Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
File:                     mTueqf22EbkchXRBCsklxYafWmA.mft (raw, json)
Hash identifier:          AWC/Zt5GEYjr0cpBkHIcK82/8rY8BaKxlI0OeBbdIgw=
Subject key identifier:   CF:0A:D8:F8:B4:0B:5B:A3:5F:F3:24:C7:40:75:A3:B9:06:7F:83:40
Authority key identifier: 99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
Certificate issuer:       /CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Certificate serial:       018EFD1869041472A74EE980483E9C0214E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
Manifest number:          0D02
Signing time:             Sat 20 Apr 2024 20:00:19 +0000
Manifest this update:     Sat 20 Apr 2024 20:00:19 +0000
Manifest next update:     Sun 21 Apr 2024 20:00:19 +0000
Files and hashes:         1: WOAqX6RHnb8d7-zv5b4La1rrMn8.roa (hash: ALjPM9P8L2XAWYXfvG32lKJaYFzKaGPvXMmI/wv1rWA=)
                          2: mTueqf22EbkchXRBCsklxYafWmA.crl (hash: sAx9zONGr0k5YZCigqrwYa2ZrGw9UVJ2N5bcXAMYco0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fd:18:69:04:14:72:a7:4e:e9:80:48:3e:9c:02:14:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
        Validity
            Not Before: Apr 20 20:00:19 2024 GMT
            Not After : Apr 21 20:00:19 2024 GMT
        Subject: CN=cf0ad8f8b40b5ba35ff324c74075a3b9067f8340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:62:f2:fd:02:6a:da:b7:f1:1f:67:fa:9b:
                    00:fa:07:ef:cf:09:fb:0f:95:7d:02:4d:8b:5b:fd:
                    14:95:f5:9c:56:e6:fc:a5:fb:bc:b3:41:e3:45:ac:
                    d8:e7:50:a4:c6:4f:d4:d3:81:4c:2c:cf:10:64:2a:
                    99:e0:ad:8b:e6:4a:6a:98:43:41:c2:41:9c:6c:56:
                    25:e0:82:38:c0:23:c8:2a:2c:e6:0a:e7:c6:ef:c8:
                    61:eb:bd:44:36:bd:37:f6:17:a6:29:5f:f8:ae:cb:
                    3d:ff:96:0b:13:9c:6e:af:a5:59:fb:0d:a4:d9:ff:
                    68:ac:a2:d6:d1:ed:af:2e:80:93:e2:0b:66:c0:47:
                    91:48:6b:a9:72:56:05:14:ff:29:0a:00:2a:26:67:
                    19:9d:67:4d:a8:7a:e5:50:1e:e9:bd:ea:e2:03:db:
                    e3:87:d8:d5:a8:66:bc:37:7d:cc:e9:e5:99:b0:a3:
                    a4:79:86:e4:21:75:cc:65:4e:5a:a2:44:9b:39:8a:
                    96:fe:a2:35:0f:e8:20:22:4a:60:e9:ac:78:eb:cb:
                    52:8a:1a:23:a6:b8:ab:82:26:5d:49:fd:ae:a8:0e:
                    fe:9f:10:03:43:1a:9b:c8:b1:2c:05:ac:35:53:40:
                    48:27:7a:78:df:45:ea:12:7a:24:b1:97:77:8b:d4:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0A:D8:F8:B4:0B:5B:A3:5F:F3:24:C7:40:75:A3:B9:06:7F:83:40
            X509v3 Authority Key Identifier:
                keyid:99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:c4:04:ed:01:17:41:63:cb:f5:cf:19:2a:47:37:e7:3b:
         67:76:00:3c:48:18:ae:b1:2d:a7:cf:a1:8b:52:97:bc:a9:2c:
         db:0f:60:3c:7e:3e:f7:da:0e:04:5d:30:d8:bb:68:5f:d6:fc:
         be:b2:05:40:51:6c:f7:bb:46:06:be:d4:7a:a7:cb:03:5c:8d:
         50:75:b0:1e:ab:80:76:57:18:d0:05:34:12:f6:39:82:8e:76:
         ad:7e:0b:38:6e:a8:f5:7e:1f:d2:a4:6e:be:85:0c:ff:5d:8a:
         a5:b0:25:22:95:2f:9d:ff:fc:72:56:e8:ab:8d:91:5b:5b:7f:
         b6:69:1b:14:dd:15:49:fa:b4:24:70:34:46:ee:4e:93:d7:c2:
         0a:4c:33:43:ab:15:ae:79:6e:93:e6:e5:33:d0:75:41:33:2c:
         12:32:e0:60:e2:9a:fe:d5:c9:f8:81:9a:57:b5:10:f2:a1:da:
         a6:0c:fe:b6:cd:11:70:03:94:bf:d8:ec:02:84:bc:41:1c:0e:
         ed:9e:89:70:c4:d7:f1:28:74:b6:9f:e9:bc:e6:a8:c0:ca:e8:
         a5:1b:07:7a:e4:7a:71:38:6b:da:4d:1a:2b:1c:3d:e2:f7:6d:
         c9:3a:13:7e:05:04:57:06:25:a9:bd:ab:9d:b8:fc:f6:e0:c2:
         e0:d7:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:32:43 2024 by rpki-client on console-ams.rpki-client.org