Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File:                     0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier:          gOTb2Mjr2K0pGrKOnGAB/gQKCKAzOFB0v13nzbai8bA=
Subject key identifier:   2F:0A:FA:D6:D5:1A:95:04:43:11:56:30:E0:B3:61:35:1F:81:60:2E
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer:       /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial:       018F3CD4481DE048531203D39EEB0CB6861C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number:          06C8
Signing time:             Fri 03 May 2024 05:01:36 +0000
Manifest this update:     Fri 03 May 2024 05:01:36 +0000
Manifest next update:     Sat 04 May 2024 05:01:36 +0000
Files and hashes:         1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: Qx/JVv3RAJtYrZR3OEMaljgIycYHrYZ1AtXquQPj9Mg=)
                          2: G0lEK89M-JPoIRE0wzgaLBMol_I.roa (hash: 2Ct6tRZ7lwiK18mcfDvHymDUpFPdnOgqzjZhdAatJ1E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:48:1d:e0:48:53:12:03:d3:9e:eb:0c:b6:86:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
        Validity
            Not Before: May  3 05:01:36 2024 GMT
            Not After : May  4 05:01:36 2024 GMT
        Subject: CN=2f0afad6d51a950443115630e0b361351f81602e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:05:02:5d:e9:5f:5b:57:40:a8:07:25:c2:
                    0c:9a:b8:c9:5a:05:74:55:7e:0e:39:74:be:76:a7:
                    50:9c:75:cd:6c:98:d8:32:55:38:23:b9:b1:40:ac:
                    03:04:43:ff:77:d2:73:b8:90:d5:75:b0:aa:f2:1d:
                    da:79:fe:0f:bf:22:02:46:4f:8e:cf:10:1f:4f:c4:
                    ad:56:f5:d3:0e:ab:ec:67:56:83:c8:08:1c:b8:f9:
                    35:90:44:26:cc:84:ed:9b:78:09:65:0e:56:c6:3a:
                    48:5b:fd:5c:76:d7:0a:2d:5f:27:5b:83:c8:23:38:
                    05:6a:dd:97:47:f4:42:e8:6d:d4:2d:3e:dd:ee:72:
                    e9:11:dd:f8:dc:68:df:31:01:87:1f:cf:a6:8c:46:
                    80:71:4b:57:3e:d4:3c:df:03:92:44:a5:fa:90:71:
                    27:c5:c7:c3:2f:da:cb:83:15:22:ee:d4:89:29:b2:
                    7f:4c:86:2f:1e:16:81:ab:55:e3:5b:35:c5:5d:f6:
                    d5:9f:98:d9:e8:2a:bc:46:be:1b:0e:f9:89:03:18:
                    e2:74:93:45:06:e9:0e:0e:ee:6b:03:7a:03:19:b6:
                    0b:7a:27:17:a9:a1:5d:5c:b1:5a:35:e5:51:ac:8c:
                    b5:77:d9:53:18:f7:76:c8:fa:8b:5f:27:49:78:00:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:FA:D6:D5:1A:95:04:43:11:56:30:E0:B3:61:35:1F:81:60:2E
            X509v3 Authority Key Identifier:
                keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:20:06:83:bf:19:cc:8a:2d:92:51:79:bf:84:17:69:54:
         6a:36:30:81:ec:55:fe:24:bc:f1:fc:b0:ac:20:fd:c9:ad:42:
         73:32:b4:9f:53:b6:68:46:b9:76:ff:dc:1e:a1:79:fe:79:7d:
         b3:e2:60:ea:16:ed:e0:19:93:01:ad:c5:01:02:d5:91:3e:18:
         3d:75:4e:d0:1b:e8:05:37:72:92:8a:76:17:8c:21:5f:7c:29:
         09:9d:42:b3:56:a1:a9:5c:34:f9:9e:5d:3d:e9:8b:f8:7b:8e:
         e4:e3:78:49:c9:22:ef:62:b4:9c:81:5e:53:5f:83:95:c2:2b:
         16:c2:9a:4b:15:1f:6f:49:f8:93:b7:4d:bf:9b:4d:94:7b:ce:
         92:42:2f:44:32:bc:23:f5:49:f1:0d:9e:50:58:66:01:7e:71:
         8f:71:4d:c5:82:2d:c1:73:91:4b:b9:96:3d:64:99:80:e1:23:
         01:5f:64:a1:75:66:f4:e6:b7:be:f2:28:cb:f7:f7:55:c2:6b:
         41:e6:13:9e:39:83:ab:89:d5:79:63:b5:8c:83:e5:a2:6c:30:
         39:41:71:25:db:27:2c:48:41:8d:98:e4:cb:82:77:a2:7f:ce:
         b2:65:76:43:87:35:83:7e:21:82:8f:10:39:d5:a5:9c:8b:e5:
         65:fd:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:13:35 2024 by rpki-client on console-fra.rpki-client.org