Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File:                     335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier:          ehfYo/O+tCJcHgVzRjHGXEJnj0LDaoIU4gP1hf8nKmo=
Subject key identifier:   40:29:B6:8B:0F:15:05:CB:6C:A3:60:3B:37:D4:B5:B5:9E:52:8C:90
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer:       /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial:       01901E8FE860E2FC429363F1867726E3BEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number:          06CD
Signing time:             Sun 16 Jun 2024 01:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:05 +0000
Files and hashes:         1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: lTdViAS1KOsEMNb47UJ7Spo9YjT6Iz29WBf/aV2Lt2E=)
                          2: 7p0jrPtrY5O8m5LVE1ZmDLqGjMU.roa (hash: 4wPLhtc6OO53CJOQbUqoZTEHWrFtwTiurK7NjdKCpiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e8:60:e2:fc:42:93:63:f1:86:77:26:e3:be:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
        Validity
            Not Before: Jun 16 01:01:05 2024 GMT
            Not After : Jun 17 01:01:05 2024 GMT
        Subject: CN=4029b68b0f1505cb6ca3603b37d4b5b59e528c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:ed:c1:df:76:7b:17:3e:1f:c0:78:53:56:
                    b9:51:58:e0:70:36:8b:a5:59:1b:7f:40:5e:74:0a:
                    79:a8:74:b0:e5:b1:fa:b9:2a:2b:e9:71:fd:16:49:
                    1f:96:78:15:57:31:cb:4b:cb:0f:d8:38:db:7b:7e:
                    20:4f:d4:a6:ca:7d:7e:35:ba:4b:b8:1b:a5:dc:ee:
                    0b:ee:36:27:44:0b:2b:80:ef:20:d0:fa:1b:b2:6d:
                    b1:2a:1e:4c:15:13:38:56:80:fd:8f:27:db:a6:31:
                    1f:bb:ce:a6:7f:47:03:20:ff:e3:65:c0:50:4f:74:
                    76:c0:39:b9:1b:de:ac:ea:c9:7b:8c:f7:72:85:a6:
                    ca:8d:ea:f1:f3:71:22:48:21:85:10:33:d4:70:34:
                    b5:ff:85:82:00:6d:4a:a6:72:14:02:bc:90:66:66:
                    ec:20:90:05:f0:c7:f9:e3:6c:6c:cd:68:b4:bb:f1:
                    f6:48:68:6c:86:de:11:f2:2a:ce:18:b6:8d:51:e6:
                    e1:4b:5a:15:86:6d:c5:a3:37:8c:52:ea:55:e7:6f:
                    c0:e5:39:8d:9a:96:7e:b0:d4:19:78:84:fc:11:26:
                    7e:11:d8:c0:52:76:0a:15:c1:fe:8b:2e:8d:dc:95:
                    e7:11:b2:f4:ef:1a:8e:4b:8a:d4:ae:30:59:7f:30:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:B6:8B:0F:15:05:CB:6C:A3:60:3B:37:D4:B5:B5:9E:52:8C:90
            X509v3 Authority Key Identifier:
                keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:90:90:e7:78:4a:4e:1c:5e:c8:b6:14:99:c7:cb:8d:f6:c4:
         7c:24:23:84:1e:18:86:40:64:e7:91:97:fb:c6:fb:b9:66:d8:
         6c:7f:9d:61:a4:61:2a:f8:36:ff:c9:60:de:91:f3:25:45:90:
         50:f8:83:be:09:02:7a:45:03:f5:87:90:fe:bb:a2:23:2f:ca:
         75:4f:6a:c4:f7:17:e6:2a:5c:6a:25:1e:9a:13:71:f6:6d:a4:
         39:8f:53:dd:de:88:6c:71:a1:c0:5e:f7:dc:cb:3b:9f:19:bc:
         2d:62:a0:e1:a0:ed:98:0f:92:a6:90:8c:23:af:3e:5c:5f:99:
         34:78:10:e4:6a:5e:41:c5:c8:e0:08:94:bb:42:8f:67:07:b2:
         1b:e2:01:39:53:1b:01:36:6d:fb:db:dc:47:35:d9:79:59:88:
         25:b5:fd:b2:ac:0a:3a:f3:f7:62:c1:8e:59:e5:f5:ac:16:44:
         09:d3:eb:87:0b:d7:f1:0a:b4:ee:b5:1f:5f:21:1d:1a:4e:b8:
         c4:dd:06:b4:4e:f6:bf:94:22:7a:2c:c7:db:2b:ad:b7:dc:ee:
         cf:2b:4a:d5:ab:94:72:96:a6:a5:41:af:bb:f6:0d:30:57:50:
         5a:07:80:ca:78:ef:36:22:93:19:32:03:95:3b:e7:54:00:fe:
         17:e4:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:25 2024 by rpki-client on console-ams.rpki-client.org