Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
File:                     Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft (raw, json)
Hash identifier:          g7edoNkj/uxnebT8Yziu7jZi6SqAZI2YDoRYzxfiSmQ=
Subject key identifier:   3D:8E:0C:9F:2D:B7:E5:B9:DE:9B:67:22:11:2D:9D:20:C6:32:51:68
Authority key identifier: 02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
Certificate issuer:       /CN=022d580f4a069358f8fa57ef065e18f5fe936980
Certificate serial:       01901EFDAF3FE42C5CA68A635F7E758E843E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
Manifest number:          05EF
Signing time:             Sun 16 Jun 2024 03:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:00 +0000
Files and hashes:         1: Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl (hash: ZWcmXw5yGLZb4WP6PbTxeLdK+CSfmQexEM5U+T6mpL0=)
                          2: KlXy5jI-psGBZ-BWdw--opxhKjI.roa (hash: sVYancsPgklA71dMUjkyNB6m/y5SBPXZajVM+eRKKLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:af:3f:e4:2c:5c:a6:8a:63:5f:7e:75:8e:84:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022d580f4a069358f8fa57ef065e18f5fe936980
        Validity
            Not Before: Jun 16 03:01:00 2024 GMT
            Not After : Jun 17 03:01:00 2024 GMT
        Subject: CN=3d8e0c9f2db7e5b9de9b6722112d9d20c6325168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:6e:c8:57:44:8f:e4:21:5f:3d:94:22:dc:
                    b7:65:1b:01:df:82:7e:82:a9:59:f9:70:a1:b4:2a:
                    69:46:18:5b:12:25:b1:cd:84:a2:0e:b5:ca:68:12:
                    86:d9:65:db:e3:ba:76:d4:5c:9b:46:6c:7a:04:bc:
                    f1:6e:17:8a:84:82:57:b8:f8:e1:c2:4d:f5:35:d3:
                    6c:19:8d:52:43:2e:cc:c2:50:30:a6:52:56:e9:00:
                    2b:00:f0:df:a2:a4:94:63:44:ec:30:c4:2d:be:cc:
                    55:a6:fe:8e:01:82:db:30:69:ba:ac:4f:21:96:c7:
                    7e:76:2b:50:b0:d1:25:85:fc:b5:c2:ff:05:b7:ce:
                    62:56:c6:b9:35:4a:55:ab:5f:1a:ef:cb:8b:40:ae:
                    ef:13:73:92:a6:1a:98:1b:ce:70:e9:f9:2d:ab:24:
                    ff:36:7e:21:65:ae:5f:c2:19:b8:a7:8e:a1:e0:43:
                    f2:fd:a5:0a:0d:6e:92:09:9a:0f:6b:b3:49:23:74:
                    e7:50:c0:30:24:16:f9:c2:5d:6b:20:78:8e:91:83:
                    e3:01:bb:f8:f8:c2:b1:fc:8b:16:9a:25:23:bc:49:
                    33:cb:72:e3:fd:96:5d:f9:85:95:bb:c9:25:2f:c9:
                    1f:48:44:0f:62:55:1f:20:cb:82:d9:77:c8:18:ac:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:0C:9F:2D:B7:E5:B9:DE:9B:67:22:11:2D:9D:20:C6:32:51:68
            X509v3 Authority Key Identifier:
                keyid:02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:38:56:8d:0f:c8:52:1f:7c:f6:c8:21:d7:f3:fb:67:9e:
         d1:1a:0c:6f:60:cb:7a:98:e9:ca:e9:6d:79:5a:bc:27:95:d4:
         0f:dd:c7:9a:aa:5f:95:fd:1c:92:48:93:c0:72:4d:4e:3a:c8:
         02:d6:49:28:77:01:2f:2e:55:73:aa:b6:64:c0:07:33:b5:34:
         8d:a8:63:2c:84:e3:5d:7d:e5:82:c3:db:83:7c:83:ab:67:a4:
         29:35:15:ac:89:6f:9a:b1:57:6d:b4:bb:5d:db:9b:22:2a:26:
         53:d5:13:00:ec:53:57:88:d7:27:d8:90:03:e4:51:96:b3:d2:
         39:48:82:8c:6c:09:dc:86:68:4c:03:8d:1c:0d:bb:b0:9d:86:
         60:70:0b:4b:16:d8:12:a4:77:31:30:d2:41:c3:e0:0c:ff:eb:
         01:aa:d8:d3:b2:1e:96:64:77:e6:84:b2:83:b7:f8:9a:05:f5:
         2c:fb:02:58:d0:2b:3e:e6:e6:5c:f3:59:bd:3b:4e:ae:75:2a:
         d2:54:b9:f2:e5:11:5a:42:b7:82:ee:0d:63:d0:34:a7:3c:cc:
         6b:1c:bf:ca:bf:12:4a:b1:6f:63:54:41:f3:ad:c6:d1:5f:26:
         56:bb:53:cd:85:1d:ca:0c:4d:57:22:bb:92:d2:2e:ac:e2:e2:
         1a:ba:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:19 2024 by rpki-client on console-fra.rpki-client.org