Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File:                     d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier:          GEqnuPUttEFd7LTM6K+y8s5UfQBbzUigqakR2jo77sY=
Subject key identifier:   4A:29:0C:4C:88:8E:C4:AD:D7:90:22:9E:60:88:D7:82:CA:A5:36:1B
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       018F874A6012F86734535B7E169F2F3EECE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number:          06EE
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: WNTF--ntYZk5T7z204PKRBzT1z8.roa (hash: 957yHdibkKXT/xHo9dn+lmoBuSSstIwOTIbyPi8X9Fs=)
                          2: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: Sg9AEljm8AP1+lC2yWkNAZtwLAib097PBW8ryPXciiM=)
                          3: sVOAnij5FxoE_QE40guDN5y7gCE.roa (hash: qSm/sWJPZhex17utMHK+EgbsoNrwSauw9oDtEMxWk6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:60:12:f8:67:34:53:5b:7e:16:9f:2f:3e:ec:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=4a290c4c888ec4add790229e6088d782caa5361b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:29:83:22:69:46:95:aa:b4:08:97:27:55:
                    92:b6:00:27:58:95:4a:65:3d:7f:77:b0:3f:85:cc:
                    29:af:ba:dd:09:57:cc:8b:ec:ea:98:78:f0:02:04:
                    69:21:c7:fe:c7:91:18:b2:4b:d5:ac:aa:df:0d:30:
                    b8:1b:a0:12:6d:a3:1c:56:de:2d:0b:15:2b:16:05:
                    74:f8:60:3f:ba:63:3c:86:63:55:28:77:c4:ed:99:
                    3d:ae:c8:0a:d9:e8:7f:d0:77:23:5c:45:48:dd:57:
                    91:88:f9:1b:6a:ee:37:98:4a:05:4e:35:61:94:94:
                    12:fb:f5:a8:14:b2:a4:07:5b:91:e4:af:e0:b7:3c:
                    30:84:63:b7:41:e8:92:40:1f:80:69:07:4a:33:8a:
                    a7:88:03:60:5d:c8:d3:d9:19:bc:40:b4:16:35:46:
                    bb:de:c2:f0:23:6f:ba:b0:37:1f:8f:ad:f1:77:4d:
                    6a:65:85:60:b1:d6:8f:3c:fb:27:48:9c:51:f8:c5:
                    28:23:19:e4:42:89:01:f5:ce:f8:4a:9e:5b:95:0e:
                    7e:f5:2a:93:4a:ae:4f:78:0c:d4:0f:62:a4:7a:a2:
                    36:d9:b9:a2:9d:c2:15:b9:1b:8b:58:4b:f8:ef:54:
                    28:eb:1e:c1:77:3d:6f:09:a4:69:7a:e6:35:6e:be:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:29:0C:4C:88:8E:C4:AD:D7:90:22:9E:60:88:D7:82:CA:A5:36:1B
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:d6:07:aa:7a:e0:10:2a:81:8b:ef:2f:9d:c5:d6:6c:f8:
         a4:48:db:e8:c3:d2:90:9f:ff:1b:79:3b:75:a4:6b:9b:af:68:
         2d:41:77:56:f3:5a:06:96:ce:47:ba:84:8f:17:d8:bb:1d:3f:
         90:87:25:7b:e7:f3:9e:06:7d:0f:75:f7:ea:bb:10:7f:a6:60:
         7d:22:05:e9:98:db:28:c8:2f:73:c9:a6:d9:79:d3:9b:c9:c6:
         f5:54:bb:45:b4:3f:7f:7b:95:a8:e3:cb:6c:f7:65:50:37:ab:
         e8:ce:ef:8d:52:a2:a4:ae:2a:d0:4e:4d:46:03:84:4e:8c:9b:
         0c:b3:d0:54:f0:c5:55:aa:4d:1f:d7:64:91:27:b6:5f:99:10:
         fd:a6:5a:3a:99:80:12:ce:9b:97:c4:98:a5:07:1c:07:f7:32:
         4e:5e:c0:37:0d:e6:bc:70:f5:d6:be:be:79:c3:da:5b:78:7d:
         e4:3e:49:a9:d5:f4:36:de:c5:40:2e:4b:4e:56:54:60:00:c3:
         ec:4d:06:9d:56:4d:a2:b2:68:fa:1b:9d:b3:71:8c:fb:4a:dd:
         f1:5f:ed:79:fa:c0:5b:03:47:4c:2d:36:86:b0:e7:07:2a:d6:
         43:3f:6d:62:63:ce:87:02:08:46:7e:a9:82:80:ad:cc:48:74:
         52:32:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:35 2024 by rpki-client on console-ams.rpki-client.org