Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
File:                     2jqEPf4emgiI_5tbQWQnRQvWjcE.mft (raw, json)
Hash identifier:          UYjLgeCuNljx6e5LwR9IgZaTh2hj7Vq4NsSHJz1gZQE=
Subject key identifier:   9A:32:0E:35:50:30:E5:C7:52:8D:6A:25:85:95:22:BC:28:2C:06:6C
Authority key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Certificate issuer:       /CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Certificate serial:       018FD752BFED56A587F327A529F9BD0FA002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
Manifest number:          0558
Signing time:             Sun 02 Jun 2024 05:01:15 +0000
Manifest this update:     Sun 02 Jun 2024 05:01:15 +0000
Manifest next update:     Mon 03 Jun 2024 05:01:15 +0000
Files and hashes:         1: 2jqEPf4emgiI_5tbQWQnRQvWjcE.crl (hash: S9K2c8zqsfZgQ0j8LjrLvRS98MchI1aB/f5RtmMeQHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:52:bf:ed:56:a5:87:f3:27:a5:29:f9:bd:0f:a0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
        Validity
            Not Before: Jun  2 05:01:15 2024 GMT
            Not After : Jun  3 05:01:15 2024 GMT
        Subject: CN=9a320e355030e5c7528d6a25859522bc282c066c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:3b:3a:76:99:f2:8b:d3:4a:35:51:fd:04:
                    9b:11:f0:e9:af:b0:4e:84:a5:50:55:29:ca:72:ec:
                    a6:f6:be:87:a8:64:70:ce:8d:71:52:c4:5f:50:32:
                    ff:94:67:da:8b:c5:ab:ac:12:b8:4a:52:5b:53:79:
                    d1:93:59:c0:b5:ff:2d:ef:74:b6:da:e1:d5:ee:38:
                    2a:eb:ad:51:1e:49:ab:c5:2d:d4:d2:12:60:71:28:
                    ad:b8:1d:62:e7:69:3d:df:f5:7f:5c:ec:4d:a3:f6:
                    5c:29:9d:63:a9:92:13:9c:37:fb:0c:19:f8:31:9c:
                    d4:c2:f7:40:3f:ed:29:c6:9e:8f:e6:a8:28:fa:e5:
                    de:cf:ae:87:ef:b5:43:84:58:f8:79:ff:ba:b1:ae:
                    49:a4:1d:30:a3:6f:5c:74:bf:82:fd:0c:28:e6:ab:
                    42:4c:bf:16:1b:39:ce:ff:da:24:b2:e4:b4:9a:cb:
                    05:2f:df:04:58:03:78:4a:0a:d2:07:ee:e1:bd:5c:
                    21:ab:a0:00:75:f6:d8:34:b7:75:90:9f:9b:db:35:
                    7c:35:ca:43:48:67:60:5b:41:1d:6a:0e:ee:a3:94:
                    ab:c2:ad:77:5f:2e:bc:76:96:5f:1f:5b:7e:8b:69:
                    5b:83:e3:7b:ea:fb:eb:b0:d7:b5:41:8e:21:39:6d:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:32:0E:35:50:30:E5:C7:52:8D:6A:25:85:95:22:BC:28:2C:06:6C
            X509v3 Authority Key Identifier:
                keyid:DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:a5:5a:0e:45:64:60:7c:84:d0:7c:1b:55:e3:53:55:95:
         53:fa:82:1e:8b:90:0d:dc:13:92:95:0b:8e:48:e8:2b:74:b3:
         9d:2f:9e:1c:fd:16:27:f5:c1:5c:95:8a:99:e7:2d:a1:42:80:
         37:c4:21:2c:68:32:56:05:70:76:3f:51:18:07:e1:c1:ee:d8:
         49:ef:96:d7:28:a0:e9:d0:13:9f:36:f7:d1:ea:89:05:6d:cc:
         9a:c5:f8:83:af:3a:f9:37:57:05:f5:7e:ad:bb:82:12:50:2e:
         b3:2b:e6:50:14:7f:69:1c:54:1f:76:d2:0c:0f:36:9b:dd:bb:
         ab:34:23:bd:4c:ef:34:af:7d:99:8e:3c:cc:21:f5:fe:52:e9:
         47:d0:77:e2:e2:56:60:f8:49:8c:08:85:0f:77:e8:43:63:cc:
         4c:e7:30:ca:ff:ef:55:6f:d7:2b:c3:71:50:e5:86:c8:d8:da:
         73:7c:7b:58:d7:d8:fd:93:83:20:f9:67:01:d0:e6:e6:81:45:
         ae:3d:fa:95:36:db:ec:69:75:c7:bf:2a:c6:75:6b:c2:32:02:
         e9:b4:31:2e:45:62:4f:8e:9d:aa:f3:7d:8b:df:d4:57:c9:00:
         0a:80:7e:68:0a:12:21:90:f2:e1:38:c8:62:df:72:4e:60:6b:
         2f:ee:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:49 2024 by rpki-client on console-fra.rpki-client.org