Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.mft
File:                     sYt5Ezs7ChHVLZnht8FyIH_kV4w.mft (raw, json)
Hash identifier:          daL72tm+tLJWi+sevgH3u7/YRr7b/2pJMnPLB1iZvdk=
Subject key identifier:   69:1D:25:AD:9D:81:6C:C1:D3:4A:F0:55:53:56:B5:F2:E9:FB:4E:39
Authority key identifier: B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
Certificate issuer:       /CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Certificate serial:       01901DEB3AE5950BD8908AEDD265A04DE428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.mft
Manifest number:          067F
Signing time:             Sat 15 Jun 2024 22:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:13 +0000
Files and hashes:         1: 4xs_5z3hkV2SCZPJTWp7AmoSL_0.roa (hash: B1vTbZe110n9s7eRqDPKO8AnNrYl638KZTfrLhDOymE=)
                          2: sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl (hash: JzmZ4yX2bG4D3ZPdDUfMe9z3f9L9z6Y6sxbdyJtV4fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3a:e5:95:0b:d8:90:8a:ed:d2:65:a0:4d:e4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
        Validity
            Not Before: Jun 15 22:01:13 2024 GMT
            Not After : Jun 16 22:01:13 2024 GMT
        Subject: CN=691d25ad9d816cc1d34af0555356b5f2e9fb4e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:10:bb:56:98:dd:42:2e:c8:c3:8d:b2:8e:
                    20:47:fe:cf:d2:bd:7d:5a:72:15:7b:c1:51:ef:c8:
                    49:3b:a4:8b:94:03:3c:56:70:6d:2d:de:a5:3b:b6:
                    c1:6c:d9:89:82:f1:d5:f2:14:46:81:7a:e4:2f:d6:
                    77:a8:25:9e:9a:c1:a5:84:c1:98:d8:40:80:56:8f:
                    4c:64:8c:78:48:1a:d6:01:92:d8:83:b8:b4:2c:f7:
                    00:f3:ce:3c:32:92:f1:fe:6f:8f:f9:c5:24:02:74:
                    60:d8:79:bf:5d:e6:be:f0:7b:ef:8f:99:1a:65:8b:
                    d5:c2:24:48:2c:2e:35:43:ed:0b:cc:ca:29:cc:63:
                    97:21:f4:32:c6:84:26:b9:54:4e:e6:ca:1f:a9:6a:
                    06:2b:d5:b4:01:94:4e:6d:82:97:f4:18:d9:53:6d:
                    30:42:ba:6e:f1:be:95:72:68:02:27:e3:27:dd:32:
                    6b:1b:c7:d6:12:72:77:3c:ee:c1:e5:6c:6b:5e:f7:
                    4e:80:82:ee:be:8a:13:21:e3:83:9b:36:41:d3:cf:
                    bf:5f:14:d8:28:fc:61:1c:42:de:b4:d2:08:6e:fb:
                    d2:17:c0:7f:f5:62:5f:d7:9f:a9:5f:b4:30:6d:d4:
                    0d:0b:bd:7e:b8:80:56:71:ee:64:8d:cb:b7:6f:fb:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:25:AD:9D:81:6C:C1:D3:4A:F0:55:53:56:B5:F2:E9:FB:4E:39
            X509v3 Authority Key Identifier:
                keyid:B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:05:b3:4a:5c:1d:f2:77:3b:60:a9:57:6c:f4:7f:65:3a:
         06:d4:02:e8:eb:ab:de:18:be:c7:8f:83:8a:69:ec:b4:dd:99:
         09:6b:4b:42:20:e4:41:0d:9c:47:c0:8c:6d:f0:f4:93:4b:45:
         3c:4e:7f:09:3a:0f:33:85:f8:b5:29:f2:ee:70:d4:00:9a:7d:
         6e:9e:7e:79:bf:13:2a:8a:c4:91:43:2f:3c:05:09:c1:8a:97:
         d0:c6:e2:0b:b5:8c:b7:ec:12:34:62:76:ba:17:3b:e0:87:66:
         b4:b0:8c:9f:c9:04:99:7b:06:3f:28:f1:45:7f:bd:6e:52:ee:
         b3:4a:7a:fb:b2:f7:99:e9:49:0c:d7:a8:1f:47:ad:9c:21:35:
         ae:8d:2d:f6:54:1a:99:b8:db:03:c9:93:cb:0e:84:12:bc:8a:
         de:46:37:14:04:a7:45:1d:ba:c1:7c:57:81:25:7a:4f:81:25:
         d1:cc:d9:23:56:d7:3a:6c:13:0d:44:56:3f:12:16:3a:92:ff:
         3f:43:80:f5:d9:dd:3c:df:93:00:c0:a7:1a:aa:e3:c2:fe:5f:
         40:96:7b:b6:62:5f:d4:92:45:ea:74:db:0a:3f:28:ba:51:e9:
         70:50:e1:b3:55:db:c9:b3:14:b3:41:64:23:93:3a:9a:69:da:
         2b:c7:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:04 2024 by rpki-client on console-ams.rpki-client.org