Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File:                     i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier:          g+u+lAo2E/2XvygJopftZVYKE6O+LkCK1W9ATERnnpk=
Subject key identifier:   55:5E:AD:53:86:96:50:5A:62:60:0C:9C:75:85:61:42:1F:6E:F0:65
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer:       /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial:       01901DED5C2F15CF4A2199990C4B01F3970A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number:          04CD
Signing time:             Sat 15 Jun 2024 22:03:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:33 +0000
Files and hashes:         1: UpRx0DjmHzgKEw2hcWllOapMe9M.roa (hash: 3nouHW09Gom/8ZjtO/+k8+C9l6TqlQoAkIJ6jhFUcVo=)
                          2: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: dZoD6dKmnB195BT/x5DUcz7i/z4Vx6ZsrUuonKJ/J/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5c:2f:15:cf:4a:21:99:99:0c:4b:01:f3:97:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
        Validity
            Not Before: Jun 15 22:03:33 2024 GMT
            Not After : Jun 16 22:03:33 2024 GMT
        Subject: CN=555ead538696505a62600c9c758561421f6ef065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:b4:1c:dd:2d:ad:18:7d:29:b9:1e:7f:a6:
                    e4:93:d1:1b:6a:39:68:c6:55:a5:f2:ee:e1:b7:8c:
                    d4:df:af:b0:15:2d:cc:25:04:f0:f4:33:05:6a:29:
                    bb:57:71:4c:06:8d:ab:d2:27:1e:18:60:92:0d:af:
                    8d:00:95:b6:78:f0:21:f9:40:f7:b8:34:89:a2:59:
                    91:6d:dc:4b:3f:c7:70:47:ab:6a:70:c0:23:c1:29:
                    e3:76:f6:22:e2:ab:1d:e2:70:a5:c3:19:bc:5e:7f:
                    a7:2c:7a:3e:67:f6:46:f1:98:97:38:3c:d1:b1:de:
                    78:a6:a4:fb:9d:cf:42:30:df:bb:5d:9b:f5:97:50:
                    74:5b:ea:32:c7:c9:bb:2e:30:6f:52:70:4f:aa:5a:
                    9d:8b:35:43:42:bd:e3:93:79:45:92:a0:7e:e5:15:
                    b9:34:8a:c6:33:82:a2:32:35:f1:66:88:f3:5d:b8:
                    62:3a:c6:3e:9e:09:74:a2:cf:29:db:7a:42:88:bf:
                    e8:e7:94:d2:f2:33:6d:4c:dc:c7:23:06:d5:38:44:
                    e9:c0:a5:63:23:9e:b0:8e:af:85:f7:fa:8f:31:9f:
                    10:a7:59:1f:cd:70:97:91:92:6b:32:d4:77:6e:cf:
                    ed:18:8f:89:e1:5c:62:85:ad:37:b8:d7:1c:a0:58:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:AD:53:86:96:50:5A:62:60:0C:9C:75:85:61:42:1F:6E:F0:65
            X509v3 Authority Key Identifier:
                keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:c6:c4:e1:74:05:36:0c:45:16:0b:b4:5e:79:1b:ef:5c:
         24:2a:df:15:2e:02:e1:3a:02:86:51:23:55:47:15:5a:3d:3f:
         f5:3a:53:6c:76:d3:87:3a:0d:8a:bc:5f:e0:5d:57:28:1d:00:
         eb:b8:85:b4:d2:e1:45:45:bd:9a:02:eb:53:6d:5b:d8:bb:bd:
         a6:c9:83:2a:8a:93:ad:aa:2e:29:99:5a:04:9b:0e:e4:65:20:
         be:51:4c:dc:79:14:6d:0e:0f:02:59:4e:b2:10:91:b9:6a:cf:
         78:ad:e4:ac:ba:f1:d6:75:93:53:23:b6:79:44:d0:03:9b:63:
         31:f0:21:33:e5:b7:a2:69:62:79:71:7c:a3:9a:20:5a:b9:aa:
         ed:d2:bc:1a:23:f1:9a:eb:82:85:fb:fa:59:59:9f:84:c4:e6:
         a1:e7:28:2e:cb:37:56:38:1c:89:47:93:d3:da:a9:55:b8:04:
         66:d1:6a:24:62:cc:d3:3c:39:81:a6:ee:bd:82:4d:2a:d8:56:
         4f:33:3a:94:26:ad:0c:fc:d1:95:57:8c:54:6f:65:25:4d:82:
         49:0b:f6:e8:71:ae:ae:e5:b6:ad:ef:33:6a:84:ba:39:57:66:
         09:48:b0:25:a1:cd:13:34:b2:76:0f:d4:d8:80:d5:82:d6:dc:
         88:ac:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:17 2024 by rpki-client on console-ams.rpki-client.org