Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File:                     AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier:          zHXRMZP0LQI903aCpvMtc8St0XT3VL+gFjWxim2eWbo=
Subject key identifier:   6A:5F:E6:35:0B:40:8B:BC:F8:B5:FB:4C:AD:87:AB:96:3D:82:0E:75
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer:       /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial:       018F369B5C49AFBA3F7EB521A54F9462D530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number:          0E69
Signing time:             Thu 02 May 2024 00:01:42 +0000
Manifest this update:     Thu 02 May 2024 00:01:42 +0000
Manifest next update:     Fri 03 May 2024 00:01:42 +0000
Files and hashes:         1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: LEFJ0fO5PCIZOSM3SEG2ZsCpDLjwdmgm1Jy9/JV9654=)
                          2: JaqgkTEbVQqq9eSSzzSg8W-rC4Q.roa (hash: /Yc7gy4ujAHA1pcBVyzHrflwQs37oTWhEK5fqgJFkKI=)
                          3: fTt43zC5Wd2S6iQDNwuoykSZk7s.roa (hash: 1iiHUe4uiH//hCI8wrOkmqd/IzWYbYgNrS7SWrdTo0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:5c:49:af:ba:3f:7e:b5:21:a5:4f:94:62:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
        Validity
            Not Before: May  2 00:01:42 2024 GMT
            Not After : May  3 00:01:42 2024 GMT
        Subject: CN=6a5fe6350b408bbcf8b5fb4cad87ab963d820e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:b0:fc:03:df:82:38:99:df:03:9a:c3:fa:
                    6d:5d:6a:e7:1f:2e:b5:6e:fd:00:a5:39:96:c8:66:
                    83:53:08:0f:da:ad:e6:65:02:6e:a1:fb:df:c5:6c:
                    dd:3e:7d:49:c2:e0:f0:9f:db:7e:c6:5a:01:ca:ee:
                    be:04:16:0b:26:79:94:9d:43:92:2b:6c:90:38:b8:
                    85:20:40:3c:f3:34:e6:fb:9f:29:45:64:fa:d6:28:
                    ff:6e:64:f6:2c:f6:5b:4b:2e:0a:d1:7f:22:af:28:
                    12:10:33:01:4f:bd:2c:a5:e0:fa:ac:c4:6a:06:a5:
                    a6:95:9c:b4:65:88:9d:72:80:a8:c8:5a:40:9b:33:
                    83:a3:31:7b:b0:9e:8b:8b:d2:4f:c7:de:7e:f3:c0:
                    b0:d4:d5:52:ab:c6:40:9e:d3:c0:e7:89:99:b1:c7:
                    a2:89:fd:45:9a:4c:f3:c3:82:9c:36:c5:ee:5d:bb:
                    59:81:ac:11:be:e2:c9:db:f2:90:f1:9f:45:6e:e4:
                    f7:a9:2c:9b:4e:55:48:77:92:67:65:9f:0f:51:57:
                    d1:14:4d:f9:ea:e0:4c:bc:71:f8:de:d6:a7:83:9d:
                    54:05:f6:f7:0b:f2:af:7b:c6:1c:6f:9c:ae:c9:43:
                    34:c9:36:6a:e9:b0:f3:ab:42:d3:1c:ce:83:51:85:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5F:E6:35:0B:40:8B:BC:F8:B5:FB:4C:AD:87:AB:96:3D:82:0E:75
            X509v3 Authority Key Identifier:
                keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:a3:c5:e7:b3:07:bd:e5:b8:85:0e:1d:4d:68:35:ae:79:
         3d:62:e1:e2:42:d1:d5:df:0f:ad:5e:5e:69:e8:05:cb:cb:16:
         a8:01:3f:09:a8:52:ed:6c:9d:c4:4e:7b:39:5d:57:17:6c:8b:
         05:58:4a:5e:f8:62:08:5f:f4:e5:bb:0c:db:f6:19:30:2f:bf:
         1a:cd:8c:d2:e0:14:1f:85:5f:61:ce:c3:a5:05:11:6e:50:c0:
         aa:ed:36:95:d6:fd:7b:5f:d0:cf:a4:17:32:54:d1:cb:c6:6e:
         f5:99:6a:b2:23:c0:99:94:e3:86:39:0d:b3:db:ff:04:96:05:
         d2:1a:d4:3f:d3:f7:05:be:79:ba:79:a8:83:9e:cb:39:81:7b:
         cc:78:3c:74:bc:ef:94:ab:af:bc:33:9d:89:5d:10:05:b3:60:
         28:43:1d:be:47:48:29:0e:72:50:33:a2:73:c0:4b:47:a9:5a:
         ab:68:7b:77:a4:2f:4a:60:27:12:95:90:7a:a5:71:e3:99:8a:
         a3:14:50:a0:b7:5e:cf:b3:20:6f:e3:fa:01:19:ca:d3:e4:c9:
         72:49:b8:53:e3:b8:d3:d9:4e:06:91:05:f9:b2:83:84:a2:8a:
         42:8f:7f:c6:61:33:01:75:71:b5:8c:56:84:55:2a:4f:53:e3:
         b3:5f:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:10:47 2024 by rpki-client on console-ams.rpki-client.org