Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          /3pqUNOxQCnRnodB0vGIL/2j2tPCzuzRIuZ05oNp5z4=
Subject key identifier:   55:ED:4C:AC:9C:88:DE:44:B0:B0:DC:E0:19:C4:A7:F0:47:37:32:A2
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       018F88245A3B8D097FF9E6F04C539F8F693B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          104C
Signing time:             Fri 17 May 2024 20:00:34 +0000
Manifest this update:     Fri 17 May 2024 20:00:34 +0000
Manifest next update:     Sat 18 May 2024 20:00:34 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: eRVVszwQlG6a5MGSIdqtjOIlZrZ/0AAwx8dZsG36J3c=)
                          2: onrMYieAvELRf3u8sehAjIpLipU.roa (hash: Mu9bUuY0LL0flKV6WrA3TujcdIDP499b2TIi+QDw0Rw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:5a:3b:8d:09:7f:f9:e6:f0:4c:53:9f:8f:69:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: May 17 20:00:34 2024 GMT
            Not After : May 18 20:00:34 2024 GMT
        Subject: CN=55ed4cac9c88de44b0b0dce019c4a7f0473732a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:ae:94:57:25:81:93:ab:65:a5:ba:c3:13:
                    10:fc:f0:ef:ac:cb:47:13:34:69:ee:55:af:7a:42:
                    6b:6e:3c:7e:c9:be:00:09:98:d8:07:bd:ff:78:53:
                    6a:57:ea:27:63:a2:5d:26:f9:d3:ea:a6:52:c5:5e:
                    3c:74:0d:8c:6a:14:a9:fe:3c:b2:75:56:2b:78:9b:
                    a4:af:94:64:4d:51:f8:e7:38:cc:4d:16:99:79:e6:
                    4c:fc:93:12:13:c4:26:10:ee:12:76:94:dc:c2:f0:
                    e5:02:e9:d5:01:44:e0:61:69:3a:85:33:4c:3e:7b:
                    6f:93:53:9a:ec:3a:b2:76:7f:f8:89:13:dc:35:64:
                    95:dc:93:3a:a1:c4:e3:a0:f3:ea:4a:d2:2f:db:74:
                    79:fe:68:1a:28:23:c7:94:a4:2c:dd:32:bf:e4:a2:
                    46:f8:25:54:e0:ac:8b:8c:1d:9e:4b:a3:6c:c1:c1:
                    8e:df:c2:a4:aa:77:42:5a:ce:6f:15:39:73:f8:d3:
                    a3:39:9d:46:4a:36:45:29:62:00:7a:ce:23:46:ee:
                    2a:f5:c5:5f:fe:4a:33:4c:7d:62:56:e2:d5:c8:68:
                    bb:a2:5e:e1:d5:d4:8a:57:07:36:7a:3f:12:88:a4:
                    0a:7d:f1:da:27:82:d9:24:c4:95:95:08:2b:27:cf:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:4C:AC:9C:88:DE:44:B0:B0:DC:E0:19:C4:A7:F0:47:37:32:A2
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:d7:f4:e6:03:7a:f6:0a:c1:ce:a5:ad:94:e1:9e:11:c8:
         b1:95:6e:32:34:84:ea:23:91:61:46:a3:aa:e2:46:47:83:8b:
         43:06:3c:96:a0:5d:3a:07:d5:9c:bb:a0:00:46:9d:31:7f:58:
         7b:51:c4:ad:b1:cc:fa:e9:16:e6:74:de:be:90:a3:56:ce:5f:
         13:db:01:81:69:6b:61:b4:1d:34:d2:97:dd:9b:f0:8f:15:34:
         07:19:22:a5:46:2d:f6:47:3f:d3:fc:69:2e:b6:32:4f:2d:8a:
         a5:c4:89:82:fd:e2:86:14:c9:8f:2c:11:cc:e7:ce:31:f6:e5:
         56:48:cb:40:cf:35:c1:f9:e4:7b:1f:fc:44:01:49:11:df:09:
         20:9f:78:9c:f9:1d:4b:04:bb:22:85:66:37:4a:21:f9:30:77:
         47:e5:c7:d2:10:64:40:61:17:64:67:58:5d:d7:39:9b:a4:0b:
         8a:29:13:64:d1:45:c0:8a:40:c8:13:35:81:f6:90:0a:12:51:
         65:37:80:90:d9:42:e1:0a:ad:54:1b:92:46:c7:6a:e0:a9:ea:
         ca:10:12:0b:4a:59:97:5d:2e:92:9c:e9:b6:a6:2b:b9:2b:ff:
         82:ea:52:52:2c:25:be:bb:a0:3d:2e:ec:b3:3c:97:3d:37:e7:
         6a:f1:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:33 2024 by rpki-client on console-fra.rpki-client.org