Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File:                     IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier:          3nPUrZsHu8/iQlUDmjRnYFC9mLs2aJtYwCKY0CPctgY=
Subject key identifier:   A0:71:49:D6:FC:41:CD:94:3D:80:9C:CB:88:CA:37:78:B7:B0:F5:37
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer:       /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial:       018F8E93F2617A991ED06F91735E1CFB82C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number:          94
Signing time:             Sun 19 May 2024 02:00:11 +0000
Manifest this update:     Sun 19 May 2024 02:00:11 +0000
Manifest next update:     Mon 20 May 2024 02:00:11 +0000
Files and hashes:         1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: cTb6sBR4AOSjiDUsmslVUwIUKY1nAmYxd4Evo7pRVCI=)
                          2: YyoIMiUWtZBjGayR0fZhMP9MTPA.roa (hash: ovtX6StzpEyaNiuWoVioAsQnieqjZLVYJaqH1vcx+tU=)
                          3: jZPEmKAhBO4v0zFAWZaPRCr8yek.roa (hash: l9kCW6lSJw9xnHW3vdkY5XNrk6vwNQY2iNVIxM+r26o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:93:f2:61:7a:99:1e:d0:6f:91:73:5e:1c:fb:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
        Validity
            Not Before: May 19 02:00:11 2024 GMT
            Not After : May 20 02:00:11 2024 GMT
        Subject: CN=a07149d6fc41cd943d809ccb88ca3778b7b0f537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:c3:d0:df:c9:30:a5:bd:48:92:da:0b:46:
                    25:45:ca:a9:93:5e:3d:05:c0:da:b8:5e:a4:75:33:
                    33:0a:99:ae:66:ca:3f:ad:56:c0:19:f8:55:82:6e:
                    ff:61:e1:b5:d7:e8:c8:c3:1f:64:ee:33:11:76:1a:
                    70:bb:73:dc:16:8a:2c:14:a7:5d:8d:49:7c:dd:1e:
                    2b:b2:45:c3:4a:5b:36:0c:ab:dd:d8:c7:f5:66:9a:
                    3a:00:81:dc:65:33:e6:43:d9:c0:ae:63:42:a6:5d:
                    57:4f:0e:1e:d9:60:7c:8c:03:f0:a6:91:3c:24:8a:
                    13:fb:dd:19:7c:49:4b:2e:81:7e:ba:63:e1:19:a6:
                    e1:0b:cc:bd:a3:90:7a:4a:c1:2a:9b:45:47:7c:55:
                    31:99:65:dd:37:77:a5:e8:70:39:20:6e:68:09:44:
                    14:5c:c2:bf:a8:0c:14:d2:65:c5:8e:0b:21:22:db:
                    24:16:c0:f9:f2:4e:1a:79:b9:04:53:dc:92:b2:11:
                    97:83:10:7f:bd:77:44:ae:e5:d9:ae:6d:21:4c:9f:
                    12:87:e2:de:f5:70:1e:d5:d8:33:c5:a1:7f:81:07:
                    88:43:3d:9a:1b:d5:b8:58:64:c1:4d:5a:75:44:cb:
                    0c:e9:90:f4:f4:01:32:2e:d5:8e:35:f0:4b:3a:34:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:71:49:D6:FC:41:CD:94:3D:80:9C:CB:88:CA:37:78:B7:B0:F5:37
            X509v3 Authority Key Identifier:
                keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:11:67:69:84:16:a9:22:54:ac:1d:a6:37:0b:f2:75:7f:
         ef:46:73:6a:8d:4b:99:05:46:89:b6:e2:7d:bf:ee:1b:93:fb:
         1f:56:6f:2c:0d:cc:89:95:67:54:59:4a:e8:7a:ca:55:fa:89:
         88:62:17:79:2f:69:82:6a:6d:5d:23:c1:30:0b:05:86:98:5f:
         76:4b:78:c6:48:e6:34:c4:9b:9c:fb:d5:e8:b4:63:e8:fe:32:
         1d:49:46:f3:51:4e:db:d1:d1:8b:8f:55:34:a1:4d:5e:12:ad:
         7c:f8:55:f9:25:80:43:c0:ce:99:1e:57:da:00:ba:0a:46:7b:
         d9:34:3e:89:c3:80:34:73:89:a2:bf:73:32:e8:fd:41:0d:16:
         8f:eb:98:d1:d7:77:49:a5:63:0c:aa:b0:a4:aa:02:ad:5b:da:
         2f:4f:cd:0f:4c:f0:ce:53:84:e6:94:77:5b:dc:55:ec:21:1f:
         07:5e:23:40:bb:9f:07:4e:48:2d:fb:7a:b8:6a:92:07:72:4e:
         e9:39:a7:48:88:bd:12:94:7b:8d:fd:79:4e:7d:68:fa:55:be:
         51:ec:46:02:e8:fe:44:3a:6a:26:a4:3b:b8:ad:f9:25:80:aa:
         2c:e2:27:6b:8d:e1:7c:ae:fa:b7:09:7d:80:7b:5c:3c:67:33:
         26:5b:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:46:59 2024 by rpki-client on console-fra.rpki-client.org