Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File:                     1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier:          d0+KGrk1Ds6fT8JdvNubDp00kx0WjCdt4cSi9t896lI=
Subject key identifier:   DB:35:62:2B:B4:F7:AB:31:1A:44:93:DB:CF:B1:59:06:DD:A1:13:20
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer:       /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial:       018F885B2CC0BC77BC3916C5C17F0B77CEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number:          01DC
Signing time:             Fri 17 May 2024 21:00:27 +0000
Manifest this update:     Fri 17 May 2024 21:00:27 +0000
Manifest next update:     Sat 18 May 2024 21:00:27 +0000
Files and hashes:         1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: V5CGQPmkto6NvCTG+GkaJcFK23GUZmMPajnxYTQf0pA=)
                          2: H0GqALsRCb_JSJXkIrRb8EKfILM.roa (hash: yJUtc0FIYOv3UVepgfc1HOT7AYBk8o4yAtGBS6PPzs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2c:c0:bc:77:bc:39:16:c5:c1:7f:0b:77:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
        Validity
            Not Before: May 17 21:00:27 2024 GMT
            Not After : May 18 21:00:27 2024 GMT
        Subject: CN=db35622bb4f7ab311a4493dbcfb15906dda11320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:0b:53:81:1f:f8:1d:62:04:a3:98:aa:30:
                    a1:3e:1e:a0:62:bd:46:ef:7a:1a:a8:0b:6d:e4:85:
                    52:e3:ae:e5:46:e2:9f:6d:33:82:59:af:ac:77:c0:
                    31:c9:de:bc:16:d0:10:b5:bc:7a:f7:3f:45:5d:07:
                    79:f0:28:71:9e:4d:4d:17:ca:46:df:00:4d:52:e7:
                    42:47:5e:31:4d:d8:94:ef:b0:b6:57:c0:5b:e9:fa:
                    52:d9:97:ac:83:14:58:2e:12:bb:d4:da:f6:a9:f6:
                    3b:30:95:8f:b0:a5:91:41:5b:55:f6:21:75:e8:ab:
                    a5:aa:48:ba:c8:1f:1c:f6:3f:8d:4a:1a:4f:99:d8:
                    e3:b6:41:28:1b:d4:40:06:68:41:77:72:8c:07:56:
                    2a:04:f6:8e:ad:ef:6f:83:93:2b:07:66:4a:c1:58:
                    a5:5d:42:2b:4f:2a:72:4d:f1:eb:f6:0a:40:bc:cf:
                    55:ac:f6:9b:04:75:95:0a:c1:ca:13:02:24:c0:ee:
                    82:e9:e0:16:89:3c:61:1e:2b:6d:4c:6c:ee:bb:dd:
                    e7:81:a4:6a:5e:c7:bf:0b:e0:5d:64:10:f3:b9:3d:
                    1a:e2:54:96:8e:42:d4:d3:5d:f8:40:f5:34:bf:91:
                    06:2b:f2:32:d3:ab:d7:1f:56:be:76:44:37:ef:90:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:35:62:2B:B4:F7:AB:31:1A:44:93:DB:CF:B1:59:06:DD:A1:13:20
            X509v3 Authority Key Identifier:
                keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:10:95:dd:e8:d1:b4:a1:a0:fc:5d:0c:8a:74:a7:df:a3:ff:
         5f:f1:b2:6b:c1:f1:4c:5f:4b:ae:5d:b0:cf:7a:2e:ae:62:6c:
         06:31:fc:82:ef:21:0c:f9:73:3c:12:dd:9c:bb:1c:47:37:d2:
         63:72:24:3c:32:92:d7:dd:9a:e5:72:f5:5d:c7:bb:59:66:26:
         10:47:48:ee:3e:2d:a7:55:a2:db:96:c4:40:bd:ea:c6:99:24:
         1b:4a:3a:3c:6f:f9:85:02:7c:1c:2a:a8:85:c0:8d:05:3c:53:
         ac:98:1b:b1:fe:f7:b4:ce:de:2b:ab:cc:c2:aa:37:8b:e3:49:
         24:4e:d8:c6:04:09:c4:e9:e7:34:b6:5e:c4:aa:a0:57:b9:74:
         3a:e7:40:da:02:41:2f:e4:c3:95:79:6f:b8:05:2a:6b:fb:6e:
         c8:9b:90:a9:60:e9:2f:c6:c1:38:25:22:6e:df:35:4b:22:45:
         7e:a5:cb:c6:d7:02:fc:83:44:d6:0c:32:c7:95:3b:e9:4d:c6:
         ba:47:31:93:c2:59:32:75:70:20:f6:e3:a8:a6:98:92:7b:1f:
         52:37:32:f7:a2:c5:2b:4f:81:95:c6:ae:19:a2:31:81:1a:75:
         51:e5:84:c6:38:3b:6b:19:c8:06:db:1e:62:cd:12:44:56:c8:
         a6:35:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:36 2024 by rpki-client on console-fra.rpki-client.org