Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
File:                     M12DGvzJ10zPPuQKDraPmQhbmN0.mft (raw, json)
Hash identifier:          uMoM/li/nV9lYUJt3gMYe0wgQLa71RVfG0pXYpbVSkw=
Subject key identifier:   7E:3A:60:81:96:D8:CD:26:03:33:4B:98:E5:11:94:3D:DA:CF:69:4A
Authority key identifier: 33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
Certificate issuer:       /CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Certificate serial:       018F8892781B65B23EAF53856E529CF57D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
Manifest number:          062E
Signing time:             Fri 17 May 2024 22:00:51 +0000
Manifest this update:     Fri 17 May 2024 22:00:51 +0000
Manifest next update:     Sat 18 May 2024 22:00:51 +0000
Files and hashes:         1: KUaDHv08gCh9RbbENTykqGym_SM.roa (hash: mhQyKwG2XRnx63EeovwsAilPJkfrW3kfQRTh29dsWJs=)
                          2: M12DGvzJ10zPPuQKDraPmQhbmN0.crl (hash: CCGiAf9GRevkWMF0jj01iBfia9jVcfVkzVxou9SRxW4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:78:1b:65:b2:3e:af:53:85:6e:52:9c:f5:7d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
        Validity
            Not Before: May 17 22:00:51 2024 GMT
            Not After : May 18 22:00:51 2024 GMT
        Subject: CN=7e3a608196d8cd2603334b98e511943ddacf694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:8c:b0:72:d4:38:38:eb:ef:16:96:df:20:
                    22:66:4f:75:db:8a:88:09:fd:4b:97:ad:d7:70:98:
                    76:c9:f1:96:91:62:4a:c3:cd:26:12:c9:26:06:47:
                    58:8a:b5:43:e6:4a:04:d7:3b:56:f1:e6:03:45:7b:
                    14:52:f7:2a:9d:d5:79:cf:d0:c1:94:2e:1e:77:df:
                    da:d1:87:75:87:85:58:4d:74:1d:d4:34:36:d9:f6:
                    d1:fe:7d:1e:a3:4e:61:e8:08:fd:84:c1:e5:94:83:
                    3d:a5:65:16:76:ed:df:6b:cd:9a:b4:8c:72:9e:4f:
                    60:bb:55:32:67:b5:31:e1:51:b5:76:2d:d6:cc:97:
                    b8:cf:4e:25:2b:64:51:80:87:55:4c:59:81:d1:45:
                    a5:cf:f4:4d:7c:3b:45:47:f3:80:40:d8:6d:6c:c1:
                    d4:4d:4b:ab:21:68:e2:7e:fe:74:60:1f:51:83:46:
                    e0:d7:c0:92:cd:41:bd:e5:c2:e9:bd:23:fb:87:93:
                    30:18:fb:dc:28:a9:de:24:0d:29:2f:41:9d:a7:ea:
                    4b:08:d2:4d:51:12:e7:c8:dc:2e:10:65:f2:31:d2:
                    6b:c4:7f:c1:de:86:3b:db:bf:68:b8:65:5e:6d:e1:
                    9d:93:8d:f6:9e:aa:b0:08:15:5c:21:b2:56:39:c9:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:60:81:96:D8:CD:26:03:33:4B:98:E5:11:94:3D:DA:CF:69:4A
            X509v3 Authority Key Identifier:
                keyid:33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:07:5b:c1:61:d0:59:28:7e:66:af:d0:a9:63:7e:c6:7c:
         33:6b:fa:d7:41:b6:0a:12:bd:dc:af:db:85:2c:f8:6c:72:af:
         53:36:1a:37:fe:55:f7:35:12:a9:c7:c0:c6:ba:68:21:0d:15:
         13:4d:c8:9b:94:7a:ce:44:3b:ec:bb:62:04:47:7e:8b:1a:fa:
         56:00:52:81:d5:06:83:50:ee:da:aa:20:d9:3c:98:80:a6:e5:
         99:78:72:b3:1f:6f:7f:d9:5d:ac:c9:d5:73:81:91:14:a5:82:
         8e:a5:3b:ee:e9:47:f9:a6:29:de:69:1c:f4:e4:9d:ae:62:eb:
         0a:b4:26:57:49:9c:c8:69:4c:cf:45:b5:e4:b2:a4:a2:df:7a:
         be:9b:87:fc:f6:56:51:c4:e5:32:2f:7e:38:71:41:4a:0d:af:
         01:4e:1d:f4:16:92:50:1d:a8:0e:63:4c:e1:f6:3e:f2:22:70:
         dc:f8:ef:a8:6c:bb:de:00:05:fc:ec:e2:19:ed:e6:18:66:e4:
         27:7d:93:4c:c1:d8:06:d2:dc:48:cb:6e:a9:11:39:36:70:ae:
         91:cd:03:62:9b:68:e2:1d:00:1b:27:31:60:97:5a:c5:87:5f:
         f6:6e:9d:cd:4c:44:2d:75:e1:82:66:76:dc:65:12:19:77:f6:
         75:01:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:59 2024 by rpki-client on console-fra.rpki-client.org