Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          Ae0pTMcRoe4heuN4Z+JNBrf72ZIm448mEAJppjvW1Us=
Subject key identifier:   FF:6C:FD:52:2A:25:C2:70:80:C0:3C:F6:27:FF:2F:E1:C7:DC:E0:68
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       01901EFDC808FAE91011EA62D18D35D51E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          08AF
Signing time:             Sun 16 Jun 2024 03:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:06 +0000
Files and hashes:         1: DsXVODTXGF8ZPiP_W53hk59Cmik.roa (hash: 2q+hYokRAnNy14v83eElhU1YEnMdUrBY46TyVNpBvUM=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: U5e9s3jSHsbDeacXuE/y//BkBSthy8ORiCORSfBNwKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:c8:08:fa:e9:10:11:ea:62:d1:8d:35:d5:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Jun 16 03:01:06 2024 GMT
            Not After : Jun 17 03:01:06 2024 GMT
        Subject: CN=ff6cfd522a25c27080c03cf627ff2fe1c7dce068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:e4:fc:3a:82:52:35:55:56:32:69:ea:b2:
                    b9:b6:52:7d:64:19:61:ff:b8:3f:d1:26:b9:a0:cd:
                    b4:08:27:a9:72:55:2f:79:06:b4:f4:18:95:2f:3f:
                    39:91:8e:ca:8f:ac:dd:21:9d:f4:30:bb:30:94:a2:
                    6e:d9:6a:af:af:5a:55:8f:60:e3:df:77:1c:f8:c1:
                    ba:8a:bd:30:a5:3a:b9:2e:82:ed:dd:54:80:35:a8:
                    ef:8f:bf:7e:ac:cc:9d:12:f0:c5:36:31:ee:cc:cb:
                    2e:3a:fe:de:c3:a8:c8:89:af:a4:09:85:79:09:b3:
                    86:43:56:f3:f3:4c:df:49:5d:34:e5:94:be:1e:0e:
                    64:5e:11:9a:42:eb:9c:fe:5d:7f:43:f6:ce:40:bb:
                    14:9c:59:6e:92:e7:ac:e3:a9:fa:ea:b8:54:e1:b4:
                    f0:9f:05:21:dd:0a:50:ac:3e:53:43:ea:6b:c7:10:
                    7b:b2:2e:ce:a5:1e:7e:5b:e6:2d:92:a6:64:82:7a:
                    bb:ec:6a:2b:12:b4:0f:61:77:bc:47:b2:a3:b1:2d:
                    1a:80:6b:cf:4a:b7:0f:16:a4:83:32:c4:d5:f3:68:
                    77:61:8c:cb:fb:64:41:f5:e6:13:0c:ee:73:26:4a:
                    5e:45:12:35:a9:69:83:98:0c:08:ed:92:d5:0b:22:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6C:FD:52:2A:25:C2:70:80:C0:3C:F6:27:FF:2F:E1:C7:DC:E0:68
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:50:4f:3a:e8:43:54:e7:2a:d8:f5:4e:09:cd:c3:9f:69:ce:
         be:96:bb:b8:4c:b3:79:a2:b2:4c:3a:5f:06:db:2b:ab:00:28:
         66:1f:c9:8f:aa:91:3c:16:3d:93:da:fa:cb:94:90:2a:2b:77:
         b2:68:e1:8b:61:c1:57:8d:6f:f1:10:fe:39:73:17:89:51:a6:
         a4:e9:c3:66:09:39:16:3f:2c:a0:0d:0a:a1:3c:83:2a:93:8b:
         f2:ab:4e:a7:43:36:9a:dd:f3:9b:5d:ca:c9:75:63:c7:58:6e:
         a6:ef:6a:82:29:71:20:59:ac:ef:1d:dc:ba:7c:d6:b6:5d:7a:
         2a:db:61:0c:96:a6:62:d1:2c:5d:9e:e7:76:e2:56:6b:7f:dc:
         a1:2d:14:21:00:01:80:0e:b6:a2:2f:19:4b:5e:d4:d4:27:58:
         b4:46:2d:bc:f8:3f:e0:02:d9:87:c6:72:46:af:47:10:5e:3e:
         ca:c6:d2:62:15:9f:7c:e3:ee:95:c1:d2:50:c4:0e:f3:cc:e3:
         ee:b1:bb:ba:45:5a:5b:a4:f7:de:df:7d:4a:3f:ff:67:db:15:
         35:b4:c1:d9:c1:fa:21:05:83:17:fe:f4:28:93:4c:fc:14:00:
         dc:af:1d:8b:51:ad:f9:c2:50:8a:46:7d:e0:09:68:0f:a1:b6:
         33:cc:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:38 2024 by rpki-client on console-fra.rpki-client.org