Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          YZC1qkOwCy96hx11iF2/nCDkjqcBR3fyInUPvT3kdWU=
Subject key identifier:   45:9E:E7:4D:45:53:C8:D7:DD:35:8B:35:1F:4D:7E:59:25:E9:C1:67
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       018F411E8C8BEE201DF116F08F66AC7B69EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          08A4
Signing time:             Sat 04 May 2024 01:01:12 +0000
Manifest this update:     Sat 04 May 2024 01:01:12 +0000
Manifest next update:     Sun 05 May 2024 01:01:12 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: gZqxDl3Tu6PBPWkVAmiLlqf3nC/AJTK1hIQYJ4mUnqU=)
                          2: hCBS3bB4vypgsBY62BpwZI7l0VI.roa (hash: MtTn6TAwi6MVU6oCBbL4Kh340YFkVlR2we19cypKQ4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:8c:8b:ee:20:1d:f1:16:f0:8f:66:ac:7b:69:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: May  4 01:01:12 2024 GMT
            Not After : May  5 01:01:12 2024 GMT
        Subject: CN=459ee74d4553c8d7dd358b351f4d7e5925e9c167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:a1:48:ba:54:5c:e8:8e:fd:60:2f:95:9d:
                    05:fa:bb:c1:0f:83:37:f1:ed:bb:04:be:4a:e6:31:
                    29:af:0b:dc:c1:1f:06:36:10:f5:34:00:48:27:3b:
                    b4:15:65:eb:19:af:0a:3d:27:a2:20:8b:0f:31:05:
                    6e:60:ee:48:66:0b:ca:1f:01:01:b2:f9:bf:c0:3a:
                    34:3c:67:f4:0b:95:fe:11:78:71:54:bf:37:b5:d3:
                    a4:dd:ba:37:ce:ae:b4:32:3b:02:fc:6b:c0:16:b2:
                    8d:66:98:ae:bd:ef:70:33:05:d1:74:e2:53:fe:1c:
                    d1:ae:b3:32:ab:b1:98:a1:b5:5d:de:35:04:33:e7:
                    7e:f8:ee:f9:ff:a5:1f:c4:bd:27:cd:7c:4f:ba:49:
                    62:28:16:5c:49:8d:06:3f:f2:ae:b1:db:1d:64:5e:
                    10:d2:d7:dd:12:2f:9b:f5:20:51:33:60:e8:b2:57:
                    bb:0d:bc:23:15:2a:bf:0c:e9:90:c6:7e:f8:87:05:
                    50:87:f8:0c:e9:42:b8:34:9c:23:4a:68:a9:40:b1:
                    0d:2c:f7:1f:1b:dd:05:49:83:ca:3c:7e:ad:ad:c7:
                    d8:5b:bf:9c:88:41:db:a0:83:17:81:a3:41:30:85:
                    fb:9e:06:ea:17:f7:1c:13:24:be:3b:b5:d8:e4:3e:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:E7:4D:45:53:C8:D7:DD:35:8B:35:1F:4D:7E:59:25:E9:C1:67
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:46:ac:2c:31:e2:74:a8:9e:6b:4c:97:81:1a:80:ef:8f:24:
         c8:3c:56:00:67:cf:72:7b:c1:6a:6a:45:cb:39:df:c8:f4:80:
         c2:15:1f:88:f1:8d:b2:ac:65:a6:b0:d9:1f:cb:d3:20:1d:af:
         a3:eb:cc:28:a1:d3:30:e9:3c:be:b3:67:d7:d2:6e:cd:ed:bd:
         41:52:df:30:ca:18:e0:b7:01:12:4f:98:7c:28:1e:c5:92:81:
         5b:aa:e9:bb:90:6e:31:4b:0e:15:65:a6:b7:c8:f7:dc:9a:68:
         1f:66:f3:4c:e5:1a:09:8f:7a:65:f0:7b:8e:dc:54:b2:71:91:
         01:0c:eb:be:c3:d8:4b:6c:fd:0a:ca:07:8c:80:5e:60:35:e8:
         9a:1e:3c:04:5b:45:f7:63:35:dc:b3:70:fa:b2:aa:2d:5b:f6:
         3e:7f:a2:11:91:c1:33:61:5a:ca:28:cd:ef:bf:f4:d9:ee:95:
         25:cf:63:39:5d:89:0d:67:b7:8e:40:84:c8:ce:94:d3:07:b9:
         e6:b0:05:55:c3:67:d2:8d:de:20:f8:93:87:af:49:13:6d:f1:
         e2:c0:26:59:b4:97:44:73:f0:b4:dc:a4:a3:c0:6f:d6:4d:fe:
         5e:ce:4f:1f:58:a9:22:54:1b:0e:f1:be:b0:ae:6e:15:7b:0e:
         f9:d6:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:13:08 2024 by rpki-client on console-ams.rpki-client.org