Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File:                     d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier:          jWfpP5zoaBkJPimymB2yAhD9yhwlp2ryQ1DrpUZCL+k=
Subject key identifier:   A8:84:03:FB:86:85:92:2A:32:2B:E0:0B:B9:B9:81:F8:DF:DF:84:EB
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer:       /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial:       018F874AA27AAD350A7F02350CC37397AA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number:          0606
Signing time:             Fri 17 May 2024 16:02:46 +0000
Manifest this update:     Fri 17 May 2024 16:02:46 +0000
Manifest next update:     Sat 18 May 2024 16:02:46 +0000
Files and hashes:         1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: b4kwTgRMnzfxR96gWagjbfW3ZtWpcObDTzaOo3ERkoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a2:7a:ad:35:0a:7f:02:35:0c:c3:73:97:aa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
        Validity
            Not Before: May 17 16:02:46 2024 GMT
            Not After : May 18 16:02:46 2024 GMT
        Subject: CN=a88403fb8685922a322be00bb9b981f8dfdf84eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:81:9f:06:ab:f0:cf:4d:b7:bc:e6:05:1d:
                    a6:6b:c1:50:73:96:59:1b:33:70:24:b1:b5:9d:5b:
                    a9:8d:4c:d5:4e:19:56:d5:49:43:8c:2d:2e:41:c2:
                    85:46:63:a5:10:86:57:0f:a4:4d:9d:5b:7d:35:41:
                    48:e3:f2:a7:f2:7b:3e:f5:e6:c8:30:79:af:98:a9:
                    f4:22:e8:24:37:a2:f0:d1:45:2c:bb:8b:c1:77:2a:
                    97:e5:5d:37:6a:82:64:c0:3d:c8:63:bf:78:13:5d:
                    20:5b:51:f6:74:57:66:08:2c:6f:e3:25:7c:e4:66:
                    aa:0b:80:11:f7:c0:27:71:ca:c9:19:bb:4b:e4:ad:
                    6e:2d:af:80:43:7e:be:c9:ce:cb:0d:35:05:dc:08:
                    29:91:47:ef:cf:c8:45:82:e3:28:19:54:60:e1:f8:
                    b8:d0:a4:76:8f:7f:b7:e8:e1:cf:f4:74:7b:c3:9d:
                    74:86:6c:0a:4e:d9:1c:c4:f1:d6:0e:86:71:3d:f7:
                    f5:ca:0f:e1:f6:e9:79:63:de:e0:09:d4:ae:60:80:
                    74:2d:c5:95:e0:98:3f:19:b7:04:d8:56:cb:65:f3:
                    6f:f7:e0:5f:b7:cc:db:be:af:99:92:6f:d5:b3:b7:
                    45:0a:0f:03:62:82:d7:43:ee:54:26:37:18:7d:bd:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:03:FB:86:85:92:2A:32:2B:E0:0B:B9:B9:81:F8:DF:DF:84:EB
            X509v3 Authority Key Identifier:
                keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:5f:ee:0e:a6:29:d4:ba:36:65:49:13:d5:fa:1c:7c:5f:
         25:7d:69:7a:cd:8e:fb:b0:b1:de:a8:90:e2:12:0e:2d:04:53:
         11:da:8c:5a:15:f9:e1:9c:34:15:db:6c:29:26:ae:91:6d:5f:
         91:8f:47:f6:1c:4d:93:93:3b:f6:dd:36:9d:9f:96:e4:76:4a:
         e2:86:df:ed:c0:51:c1:68:87:99:dc:1d:c6:70:97:56:4c:b0:
         28:d9:c1:0b:f5:ce:75:8d:b2:71:37:2b:86:57:af:32:ce:5a:
         15:d0:b8:d9:7a:39:2c:6d:e0:f1:7f:32:72:51:31:ce:59:65:
         b1:fe:76:17:2a:4b:55:10:74:0d:f0:f1:16:9b:8d:cd:24:1b:
         4a:60:3c:17:1a:2c:38:b2:26:45:e7:57:ac:d7:6c:12:06:86:
         44:6f:65:6b:5c:c1:26:4d:4f:5f:b4:14:42:49:5e:83:a6:a5:
         0b:d0:99:67:1a:b9:f8:bd:dd:fb:23:cf:3b:90:58:f3:e6:b3:
         43:f7:ca:50:69:89:0c:f2:37:ed:48:84:b1:f2:7e:bc:4c:69:
         15:17:7a:92:02:1c:3c:0d:22:8d:7f:33:1e:15:c4:3b:53:1a:
         39:00:a9:a3:ab:00:b2:93:31:a7:cf:1e:02:e4:7b:82:c5:e6:
         4c:1c:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:53 2024 by rpki-client on console-fra.rpki-client.org