Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File:                     SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier:          LzBygxQFOduvJjojA/WeNxKylPnYd/12AWCKdgZnI8k=
Subject key identifier:   68:09:A6:E1:AE:AD:B8:0E:06:71:8F:E8:C4:B2:70:41:F2:5B:3B:AD
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer:       /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial:       01901DEC7BFC488028A2BFFE3AD1F9237646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number:          0D5E
Signing time:             Sat 15 Jun 2024 22:02:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:35 +0000
Files and hashes:         1: GMAsA9EYp_pbFozJMwh7YrOM5_A.roa (hash: crcW07ribNfnB9dD+XunyM6relFKz4pxYzdesBi6wRw=)
                          2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: IdAJyUJrTkQRknU53UFYnyvbhG07PBNK+CWYZpVk1iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:7b:fc:48:80:28:a2:bf:fe:3a:d1:f9:23:76:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
        Validity
            Not Before: Jun 15 22:02:35 2024 GMT
            Not After : Jun 16 22:02:35 2024 GMT
        Subject: CN=6809a6e1aeadb80e06718fe8c4b27041f25b3bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:31:23:ab:53:e0:39:e2:1d:3b:ab:1a:5f:
                    d9:27:7d:23:17:b3:aa:8d:3b:20:b5:4e:7d:c3:d7:
                    97:06:20:35:61:dd:cd:0f:63:1f:f2:33:a6:31:17:
                    0c:7b:e9:f2:15:b0:10:47:5f:dd:8c:37:15:a1:49:
                    da:3e:b3:60:d6:c1:47:ab:c9:4b:cd:4a:81:5b:c4:
                    cf:04:6f:1f:91:a1:16:1d:54:00:af:db:c2:47:94:
                    21:05:9f:38:54:31:9a:43:0a:b5:5d:13:e2:12:f7:
                    90:8b:d0:45:bb:b9:de:c8:c8:97:b3:47:ee:9b:b5:
                    24:86:00:e3:50:ca:a9:cf:ab:c7:0b:a8:bb:12:97:
                    58:51:68:1a:e5:fc:b5:70:17:8d:33:a6:ea:94:21:
                    44:45:ba:39:61:ef:14:6b:27:dd:96:2d:e3:03:2c:
                    c8:b0:c3:2f:48:96:c9:5b:6b:47:06:fa:c6:62:bf:
                    4a:db:32:95:c3:65:98:65:18:62:7b:d0:42:26:a1:
                    5f:cc:4e:cc:8d:28:16:f5:3f:e9:a6:59:29:b8:4d:
                    76:00:a3:3e:c6:e7:ea:c6:40:7b:0f:78:21:af:14:
                    d6:06:af:35:53:1c:7b:6b:35:2e:24:3f:b6:b5:e4:
                    6c:74:c7:6a:18:5d:fe:5e:8e:a5:87:ac:08:c8:8e:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:09:A6:E1:AE:AD:B8:0E:06:71:8F:E8:C4:B2:70:41:F2:5B:3B:AD
            X509v3 Authority Key Identifier:
                keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:3c:ae:1e:ac:56:ab:b2:c9:04:90:54:29:e7:7c:09:9f:
         84:eb:ac:46:b3:dc:dd:67:fa:8e:4d:c6:2e:38:54:4c:f1:52:
         4f:13:f1:1f:db:fc:6b:1c:58:e0:30:de:c7:32:14:81:53:03:
         1c:9c:66:59:20:68:74:87:68:f0:d9:62:cf:9d:0f:e6:1d:13:
         cc:13:de:36:e7:72:5c:ed:7b:97:c8:60:84:33:4e:bd:3d:33:
         f0:8f:45:4b:39:e5:7c:c7:76:ce:0f:6d:05:2b:b7:f0:e3:85:
         96:be:a8:08:00:3b:ee:3a:57:c9:a2:8b:77:c6:3f:74:10:96:
         be:b8:bc:d1:d1:55:dc:e9:af:fe:95:d2:d4:31:8a:b5:2f:b4:
         3c:f9:89:b2:83:a6:4b:c6:ba:0d:7e:18:26:e3:e9:ba:ff:20:
         22:f0:e4:e9:bd:28:d4:cd:81:6b:33:af:ac:d7:83:01:25:b4:
         e9:18:33:41:d2:79:04:3c:d7:de:aa:1b:1e:6c:01:2a:13:2f:
         f1:56:30:7a:60:5c:ef:4b:7b:bf:f9:90:09:11:cf:7d:8a:46:
         fd:af:e0:99:2a:d0:2e:8f:54:d8:17:d8:fa:1c:12:8c:22:1f:
         ea:ff:99:11:04:19:d2:44:12:ae:b0:cb:79:2a:d0:56:c0:a9:
         dd:af:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:08:27 2024 by rpki-client on console-ams.rpki-client.org