Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
File:                     DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft (raw, json)
Hash identifier:          ZwzRplQolr8Z3jtOi+I7/2Od8PxOQTBWYc6lye89Ius=
Subject key identifier:   5C:9B:A0:E7:6B:0A:62:43:79:D3:AC:33:DF:FE:ED:5B:FA:79:8B:38
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Certificate issuer:       /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial:       018FDAC19D7CC3244AE2A3153063AE03B06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
Manifest number:          1135
Signing time:             Sun 02 Jun 2024 21:01:12 +0000
Manifest this update:     Sun 02 Jun 2024 21:01:12 +0000
Manifest next update:     Mon 03 Jun 2024 21:01:12 +0000
Files and hashes:         1: DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl (hash: ZQwfn71cCLjrmONDFpuxoHOgXBYRukQX8KiQN0bzY6E=)
                          2: UoJ99cerzzkFQ75RS8f713IqW6M.roa (hash: cDOEN8C/Vf3nJ5vtsqSsHNahY1mJIFqzu16xPoydo4w=)
                          3: fxQmrrltKyGCzstevz113Ay-WcI.roa (hash: fwCJVk4pbbXL3UdUwRZUc87ReDOwX7UOoRAcBHMiFAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:da:c1:9d:7c:c3:24:4a:e2:a3:15:30:63:ae:03:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
        Validity
            Not Before: Jun  2 21:01:12 2024 GMT
            Not After : Jun  3 21:01:12 2024 GMT
        Subject: CN=5c9ba0e76b0a624379d3ac33dffeed5bfa798b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:69:36:db:8c:13:9e:28:cf:94:03:f3:f5:
                    6d:7e:79:ce:a1:93:f9:4e:ce:89:2c:0e:bb:ef:d3:
                    4a:13:e6:9c:2f:45:81:6b:62:02:89:86:ac:18:b7:
                    32:b1:9f:16:d9:0c:b9:cf:f6:67:cc:e8:4e:43:00:
                    66:26:c7:56:d2:c1:99:47:2a:32:e0:7b:4d:3c:2b:
                    45:b3:df:9b:d5:2d:54:ed:e8:7b:86:9d:d0:88:d5:
                    b4:88:88:10:3f:82:17:db:ec:66:a0:21:d9:f0:9a:
                    1e:b3:10:08:68:f9:9e:4a:ee:2d:d8:ce:de:b0:72:
                    f1:73:99:98:92:b7:b9:38:e9:9b:ee:33:c9:e1:16:
                    c8:67:97:d5:79:39:38:3c:11:85:e1:d9:05:85:b5:
                    d4:45:23:75:27:81:c2:e3:f1:9c:0c:21:3c:f9:5e:
                    8d:4e:00:9e:53:32:40:0c:73:fd:5b:b6:29:e4:e2:
                    90:7b:f0:e3:7d:df:4f:bc:60:08:d6:1b:eb:48:78:
                    09:bc:8c:45:70:04:40:07:78:83:0a:ee:aa:37:9e:
                    bf:24:54:08:b2:7a:67:0e:65:f4:35:2f:9c:64:ee:
                    81:83:f8:6f:ec:ec:8a:2d:e3:1a:a8:e4:3a:c9:7f:
                    6a:80:91:ed:17:83:78:c6:f0:61:f7:c2:50:c1:94:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9B:A0:E7:6B:0A:62:43:79:D3:AC:33:DF:FE:ED:5B:FA:79:8B:38
            X509v3 Authority Key Identifier:
                keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:2d:c0:1b:de:e5:70:e4:b9:8c:7e:0c:2f:04:09:00:7c:
         77:35:a5:3a:2c:5d:19:17:bc:cf:23:43:ec:88:bf:1f:96:be:
         f9:ee:4f:d4:bb:0c:63:88:fd:7b:f1:76:0c:59:db:4d:5a:30:
         e4:01:b8:d8:c6:eb:9c:3c:62:64:03:83:92:7e:ca:e6:50:4b:
         3c:42:93:9f:ee:89:3e:36:09:10:b5:67:ca:1a:24:a9:36:86:
         93:4f:3d:8b:93:97:92:66:89:6d:eb:ab:11:e0:67:6c:c4:26:
         7e:39:db:92:76:bd:1e:eb:d8:fb:c6:bc:0a:7d:07:dc:e9:e5:
         a1:b5:a3:80:35:c9:9e:23:1f:7d:98:36:ca:9c:5d:94:d1:d1:
         3c:50:fe:80:2b:fb:be:ed:bb:31:8c:ac:2f:a3:f8:2b:50:aa:
         96:ee:e1:53:42:8a:10:5a:53:15:e6:27:3a:85:80:f4:4d:2d:
         3f:74:12:c2:13:4e:c5:1a:c9:10:5e:52:d9:53:00:b3:aa:fc:
         b9:ca:93:fe:9d:51:eb:f4:81:71:86:c9:20:27:ff:51:54:a6:
         c1:35:f0:75:ad:e7:a0:13:48:13:75:0f:52:2a:7a:1c:03:d7:
         be:6d:0b:46:eb:1c:3c:b0:0e:7c:e4:03:dd:55:9a:5a:f4:a7:
         79:0b:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:43:52 2024 by rpki-client on console-fra.rpki-client.org