Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File:                     M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier:          jgGF28xWtqWeoqg/iZZdEKh25cRM5Mk15qbP9mh4PWY=
Subject key identifier:   D0:63:E3:E5:5A:67:36:D5:78:9D:CB:30:69:9B:DA:2B:D2:F9:24:D3
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer:       /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial:       01901BFD9F56D4A83CB6EF87CD4655915AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number:          0D3D
Signing time:             Sat 15 Jun 2024 13:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:04 +0000
Files and hashes:         1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: SmAA9hd0DmxoQsbA5P+KsqgD38/rR8V5gDgD+968+MM=)
                          2: Y7NgkCWBb9YgqL9DznsTuQ79tmw.roa (hash: 6dczwfpqyC9vhPTbxIV1BVyYNGse9e/kQNus5kFAMf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:9f:56:d4:a8:3c:b6:ef:87:cd:46:55:91:5a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
        Validity
            Not Before: Jun 15 13:02:04 2024 GMT
            Not After : Jun 16 13:02:04 2024 GMT
        Subject: CN=d063e3e55a6736d5789dcb30699bda2bd2f924d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:fd:d5:ba:df:6d:cc:ac:eb:5d:c0:a2:15:
                    ec:83:0c:e5:ca:ff:63:0b:50:23:69:c4:3a:40:62:
                    3c:f5:17:0d:fc:f3:58:27:d9:11:46:31:f1:40:a7:
                    52:db:45:01:8c:1b:fc:7f:a8:90:3c:58:e5:31:bb:
                    eb:88:5c:1b:4e:c9:21:b0:2b:02:9b:2d:73:a7:09:
                    dc:72:dd:7b:bd:c1:e8:04:9a:b4:74:2f:ec:5c:5f:
                    b5:6d:5e:e0:c9:64:0a:9c:40:1a:d8:07:47:5d:35:
                    46:09:79:95:5b:62:a0:bb:1f:4d:3a:90:ad:94:fc:
                    cc:90:ac:42:1b:09:25:ae:ff:ab:3c:6e:68:b7:7a:
                    a8:27:4a:dc:ae:49:29:d0:23:15:ed:4c:d0:4c:ad:
                    89:03:bb:c3:19:e5:71:00:da:86:71:0b:9c:43:d9:
                    b7:fb:2e:02:5c:10:65:6f:78:5f:ac:21:ed:0e:fd:
                    4f:5c:de:84:e2:36:0d:bb:c0:7a:88:ff:a0:f1:95:
                    ee:cf:bc:c1:2d:cc:a4:8e:07:29:d3:c9:27:56:44:
                    b7:06:bf:33:4f:35:5a:3f:8d:54:09:00:76:d8:7d:
                    aa:63:b4:af:be:14:82:d6:95:09:d6:5d:4f:02:75:
                    21:aa:4e:86:fb:26:b9:1f:30:f4:c7:97:44:28:cb:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:E3:E5:5A:67:36:D5:78:9D:CB:30:69:9B:DA:2B:D2:F9:24:D3
            X509v3 Authority Key Identifier:
                keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:5a:be:0a:32:54:f4:9a:94:48:fa:b2:8d:48:a6:d6:83:
         cf:b1:86:9c:2d:1d:4c:31:29:e7:bd:8c:53:3a:85:97:57:4b:
         37:a7:98:40:7a:46:1b:f9:0a:e6:e6:e6:78:bd:0f:8d:a2:4e:
         80:44:bf:a0:b1:b9:3c:99:46:de:98:2d:df:e1:11:c1:92:35:
         71:04:d4:30:7a:64:49:ea:fd:62:e4:45:78:cc:c2:04:8a:a0:
         af:0b:e2:2b:d4:18:ed:f0:0b:e3:b9:e6:45:e0:56:cf:26:1a:
         2f:d9:5e:36:df:34:90:34:67:d0:77:68:49:a5:e8:4c:32:32:
         26:a5:0b:9f:50:59:40:f2:5b:68:1f:63:c4:21:1f:78:bf:ca:
         46:cd:a6:8b:61:3d:1e:e1:c3:33:42:cb:3a:d2:83:ce:38:3b:
         d1:28:64:32:f5:47:3e:19:6b:31:49:cd:35:a2:0a:18:39:c1:
         55:cc:32:10:0e:87:5e:b0:45:3f:fd:6c:46:df:93:43:df:05:
         96:ac:66:b1:7b:de:52:22:5e:70:cb:8f:4c:96:17:6f:a2:ab:
         f7:7d:da:e5:e5:03:99:ec:7e:a8:74:79:0c:ba:df:92:d5:de:
         19:89:5c:6a:f8:cc:1a:f4:4b:8b:72:29:eb:2a:95:de:a8:a6:
         d7:d3:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:41:44 2024 by rpki-client on console-fra.rpki-client.org