Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          2VewJIjJBFp0ud9AkBVUylEeH6KY4etX3cAbPy/X8ZE=
Subject key identifier:   4B:EF:1D:64:BB:93:2C:65:0B:3E:F0:E7:D8:80:57:ED:A0:E5:2B:0B
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       018F8823F42C06A748A272FDB36EE23F606E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          0D9F
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: zy7UCtPGb+p7gR5yIHATyw22Iv499dh1TyJnIsXvIA4=)
                          2: tNG_tLbeH6tikNMTv0SFiAzhsLA.roa (hash: 3vteUGLKbAHHwrEEdZAh8YzV6ue06zu0sLsxs5EBymQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f4:2c:06:a7:48:a2:72:fd:b3:6e:e2:3f:60:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=4bef1d64bb932c650b3ef0e7d88057eda0e52b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:cf:af:cb:d8:55:b2:fc:6c:60:01:5e:1f:
                    33:de:0d:a3:fb:ed:f5:fd:62:e8:78:03:4f:c7:99:
                    05:9b:b2:d1:cb:8d:09:de:37:be:18:69:44:cb:77:
                    3b:b4:04:0c:d0:62:2e:99:b7:42:dc:1b:e9:1e:b5:
                    50:d7:5a:1d:f8:27:bc:d2:22:7b:2a:36:e2:e3:ec:
                    ab:0b:0e:d5:e1:ca:0f:06:62:09:ee:aa:32:34:8a:
                    69:30:c3:5c:aa:7f:08:b8:b6:dd:de:2f:fb:7d:70:
                    c8:25:4b:5c:20:2d:0d:8a:ec:09:ed:ce:56:44:8f:
                    b3:02:70:51:95:19:63:00:94:1b:fb:70:bd:1e:1a:
                    84:5d:60:02:16:f7:d2:f7:b9:21:77:1f:ab:04:be:
                    5c:ae:98:d8:98:70:89:70:4f:4f:4e:72:45:96:04:
                    cc:dc:0a:13:2a:3b:d7:37:1b:ee:39:59:32:2c:20:
                    8b:35:e7:55:39:dc:af:a8:cf:8d:0e:e1:51:1c:43:
                    f9:a7:d5:f1:cb:9e:00:b3:21:d3:bc:af:14:8f:e4:
                    a5:52:bd:16:99:1f:5c:b4:e9:90:61:92:66:5b:ca:
                    b4:cb:e5:7f:1b:d4:a6:46:2c:97:3d:fd:db:9d:2a:
                    20:17:95:5f:a5:e0:ba:ab:ac:26:9c:9e:77:c2:a7:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:1D:64:BB:93:2C:65:0B:3E:F0:E7:D8:80:57:ED:A0:E5:2B:0B
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:a4:3d:fa:d4:ae:65:50:1b:11:cc:6e:9d:1e:3d:16:ce:
         c3:7a:d9:33:f3:13:d5:2a:bd:fe:e2:8f:ad:b8:48:af:62:86:
         a0:d3:c4:9a:c0:84:93:c4:07:68:ec:e5:e0:7e:bf:4a:77:1c:
         b4:c1:51:e4:bf:7f:25:23:41:1f:af:6d:c5:3e:20:68:67:14:
         5a:81:0f:65:fc:c9:da:b3:36:1e:6d:66:11:0e:bd:b3:ac:6b:
         79:e9:ea:81:40:db:f0:20:54:72:f5:cc:5e:81:99:e1:0e:79:
         11:a0:79:54:e5:b2:ff:42:36:ba:f8:af:48:21:c1:df:ed:65:
         c2:22:fb:55:0c:30:3d:9a:a1:a9:24:3c:64:4b:63:78:a1:95:
         15:56:14:18:2a:3e:80:2b:b7:ee:cb:41:94:51:fb:e4:5b:6f:
         11:e5:2f:15:eb:2d:1d:4f:f1:17:1d:fd:ba:15:4e:f4:9e:2d:
         21:9c:f9:4e:08:64:f5:5a:9c:ed:4c:35:05:a8:c6:63:d3:36:
         ee:32:95:36:bc:dc:95:bd:77:2a:0f:f2:ba:56:e6:24:8f:60:
         f5:22:86:25:15:b2:f8:76:64:12:a3:ee:92:f0:f4:9a:5d:5a:
         92:c3:83:53:db:09:04:20:bd:70:d8:e2:6c:2a:b0:57:08:e1:
         c1:89:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:17 2024 by rpki-client on console-ams.rpki-client.org