Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          LXxD/TiKSa/R3RhEiNblRTLBXn3ZW0ejrdxLNsqpSWE=
Subject key identifier:   F4:6A:67:80:B2:7C:62:B2:29:D1:C5:AC:D4:6E:56:2D:41:46:64:4C
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       01903A3DDE701A967BC35B1050235F28132E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          07D1
Signing time:             Fri 21 Jun 2024 10:00:51 +0000
Manifest this update:     Fri 21 Jun 2024 10:00:51 +0000
Manifest next update:     Sat 22 Jun 2024 10:00:51 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: E+VCB2Gz35Z1lKGqGFr7BMrugIBOchtbxT57CO+vlIg=)
                          2: jwkDFOJVuR7ecckcfMiZn6IV5fg.roa (hash: rspKhbYYaLtz2s79+bHx97sfakD77wub7iovLBopXSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3d:de:70:1a:96:7b:c3:5b:10:50:23:5f:28:13:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Jun 21 10:00:51 2024 GMT
            Not After : Jun 22 10:00:51 2024 GMT
        Subject: CN=f46a6780b27c62b229d1c5acd46e562d4146644c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:c6:33:9f:9b:21:26:9a:37:72:46:2c:43:
                    30:32:ff:2d:3d:5c:ce:6a:6a:7d:4e:f1:31:f6:fa:
                    56:b4:0e:df:c5:dc:3b:6f:fd:e1:df:71:bb:14:75:
                    78:56:bb:94:f4:76:cc:76:6b:be:36:4b:a7:fd:f4:
                    24:e4:67:cc:1d:18:b7:0f:ac:f7:20:ee:55:b3:63:
                    c4:8b:33:b7:7d:d8:eb:58:b2:63:a9:df:4b:5d:ff:
                    35:fa:a9:e8:f9:0e:36:05:76:c3:9b:ae:38:1e:20:
                    6e:5c:16:30:39:0b:f0:ec:61:37:7d:fd:a4:8b:bc:
                    c5:e7:db:e6:63:06:59:9c:4a:65:1f:e0:0e:96:10:
                    51:b7:b9:6f:f4:30:d4:31:0c:18:d2:ec:93:dd:2c:
                    f3:2a:74:92:27:5d:60:45:9f:4b:75:5a:b5:7d:ad:
                    97:c7:45:d1:b6:88:ed:9b:b3:79:b6:e2:1e:92:53:
                    99:3d:fb:dc:5c:60:68:3e:04:3d:c0:3c:82:ea:2e:
                    44:f1:9e:e4:12:1d:6f:c6:56:16:4b:55:b3:e8:2e:
                    42:bc:69:ea:47:4b:e6:a9:d7:9f:35:e8:f4:ca:47:
                    3d:cc:bb:ba:e9:d9:67:d4:60:73:50:81:9e:5e:33:
                    d4:60:bd:e2:7e:ec:37:64:06:6a:13:73:b2:b4:48:
                    9e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:67:80:B2:7C:62:B2:29:D1:C5:AC:D4:6E:56:2D:41:46:64:4C
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:00:79:ab:67:4c:19:cd:5f:00:80:a0:2e:3b:dd:e1:09:
         22:ad:af:fd:93:ac:8c:ba:a7:41:6b:42:83:32:f3:b4:fc:c6:
         50:6c:ae:c8:0d:76:4f:b6:ec:23:94:ff:ba:e3:f4:5a:32:ab:
         b1:c9:24:1d:c0:f7:76:8a:6a:56:81:33:65:c1:f4:0c:ac:9e:
         fa:62:07:5b:28:af:d9:f2:8c:4e:8c:d8:d0:b3:f1:dc:be:7a:
         24:8a:00:e7:9c:c5:f8:26:2d:8a:83:b6:38:e3:f3:71:f0:71:
         e1:24:da:f3:fa:ed:55:97:d7:c7:9c:d9:15:52:1b:dc:8f:86:
         4e:44:5d:e3:7f:4e:f5:27:ce:01:7a:b8:ad:42:4e:26:fa:69:
         26:b3:3a:bd:92:72:f1:ed:cf:6e:a6:7e:79:15:43:b0:65:47:
         b3:f9:fa:b1:50:c8:30:2c:14:20:f6:68:c2:83:3d:56:d4:ff:
         a4:a7:47:04:f1:4b:08:20:a3:14:75:e6:da:a1:f5:ae:5b:3c:
         c6:54:75:68:d8:3d:34:9a:d4:1c:35:da:0c:c5:07:c3:01:11:
         81:60:33:f2:9d:79:2b:7c:1e:d8:c9:5b:b5:ed:c0:3c:0a:bd:
         e1:1a:70:09:a5:02:93:48:50:f9:9f:e5:00:92:44:c9:9c:26:
         44:65:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:52:19 2024 by rpki-client on console-ams.rpki-client.org