Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File:                     sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier:          b4A1iSlpv19g0/39+cItVn42v0S5q5OXn027eoKUP3U=
Subject key identifier:   21:02:8D:D7:35:2F:E3:2F:63:9E:E9:02:5B:BD:BA:02:63:9D:ED:C7
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer:       /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial:       018FBB6ECD0D3983C3BD7166D5F2D905C3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number:          0DCF
Signing time:             Mon 27 May 2024 19:02:31 +0000
Manifest this update:     Mon 27 May 2024 19:02:31 +0000
Manifest next update:     Tue 28 May 2024 19:02:31 +0000
Files and hashes:         1: l9pvAOvJo3U3y4hlc35uaW6pRP0.roa (hash: 2qSPauEg0wasu2tbhOwWMxtDNkF89f6c1hyH80SiKME=)
                          2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: uEpaQlZ+LtQtOMd3KwXtww9pYQS7uXjeNWTi/CwGcW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bb:6e:cd:0d:39:83:c3:bd:71:66:d5:f2:d9:05:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
        Validity
            Not Before: May 27 19:02:31 2024 GMT
            Not After : May 28 19:02:31 2024 GMT
        Subject: CN=21028dd7352fe32f639ee9025bbdba02639dedc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:d7:a1:40:0e:1f:e8:74:d2:27:60:17:92:
                    8e:41:2b:42:d1:73:e0:b1:88:04:b1:32:38:f0:26:
                    ab:db:71:2b:08:14:6f:ff:a0:10:e7:4c:ae:ef:82:
                    20:bb:c8:80:b6:d4:40:d2:d9:7b:ad:51:9e:8b:2a:
                    5d:5c:4c:ae:6a:93:ae:90:19:f3:87:71:3f:9e:35:
                    45:df:fe:58:f9:08:6d:84:3d:5b:a7:41:2c:41:3a:
                    b9:94:d3:52:7d:d7:86:eb:30:83:62:8b:5c:94:74:
                    2d:2a:19:0f:d2:03:40:fb:3b:ab:48:6f:93:2b:10:
                    26:16:e5:3e:d9:b8:20:3c:16:2e:b5:5e:66:d4:93:
                    a8:97:c7:b7:6b:57:54:21:1b:56:5b:19:22:c4:8f:
                    cb:66:99:82:43:eb:4d:ed:80:3d:9f:ff:d6:2b:a5:
                    6e:b8:a6:a8:54:1e:99:b7:ff:b6:44:f9:3c:e6:08:
                    b2:58:38:bc:cc:2a:3c:fa:c0:30:d0:f6:3f:ee:e6:
                    55:4e:73:65:d1:cf:c8:40:23:70:15:ed:93:ee:c0:
                    05:6d:a7:8f:c0:9b:ca:99:e4:3b:99:15:f4:29:7d:
                    8b:97:de:d6:55:db:e8:c0:cb:db:57:a2:ba:ed:51:
                    af:a1:96:1d:f4:7e:36:f9:54:93:1c:79:ac:27:80:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:02:8D:D7:35:2F:E3:2F:63:9E:E9:02:5B:BD:BA:02:63:9D:ED:C7
            X509v3 Authority Key Identifier:
                keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:d3:0c:16:34:33:38:2f:8f:46:03:8e:10:32:48:0a:8d:
         43:03:d5:9a:a3:7b:1d:99:0e:8c:f9:9c:35:69:61:58:17:d3:
         83:49:f8:8c:1d:ce:be:26:00:bc:91:f1:a6:71:cf:d6:76:d5:
         ab:a2:c9:54:e6:35:57:90:dd:49:da:4e:6c:74:e4:c4:1f:4b:
         92:6f:5b:5b:8d:04:d0:65:35:8f:ff:73:70:4b:0f:1e:6c:b1:
         ca:d8:1f:f8:8f:14:00:a2:d0:9e:a7:ec:c7:f9:b4:c1:83:c9:
         7e:be:b4:92:80:54:0f:f9:1e:64:47:d0:90:24:2e:a0:36:e3:
         a6:55:e7:93:d9:dd:51:8b:c1:ba:ee:45:9e:74:48:e1:ad:c6:
         fc:d8:15:e3:74:13:8e:82:d7:83:cf:42:ed:be:04:bf:9b:9e:
         5a:c1:a0:72:28:e8:f4:1b:6f:5c:c4:30:f4:41:12:e7:a1:3a:
         86:cf:93:11:cc:1e:23:88:3c:dd:20:a5:29:d2:85:d8:e0:98:
         55:b9:51:81:bc:dd:22:d9:ea:40:09:9a:c6:2c:71:a9:4c:d5:
         0b:dd:68:e7:d6:b1:f5:2b:d3:3e:62:2b:c4:be:b1:cb:61:04:
         bd:a7:0b:c9:72:94:84:84:70:c5:4a:fe:27:e6:9e:96:7a:72:
         d4:dd:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 23:48:56 2024 by rpki-client on console-ams.rpki-client.org