Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File:                     25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier:          PMNb2HIAPY9Uma/NMHYdfUOQrQK8MlBMjg9z5gbRGhM=
Subject key identifier:   FE:7C:1E:8B:55:48:14:4B:8D:4E:11:20:33:A1:89:C4:51:41:06:93
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer:       /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial:       018F42689CFA5AA374BF0CEB541608E6364B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number:          0562
Signing time:             Sat 04 May 2024 07:01:43 +0000
Manifest this update:     Sat 04 May 2024 07:01:43 +0000
Manifest next update:     Sun 05 May 2024 07:01:43 +0000
Files and hashes:         1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: dKVVY2KtdDaUMMk99C3F3NP2eBBZr3/MTEpVrnNbFbc=)
                          2: y9oShw6wUl9OSkcDhfF7AuTaQ7M.roa (hash: BRLq52Mx/OV+P3rmExqW7vx373kav2Hz/4yvXNRCVkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:9c:fa:5a:a3:74:bf:0c:eb:54:16:08:e6:36:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
        Validity
            Not Before: May  4 07:01:43 2024 GMT
            Not After : May  5 07:01:43 2024 GMT
        Subject: CN=fe7c1e8b5548144b8d4e112033a189c451410693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:58:fa:49:7a:73:84:f9:93:d4:66:b8:cf:
                    b5:1b:6d:01:ed:7e:93:07:c6:a1:ca:27:b1:70:24:
                    10:74:0b:71:ca:48:00:2f:82:b8:e9:5a:48:05:bf:
                    46:59:c8:f1:fc:3f:36:49:3f:cd:3a:0e:80:54:08:
                    e9:53:05:cb:6b:ed:74:ee:bc:e4:89:53:ac:95:0a:
                    d6:0a:94:aa:03:90:3d:3f:41:8e:4d:8f:97:d5:76:
                    1d:a6:f5:68:00:54:a9:30:03:6a:b7:f2:89:ec:a4:
                    e1:b5:f3:57:92:f0:96:fe:75:8a:77:8e:1d:3f:e1:
                    55:f7:39:1b:c1:9e:b6:c1:a4:fb:16:19:b5:73:34:
                    30:dd:4f:44:30:2e:c6:85:46:2b:cb:8d:09:4c:d8:
                    9f:7c:b3:96:c6:2e:26:4b:bf:0d:6a:11:a8:d9:96:
                    77:7b:cb:20:1f:b9:20:a9:e5:86:98:c3:25:24:91:
                    1c:d7:6f:bf:27:4f:a5:03:be:73:7d:c3:8e:dd:d2:
                    7d:31:02:a0:19:1b:df:e2:a0:4c:77:c3:9b:fd:d2:
                    66:d9:12:74:a5:23:5d:f3:2d:20:32:d0:0c:1a:90:
                    2e:b8:1e:95:44:6e:35:ee:82:1c:4f:81:84:bf:73:
                    94:48:5e:e3:3d:b5:68:a0:b5:58:1a:1f:5d:b7:04:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:1E:8B:55:48:14:4B:8D:4E:11:20:33:A1:89:C4:51:41:06:93
            X509v3 Authority Key Identifier:
                keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:86:8a:f3:93:69:1e:21:e0:e7:34:c0:17:7d:5a:52:fa:70:
         a2:fb:49:38:74:0b:a8:2b:8b:8d:6e:80:8c:ae:e5:2d:a8:2e:
         c6:b0:c8:46:c3:52:95:3a:44:c4:eb:97:80:d2:f0:86:5d:74:
         e4:79:00:9c:a1:1e:21:60:c7:96:df:0a:92:b5:c6:7d:15:31:
         a1:e1:92:91:54:42:03:91:80:14:96:ac:87:5d:88:66:a4:f9:
         20:37:62:71:17:2c:b9:5b:f0:70:bf:70:7e:24:41:08:fe:3e:
         a1:9e:de:ef:ea:22:44:b5:2c:ec:69:65:d2:1b:69:75:59:bf:
         b3:ad:98:e5:ee:ad:3d:94:5d:3e:ed:33:eb:63:f2:f6:3c:ee:
         a4:94:f6:fe:a6:7d:c1:84:6c:6b:fe:7c:6f:c8:c0:03:82:8c:
         a8:11:9b:23:f1:3d:f9:a1:f3:4c:74:92:fa:2b:f6:ee:10:0b:
         2e:6d:a9:49:1a:9e:5f:ef:79:85:53:5f:db:c0:38:ff:c2:88:
         32:90:7c:cb:5f:77:d1:bc:07:c1:92:ad:0f:ca:a4:af:21:f4:
         32:4f:ee:d9:5e:6a:dc:fa:bb:f9:3a:0b:5d:f4:22:15:ed:c0:
         43:ee:2a:ef:60:22:57:a9:ec:c9:4d:50:ad:71:68:e5:4f:96:
         6a:09:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:06:06 2024 by rpki-client on console-ams.rpki-client.org