Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          PsQATT52EPGRh/5sIsoB/biXWCSPn8iLsG6Uz9UFsIY=
Subject key identifier:   64:0F:C8:5B:BD:6D:FC:2B:07:7A:1D:51:C7:73:AD:84:87:90:E0:13
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01920B3B35B4E464FE815FD117A28ED37CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          0D64
Signing time:             Thu 19 Sep 2024 17:01:22 +0000
Manifest this update:     Thu 19 Sep 2024 17:01:22 +0000
Manifest next update:     Fri 20 Sep 2024 17:01:22 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: NFSqtfFJfSyckX9WsLDd8I25uwi8lgJoeRJkyuDA+Y0=)
                          2: Md6jVbwT8xxD7xwCJxK9l1XQWZM.roa (hash: KmtVhLOy5SDhMEe6uHIozX8HUQqAZadj8WTHWB5/sGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0b:3b:35:b4:e4:64:fe:81:5f:d1:17:a2:8e:d3:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Sep 19 17:01:22 2024 GMT
            Not After : Sep 20 17:01:22 2024 GMT
        Subject: CN=640fc85bbd6dfc2b077a1d51c773ad848790e013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:61:c3:4e:53:30:9b:69:2b:ed:1c:46:6d:
                    20:2b:1a:18:22:9d:51:fe:d7:38:b0:39:a7:f0:c4:
                    3d:db:d1:39:3d:4a:53:3a:8d:3d:cc:9d:b7:7c:86:
                    c8:83:96:c7:9b:70:a5:4c:dd:5b:4e:7a:57:06:1e:
                    d5:21:df:db:19:71:47:0c:e0:7f:38:73:81:e8:b3:
                    f2:69:7e:48:9c:a3:dc:cc:85:c3:9d:17:ba:02:22:
                    51:5d:ce:dd:d6:6c:a1:a9:9c:78:26:0e:e9:1a:d5:
                    f6:22:a3:f2:a8:cc:27:0d:32:23:80:05:b5:a1:70:
                    71:5b:2b:47:66:33:79:ac:9b:84:2d:87:cb:02:fd:
                    a9:7d:11:8e:64:b6:71:53:e8:32:03:42:8c:d0:c6:
                    a2:b9:d0:65:6a:ca:2d:1d:9f:30:98:86:56:26:67:
                    e0:4e:5e:c2:76:a6:a2:9f:95:8a:d3:ab:37:33:06:
                    05:69:c5:ad:7a:51:7c:3c:21:dd:18:64:ff:a7:c1:
                    ea:87:d0:a9:0e:1a:e7:26:28:cf:9e:87:09:c5:f3:
                    99:ce:b1:54:e0:1a:69:28:02:c6:a8:9b:6f:e0:e4:
                    70:8e:83:d9:a4:b4:7d:5a:59:aa:cd:84:99:70:98:
                    1f:ab:50:50:e3:88:cf:1c:8b:5c:5c:0a:22:09:2c:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:C8:5B:BD:6D:FC:2B:07:7A:1D:51:C7:73:AD:84:87:90:E0:13
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:f2:37:9c:ac:ea:40:8a:9b:bd:c6:4b:d2:3c:8f:d5:b7:
         38:a3:66:ab:f0:02:bc:71:71:0f:03:b8:ef:c2:93:dc:7a:ad:
         be:c6:d5:97:13:de:80:51:ab:2b:2b:bf:75:45:63:49:0a:de:
         87:17:1a:d7:90:bb:11:67:86:1d:8d:6d:ba:2e:cb:55:32:01:
         70:af:d0:27:05:23:b7:42:ca:11:46:0b:ca:f3:a8:b9:b0:bc:
         a2:12:5e:e6:7d:7e:b9:e1:ef:b9:05:0a:33:4b:6e:3b:62:db:
         e8:86:b0:6f:aa:20:b7:73:c3:70:be:f1:07:43:08:76:90:ea:
         07:8b:c8:ba:da:25:6a:13:db:66:6d:53:5b:2b:d4:e2:4b:14:
         fc:22:99:08:9f:c3:42:ff:23:f2:f9:3c:70:d3:38:2e:8c:49:
         7a:80:d7:bf:01:02:1b:b4:61:f5:7d:44:45:71:07:ba:73:ae:
         f8:c1:1a:a1:2b:f6:1a:96:bc:8c:e4:40:43:ff:28:2a:27:28:
         35:4b:3c:41:54:d1:c2:d5:68:d4:53:8b:be:70:81:e6:71:91:
         cf:ff:c9:84:46:b7:48:1e:1d:d8:56:9c:bc:26:4f:06:fe:0b:
         6a:cd:b6:ae:ed:38:bb:5a:b1:fd:bf:88:3e:23:32:24:0f:8c:
         50:0d:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:49:42 2024 by rpki-client on console-fra.rpki-client.org