Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
File:                     nlY8Qm0ark7R5_WVNnSQIgiehHk.mft (raw, json)
Hash identifier:          XVpNc4FAVDjIULCf2pPA6wWcRRAG60gBNCo/OfRRVRg=
Subject key identifier:   6B:B1:25:9A:FA:EF:E4:8E:EC:73:04:68:D3:6B:8F:76:BC:D3:0D:33
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Certificate issuer:       /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial:       018F87ED45D2A91ED931C2EBB07F82A84BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
Manifest number:          0639
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: nlY8Qm0ark7R5_WVNnSQIgiehHk.crl (hash: AN/nDho/ST5Aw3z1WGNnnpz6+GyP0WI1AtU6+hYT5rw=)
                          2: tu6io-Lg6bwbnlNrcmKPbLtUDZs.roa (hash: NRqgUUKuEdEaSc5B0qwzIg7tiAsDI4L2fvnEeSXnwi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:d2:a9:1e:d9:31:c2:eb:b0:7f:82:a8:4b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=6bb1259afaefe48eec730468d36b8f76bcd30d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:d5:f3:ed:dd:8e:84:cb:0c:02:68:44:e8:
                    db:f1:11:dc:d6:18:a4:98:39:03:24:3a:23:b2:b1:
                    fb:44:4d:46:33:f9:20:bc:0d:14:0b:02:ad:b9:40:
                    ac:2c:b2:ae:88:56:c2:2a:02:61:9f:ac:2a:3d:10:
                    64:b5:36:1d:9f:71:3a:48:12:c7:6e:81:08:b9:7c:
                    f6:5e:44:86:84:64:20:b7:9c:8a:a8:98:5f:96:04:
                    05:b6:a1:f7:e0:0f:06:96:b0:6a:f0:8a:07:bc:9e:
                    d9:93:9f:ee:62:c5:08:f7:ae:02:7a:13:42:8c:29:
                    b3:e0:46:99:ea:df:80:ea:23:68:9b:59:55:0b:a8:
                    29:ba:99:cb:65:87:5a:d9:b7:8e:dd:83:61:9c:c4:
                    af:fc:34:68:51:9e:f5:e4:e7:dd:fe:61:9d:3a:7c:
                    75:62:79:78:9d:05:5f:83:8f:68:02:c3:6f:e6:e1:
                    f9:42:68:d6:a8:2e:1c:0d:f3:89:6e:a7:64:30:3b:
                    df:7c:ab:d4:19:d0:3f:ea:64:71:88:b1:71:ac:9a:
                    bf:15:17:74:e1:03:80:29:4e:96:9f:e8:fe:88:a2:
                    25:6d:e2:44:54:3a:ea:04:e7:71:4d:6c:46:84:b9:
                    15:65:0e:2b:f2:8f:42:29:2c:e0:86:4f:43:ff:f9:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:25:9A:FA:EF:E4:8E:EC:73:04:68:D3:6B:8F:76:BC:D3:0D:33
            X509v3 Authority Key Identifier:
                keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:c2:8a:14:6d:28:0d:89:20:fb:95:56:8e:84:53:dd:1c:
         e0:9b:f2:8a:35:9f:63:0d:db:f9:99:c0:49:b0:ee:75:a8:31:
         38:bc:fa:8d:a6:aa:60:d5:07:85:35:9b:98:b4:59:6b:48:13:
         8f:34:56:fe:23:55:86:ab:d2:f8:13:77:d2:83:96:10:53:c0:
         e6:d5:4b:61:64:bd:e4:0d:fd:c4:61:31:f5:2c:c8:c5:50:6c:
         0c:45:f7:e5:b0:7c:91:8f:76:a9:a5:2a:05:db:4f:be:a3:f9:
         6a:12:95:1f:95:d8:e4:e4:fa:b0:fb:fa:3f:3a:b1:e3:a5:00:
         79:c6:54:8a:6c:f1:c6:5d:ed:cd:35:70:3c:84:ab:d3:5d:68:
         9e:1d:68:3e:0b:eb:7d:e8:e5:52:ab:78:d6:96:21:9f:98:a3:
         d7:87:ef:66:2a:91:e0:61:66:41:84:eb:8e:33:3f:54:25:6c:
         04:88:17:57:99:cb:0d:cf:9f:b3:49:6b:4b:c7:e7:09:22:e0:
         36:67:76:3b:8d:e2:04:ae:24:6c:33:3a:44:de:2d:86:84:ac:
         be:67:5a:41:c6:8f:77:02:94:51:0f:33:e1:81:c9:d7:bd:4c:
         5e:c6:f8:b4:e7:1d:53:a2:b2:c5:83:4e:80:c4:cf:d2:22:7c:
         3a:e6:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:42 2024 by rpki-client on console-fra.rpki-client.org