Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File:                     28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier:          5WOuiuRtkRZLzWNR919Z4CrzkYaqji+Ml4Tuvm6pV8Y=
Subject key identifier:   C0:69:AF:1E:2F:E0:B8:BD:EA:CC:9B:64:52:47:EC:1D:A2:69:37:76
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       01901D46240DB8F7B960AB6FDA5BC4A4AE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number:          1098
Signing time:             Sat 15 Jun 2024 19:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:54 +0000
Files and hashes:         1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: RKyDOWzhbhUThaanHph5+Tj4QDpTjax1cm7zF2D3qH8=)
                          2: wg-Ul1UR8R7bI-MxyDlLRWMqr3w.roa (hash: 1oEKbEFyFuN/StxX8Ozt++Fsq7bcVUkK4UadzSZ6Krg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:24:0d:b8:f7:b9:60:ab:6f:da:5b:c4:a4:ae:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Jun 15 19:00:54 2024 GMT
            Not After : Jun 16 19:00:54 2024 GMT
        Subject: CN=c069af1e2fe0b8bdeacc9b645247ec1da2693776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:1c:e5:e5:19:e2:cf:7b:ca:11:bf:78:43:
                    f3:b7:35:13:5a:90:ed:2d:f3:62:3c:0e:21:06:1f:
                    70:16:08:7a:96:1b:b8:91:de:88:4f:bf:d3:62:a1:
                    fb:f1:80:5e:7f:39:da:fa:97:07:04:61:31:86:08:
                    ea:64:c9:e0:94:a5:05:f4:b9:21:a1:35:e8:25:de:
                    d9:13:bd:fc:c6:00:56:92:53:69:0d:31:6d:a7:5e:
                    b8:48:6c:82:8d:ac:6f:5b:10:5c:fa:3c:a9:28:f3:
                    b1:c9:d2:5b:d4:2c:ed:e9:58:1f:d7:dd:cf:b0:a8:
                    b4:7a:d3:d8:fa:7f:c3:bd:eb:2e:56:fd:eb:09:75:
                    f7:ea:ce:4e:d7:1d:bf:3b:46:fc:72:7a:d6:25:da:
                    73:03:0c:47:19:36:6f:09:96:c3:bc:24:56:1d:85:
                    b2:12:7e:20:f2:e5:3b:02:91:9c:13:25:86:52:7c:
                    5c:0d:b4:9f:d0:68:02:ed:8b:32:e5:54:e3:5b:2a:
                    b8:43:83:f4:a3:fb:4b:44:65:48:bb:74:4a:d3:5b:
                    25:b6:0b:59:95:02:24:2e:26:0a:28:67:e6:6e:b2:
                    b5:37:67:13:56:11:e5:8a:da:f6:b9:d9:c6:3c:a2:
                    4a:b8:15:fe:ce:86:3e:ae:b0:85:30:d7:2e:d8:51:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:AF:1E:2F:E0:B8:BD:EA:CC:9B:64:52:47:EC:1D:A2:69:37:76
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:45:c9:87:01:54:0b:7f:d9:ac:c0:d8:43:fa:31:84:4b:
         3d:78:cd:2e:10:82:5b:57:06:41:d8:4b:ee:0e:3d:ce:09:24:
         0b:38:1d:25:59:6f:a2:9e:78:fe:8c:b5:2a:31:4f:ce:c2:e1:
         eb:df:18:72:73:e3:1c:4c:21:17:01:c5:18:bf:d1:8d:d6:26:
         50:ee:30:bd:e7:e2:66:d4:87:43:79:b1:20:b1:ae:b0:19:a4:
         65:10:af:39:05:bf:b4:d8:3c:d0:d2:5b:95:6d:83:7d:3e:f5:
         d7:a6:81:43:3d:05:d9:22:77:e3:8f:ca:60:e5:89:e4:92:4a:
         ef:bd:9a:db:6a:b3:b9:56:f3:85:22:42:15:e6:ce:41:86:f7:
         72:a9:bf:0c:c3:3a:6f:b9:19:80:90:2a:ab:2c:cb:20:d3:88:
         cb:ea:4e:40:c9:66:3a:a2:98:67:55:ed:95:99:c4:db:0a:73:
         33:44:db:cb:48:bb:23:7f:b8:ab:53:10:a3:c2:d1:37:f0:fa:
         db:86:ad:d7:34:58:ff:1b:1b:fe:88:8e:c8:fe:b8:56:fd:1e:
         16:f4:79:d3:c1:66:c1:87:f9:ef:bf:0d:b2:f5:87:7c:13:26:
         77:6f:aa:89:f7:f7:5e:49:78:31:20:b5:b7:ae:8a:a0:ce:2a:
         d4:41:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:15:18 2024 by rpki-client on console-ams.rpki-client.org