Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File:                     2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier:          zm+hyfwbbUeGaDRz41757FwjrtIC7hzp84inkXBe+Ps=
Subject key identifier:   69:92:01:25:23:7C:C0:3B:8A:87:9F:06:5B:1B:50:D5:A1:C0:5E:6C
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer:       /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial:       018F7BB23B9208314B274AA43177C66C63A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number:          06D7
Signing time:             Wed 15 May 2024 10:00:29 +0000
Manifest this update:     Wed 15 May 2024 10:00:29 +0000
Manifest next update:     Thu 16 May 2024 10:00:29 +0000
Files and hashes:         1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: fW/sFybMPort5YU96zjXcu8DLt1Yd23PafXmYKeJDYw=)
                          2: 2iMBF8z8oIXg2Bn2QnwGCrGaz4U.roa (hash: l20Ln+In5VxPyqj6pclLtlb4flyk2aHDsK426HoZzek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b2:3b:92:08:31:4b:27:4a:a4:31:77:c6:6c:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
        Validity
            Not Before: May 15 10:00:29 2024 GMT
            Not After : May 16 10:00:29 2024 GMT
        Subject: CN=69920125237cc03b8a879f065b1b50d5a1c05e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:16:3d:b0:c0:1a:1d:69:b2:ba:34:d5:45:
                    4e:e3:b8:14:dd:4d:ca:af:34:9d:fb:0f:b8:ed:f3:
                    2a:64:6e:5d:a3:53:d4:c5:49:af:23:0b:69:69:49:
                    9f:02:f1:6b:43:4f:38:ca:d4:7b:e3:ab:51:95:8f:
                    9d:43:39:2d:02:e7:de:1e:6c:55:0f:84:1c:14:1a:
                    c6:db:f1:91:74:f4:db:2d:fd:1d:9a:eb:d2:e2:35:
                    ad:3b:4c:f5:46:fe:81:90:6c:d4:fa:97:c5:8b:12:
                    b2:55:49:d9:fd:d7:66:75:76:d9:38:e7:f7:0e:98:
                    f8:02:9d:f2:ed:51:e6:40:54:24:a8:c4:e4:ec:d4:
                    45:73:a1:3a:d1:e9:67:78:26:05:19:9e:3d:a9:bd:
                    b8:62:2a:10:8a:e2:3e:70:d1:c5:54:21:18:56:c1:
                    d3:6e:6a:cf:36:b6:44:c8:c2:62:47:89:bb:c6:28:
                    fd:fe:40:6c:e7:b7:51:cb:63:32:34:dc:ed:4a:5c:
                    08:ca:f1:41:02:0c:7a:0d:d4:ec:47:0b:be:0a:79:
                    6b:41:3e:d7:da:a2:4b:bd:dc:2d:5b:bc:5a:0e:f9:
                    f6:09:7f:dc:67:7d:bd:b2:ef:df:b1:ac:30:33:d4:
                    1f:97:95:cb:0c:35:48:06:c1:86:52:00:b1:f5:43:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:01:25:23:7C:C0:3B:8A:87:9F:06:5B:1B:50:D5:A1:C0:5E:6C
            X509v3 Authority Key Identifier:
                keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:9a:76:93:b5:a5:24:d6:be:ed:72:ba:90:27:67:07:d8:
         4e:b0:18:c1:cc:b4:8e:c6:60:2f:16:95:cc:e4:cb:9d:87:f6:
         9b:b2:c3:60:fe:14:10:ff:f2:64:b4:9e:24:67:1c:42:6d:5c:
         57:04:56:91:69:d1:5a:18:9d:6e:57:39:e7:b9:8b:c6:31:de:
         2e:fa:8c:ac:68:16:17:1f:bd:6f:41:45:82:c8:af:b8:10:41:
         93:23:24:8f:be:af:a1:cf:e5:17:78:ac:7b:d7:1f:d9:65:33:
         35:a2:57:c1:11:dd:42:c1:74:1a:dd:a3:01:fc:4f:8e:60:52:
         76:5a:ce:fb:0b:a9:74:5b:75:71:b0:7a:74:7b:a1:66:0e:d4:
         42:0a:04:0c:b6:5a:7d:ac:5d:2f:78:df:65:f6:ad:25:54:58:
         ac:98:f1:68:21:e9:f4:44:05:2f:a0:17:f2:91:e9:1a:07:5c:
         7b:b9:aa:28:cf:a9:65:25:00:45:41:1e:3d:e6:fe:08:82:b6:
         99:3c:87:67:a9:17:24:ee:df:68:68:69:75:85:7f:1b:fb:73:
         37:30:09:da:23:9e:c1:d0:a6:d3:24:da:30:4d:00:2b:ba:46:
         0b:46:f0:23:a8:60:1b:e1:cc:f8:ec:d3:4a:48:12:1d:b3:88:
         39:fd:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:23:57 2024 by rpki-client on console-ams.rpki-client.org