Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          yxTAQDg5XH4cLnT7IrK9h1jP2vTL3CMV2DKZzwiwcHA=
Subject key identifier:   04:B4:51:01:19:45:0A:7B:74:FA:8E:A7:7B:82:AC:42:3C:28:67:93
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       018F4456849B26F837E436D60DA9B3B8B4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          0EE2
Signing time:             Sat 04 May 2024 16:01:11 +0000
Manifest this update:     Sat 04 May 2024 16:01:11 +0000
Manifest next update:     Sun 05 May 2024 16:01:11 +0000
Files and hashes:         1: 3tE4zvO6gSzyLMFF4MXXoASLpA4.roa (hash: 3E9RDxc5PYhWnlQIdofpIArxZ74CR9sxdpQ9kRbZ6aQ=)
                          2: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: +R9JF7gDYxtbZBRq5XwlQKXzh2pSHtvw6I+93s9xsWE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:84:9b:26:f8:37:e4:36:d6:0d:a9:b3:b8:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: May  4 16:01:11 2024 GMT
            Not After : May  5 16:01:11 2024 GMT
        Subject: CN=04b4510119450a7b74fa8ea77b82ac423c286793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:20:ad:13:3c:2a:66:d3:fb:44:2f:da:ce:
                    9e:37:d1:3c:41:07:25:31:28:76:d3:e0:1e:6b:55:
                    4a:90:28:20:f6:3a:1c:27:0d:2f:92:e4:f4:03:4a:
                    e3:90:67:fa:e6:e3:55:67:57:44:f6:b8:79:90:51:
                    91:d9:64:4a:5d:ae:fa:9a:16:29:d1:ca:f1:c3:a4:
                    42:59:0a:32:b5:8a:ad:2d:04:b3:67:1b:13:61:2e:
                    e4:93:ba:74:53:53:14:0d:aa:4f:0b:a2:1a:a3:54:
                    fc:95:e6:f3:fd:33:38:06:8e:f8:b9:db:d9:14:ce:
                    21:96:89:a7:5e:1a:ea:6a:23:f7:dc:d2:0b:e7:8d:
                    4d:7b:d9:38:ee:23:a8:32:e5:53:59:69:eb:4a:2c:
                    78:19:19:79:17:e5:33:a0:f7:20:3b:ce:29:09:da:
                    ef:8b:76:f4:59:2c:6b:5c:21:8e:11:64:60:66:1e:
                    a8:43:3a:03:5b:58:fd:4e:2d:d9:bd:6c:bd:6e:65:
                    f3:d2:bd:11:b1:f6:12:2b:d2:a1:e1:78:0a:10:90:
                    08:f2:36:36:c1:70:b6:84:45:00:6f:e9:0d:ff:30:
                    ba:8e:af:20:27:ec:4e:1f:76:b5:07:47:18:d4:c0:
                    b5:ec:28:53:39:6c:2f:b7:73:ec:dd:e6:2f:9f:90:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:51:01:19:45:0A:7B:74:FA:8E:A7:7B:82:AC:42:3C:28:67:93
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:bb:dd:48:e1:b8:cb:0d:f5:b1:14:71:b3:ab:dc:1d:be:
         51:4c:6b:92:09:51:4b:c7:f7:24:a0:cb:e0:79:74:04:64:22:
         b7:64:30:87:66:30:87:85:08:6c:73:05:b4:01:47:45:c4:e5:
         10:95:39:3c:22:94:92:12:2b:a6:7b:80:1c:70:c5:c7:c1:3a:
         f0:8b:af:92:f3:3a:9e:a9:54:97:f4:ea:ca:50:4c:83:13:7b:
         b4:2a:b4:e2:88:52:31:2f:6a:48:ec:fb:ef:b6:8b:f6:40:56:
         55:3c:76:6c:83:11:23:26:5e:c4:93:78:bd:6a:0a:5b:ac:02:
         d4:82:ec:ba:a8:df:95:a5:95:cf:72:9b:76:29:0f:a7:a4:b3:
         83:07:f5:e7:1b:93:d8:f4:f0:00:14:37:4d:51:f6:c9:a2:a9:
         8a:01:68:0c:f9:1e:85:85:18:d2:53:f5:de:f6:e0:86:3c:59:
         d2:15:52:6c:b7:88:78:5b:39:6c:e2:4b:99:f3:a1:10:1f:46:
         f4:a4:39:a5:47:ec:b7:e7:e2:f9:fc:1b:20:a9:2d:53:ec:fe:
         73:65:c3:a5:b0:45:c6:2c:8d:b7:2e:26:8e:73:ff:01:9c:52:
         75:9b:33:52:27:36:1d:22:83:77:73:89:18:47:e8:da:3f:a6:
         76:ec:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:22:50 2024 by rpki-client on console-ams.rpki-client.org