:64:1e:a0:4d:a9:72:06:d5:27:
                    db:59:14:76:a8:f9:c9:a6:9a:ab:f4:8a:0a:21:cf:
                    cd:0f:d3:15:d2:1a:7f:07:2f:c3:d3:d5:88:ef:7c:
                    ba:a1:ac:4c:8e:db:a4:c5:c5:c9:0d:e2:0c:b2:10:
                    e5:34:0e:c9:40:77:76:c8:11:bc:a9:bb:19:13:7f:
                    d3:86:89:41:7e:42:e1:75:ba:3c:2a:06:23:d2:a2:
                    97:4c:45:36:2c:3d:34:93:c1:4d:2e:c9:a7:02:cb:
                    9c:23:df:78:e4:b7:ad:c5:9a:a2:1f:27:95:2b:f9:
                    4d:70:5d:df:b9:da:b7:95:fa:37:cc:a4:f5:a7:94:
                    4b:73:00:b8:6b:62:56:e1:db:88:c6:87:24:57:0d:
                    8c:7b:26:b1:d2:ef:29:25:f5:a5:0c:c1:56:12:23:
                    47:a1:88:99:2a:d3:29:df:2a:1b:a5:54:e2:3d:96:
                    f6:e4:1a:d6:9c:d5:e9:22:a7:38:34:cc:3c:4b:dd:
                    40:d6:b0:2e:23:81:5b:e5:97:3d:d9:0e:c9:f9:4d:
                    a1:2a:00:1e:60:ef:cb:00:d5:55:17:71:b6:18:d2:
                    b5:aa:10:c1:c8:a8:cc:94:b0:ef:8c:91:1c:ef:e9:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:75:33:1A:5C:CE:E6:47:34:12:B6:F1:E4:DA:CB:11:13:D9:B4
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:86:de:7d:3c:5d:82:42:a2:18:ac:4c:4d:2f:35:19:57:
         22:72:86:2c:82:93:3d:e9:89:57:47:5f:67:66:1d:96:42:1a:
         b4:bc:35:42:39:aa:7a:03:c6:d3:97:9f:b9:c5:0e:0f:96:28:
         b5:01:57:8c:9b:03:f5:58:37:a5:68:3e:a5:9a:a9:fa:39:56:
         be:ef:22:d9:ef:f5:6b:63:b6:93:e9:9b:02:7b:2e:1e:b0:f1:
         39:33:95:2b:53:d3:47:d4:ac:67:f4:21:b3:9f:ce:4f:ec:7e:
         1f:fc:b1:47:a4:d3:0a:4b:94:0f:ee:b0:8f:51:ff:f9:e0:c4:
         a9:97:35:f8:6c:7b:b5:41:d0:dd:2a:f9:70:4c:23:48:46:9d:
         11:a9:41:dc:a3:4a:21:f2:cb:e6:9d:e4:74:c8:10:99:e8:b4:
         a4:f6:8d:97:a0:21:f8:5c:3d:74:0d:f0:03:b3:6a:fa:14:3f:
         b9:d7:eb:97:25:6b:c8:9a:cb:9f:99:19:73:3a:84:34:24:e6:
         00:6e:3e:8e:fe:c4:89:82:79:b5:1b:bb:ad:79:1f:90:71:2f:
         69:2a:38:d8:15:ac:87:9f:49:fe:95:0c:4b:3f:ce:97:bb:ad:
         36:72:1a:69:c8:7c:00:fa:5a:51:9b:ca:f6:f5:bd:68:2a:86:
         ba:91:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:05:34 2024 by rpki-client on console-fra.rpki-client.org