Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File:                     MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier:          zSK08u/bzIAfe2hKNu0CbJiezvvi0L/VnrhlHGE/sj0=
Subject key identifier:   6A:E3:32:D1:94:EA:ED:88:13:6E:0D:F9:49:3D:C8:6D:06:4B:DD:CA
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer:       /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial:       018F882419E787989C4A23C7070598828C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number:          0661
Signing time:             Fri 17 May 2024 20:00:18 +0000
Manifest this update:     Fri 17 May 2024 20:00:18 +0000
Manifest next update:     Sat 18 May 2024 20:00:18 +0000
Files and hashes:         1: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: giRA8GUEL/im2/MAJaXuXXcv+AHgQJpz39gu8PjueEM=)
                          2: tsNNB61zqUktwdARi2XYKgyBxo4.roa (hash: z1M5kcxRpvvhazA7wdbubfsAhKiGHS2UqoAAkSgXuns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:19:e7:87:98:9c:4a:23:c7:07:05:98:82:8c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
        Validity
            Not Before: May 17 20:00:18 2024 GMT
            Not After : May 18 20:00:18 2024 GMT
        Subject: CN=6ae332d194eaed88136e0df9493dc86d064bddca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:d0:ac:0c:c2:50:b5:1b:88:cb:db:1e:65:
                    59:6f:6d:67:ae:6a:ec:b5:62:54:78:18:4e:3d:57:
                    bf:e8:91:a1:b3:cb:61:e1:f2:43:18:05:00:1e:f7:
                    39:db:c0:7e:3b:3d:b6:4f:4e:c3:50:7e:36:a3:e1:
                    b9:62:85:1a:08:d1:a7:7d:c2:c1:c0:f9:cf:a7:5a:
                    09:f9:49:db:de:66:fb:d9:1c:be:e2:6f:77:42:0a:
                    e8:21:e2:12:f3:39:f8:99:50:4e:e5:5d:aa:4b:6d:
                    ef:56:c7:5c:32:f6:99:00:0f:10:4e:c2:88:46:b1:
                    63:9a:88:39:dc:da:f5:26:94:51:73:1b:af:b3:02:
                    a2:fd:5c:3d:dd:98:95:3d:92:2f:bd:c8:fd:0d:ad:
                    18:ba:a9:c7:a4:28:74:50:c7:d8:d6:01:17:2c:c8:
                    04:6c:3e:3f:44:e5:17:24:ab:9d:b9:52:04:06:85:
                    b8:e2:b1:e9:09:5a:78:b3:b2:3a:ca:c9:17:f9:c3:
                    8b:f1:05:76:79:b9:1a:e9:13:24:11:16:9f:b5:5d:
                    6f:89:e4:79:eb:6b:33:f3:ad:86:c0:ba:71:21:78:
                    4f:01:66:da:4b:bc:98:28:48:03:bf:7e:b4:c1:15:
                    52:81:95:83:c4:3c:d3:94:f0:fa:e5:f4:6b:0e:82:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:32:D1:94:EA:ED:88:13:6E:0D:F9:49:3D:C8:6D:06:4B:DD:CA
            X509v3 Authority Key Identifier:
                keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:bb:c8:76:12:20:44:d4:e7:3a:d8:88:8d:44:8c:a2:41:
         8b:33:42:81:4f:b1:b5:67:bb:32:71:d7:e7:3f:5f:81:21:44:
         a0:fd:fc:0d:0a:1f:8b:50:53:cf:41:36:75:5b:ab:f1:5b:0e:
         9b:3e:c8:a9:c0:2a:e6:42:9d:a3:6a:e0:a6:ae:59:99:b0:3c:
         61:4b:61:6d:c8:1b:b5:e1:52:07:db:63:9c:a4:9d:b7:65:7f:
         a0:8b:3d:f4:3a:e0:73:6d:ce:b3:92:d4:b3:9c:0c:b0:2f:38:
         96:3d:1f:7e:a4:dd:ce:49:60:e0:0e:00:f0:dd:13:73:67:20:
         fb:29:cd:ec:f8:03:f1:22:3b:bd:5a:53:41:41:8c:96:ec:b3:
         81:f5:fd:30:3a:48:8c:4e:f8:3e:84:a7:01:42:56:47:20:7e:
         fc:4b:a0:1a:a2:72:16:20:29:56:16:95:90:2b:9e:cf:ba:1a:
         d4:dc:5a:2a:f1:ec:03:18:78:56:4f:78:14:8a:6c:18:cf:31:
         94:14:13:8e:58:93:07:de:ad:c8:0d:f4:31:7e:cf:72:e5:82:
         c8:e5:9b:20:ca:71:06:7e:ea:47:3c:2c:c7:b3:8f:64:55:d2:
         4e:4d:48:7a:9c:97:a8:87:1c:d2:16:23:7b:6d:1e:ea:f0:18:
         98:ad:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:39 2024 by rpki-client on console-fra.rpki-client.org