Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          LY615CECW6yIabpRuS+YSEBw3+482azTBc6ZUfjK17Q=
Subject key identifier:   A4:AB:13:82:23:67:70:5A:6F:86:02:4F:F8:4B:7B:BA:07:CF:F9:DF
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       018F381CC3DB2B18A9BED022C62ED9BB8717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          10E0
Signing time:             Thu 02 May 2024 07:02:40 +0000
Manifest this update:     Thu 02 May 2024 07:02:40 +0000
Manifest next update:     Fri 03 May 2024 07:02:40 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: 8yBPwZrfLWaCv2xFN6/OrH2V9LbuVDoNCoPiDHHOUHY=)
                          2: ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa (hash: h5Jot6dU0NZxZ3TkiGd6dnhDx14TglzhrrApORoJXxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:c3:db:2b:18:a9:be:d0:22:c6:2e:d9:bb:87:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: May  2 07:02:40 2024 GMT
            Not After : May  3 07:02:40 2024 GMT
        Subject: CN=a4ab13822367705a6f86024ff84b7bba07cff9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:37:c3:5c:32:2d:3c:ae:bb:83:96:ec:51:
                    35:ee:6c:9d:de:a2:0b:37:a2:f8:8c:6c:5e:94:fb:
                    8b:5b:2a:ea:79:8e:de:79:76:a0:c0:22:82:8d:1e:
                    0c:04:a9:35:3d:83:50:e0:c0:98:04:80:5c:95:13:
                    02:02:13:a1:f7:26:43:85:b3:8a:63:6f:86:69:aa:
                    ae:60:52:6c:6a:7d:89:31:90:c8:df:73:28:2f:ec:
                    90:e8:36:f3:fd:e9:b5:8c:89:f2:d9:b4:55:11:17:
                    99:33:81:77:6c:fe:fa:08:92:be:52:5c:e5:2b:ab:
                    ed:0b:40:4a:2b:a0:03:2b:be:12:a7:0a:ab:f5:43:
                    5c:51:7e:85:0e:d8:95:2a:ed:8e:f5:8e:bb:73:d2:
                    f1:29:60:f6:06:43:cf:a3:a5:d7:76:f3:2a:58:04:
                    6b:1e:9f:89:fd:f1:ad:35:39:36:b0:57:cb:d1:56:
                    ea:13:9d:c9:72:57:d3:bc:0b:2b:b6:9e:39:79:ee:
                    a5:c4:2d:19:37:4f:ae:4f:b1:f4:37:62:a6:e7:23:
                    a0:63:52:a9:fe:81:98:95:c4:bf:52:af:3a:e3:01:
                    c5:fd:28:d3:4c:2f:55:f0:15:38:0b:aa:c3:d2:2c:
                    64:63:8e:22:4b:dd:00:79:df:35:aa:06:54:01:11:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AB:13:82:23:67:70:5A:6F:86:02:4F:F8:4B:7B:BA:07:CF:F9:DF
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:97:cd:de:69:ba:78:f4:6b:fa:5d:6f:a2:40:22:bd:d6:27:
         21:96:cc:f6:b5:64:7d:1b:ac:50:91:e3:0b:4c:41:40:d7:e0:
         81:43:70:ee:bb:f2:fe:24:06:9d:f7:f5:cc:1e:c0:16:45:31:
         7c:f2:c7:51:3a:3d:33:08:23:f1:8b:2b:be:57:57:5f:5a:11:
         12:98:88:c0:ca:b4:75:cf:a4:d7:88:f9:98:86:55:1b:f0:fb:
         7f:68:a4:3b:cc:d5:d1:e7:d7:e5:2c:2d:b9:60:3e:b8:5c:19:
         76:92:95:69:c0:78:43:fd:53:94:83:a7:a6:20:78:8d:99:92:
         95:11:9f:ff:88:b4:49:be:d2:8f:6d:24:dd:52:c6:25:a6:bc:
         5e:ff:dc:83:71:18:e9:86:62:08:d9:c9:7d:2a:56:f6:0f:d0:
         26:96:bb:2c:1e:68:a2:99:8b:d4:f4:b8:60:1a:8f:3d:3a:68:
         b2:f5:6b:b9:84:6e:8a:e7:1c:d7:81:a4:73:a7:4d:73:b9:cf:
         a9:74:de:3d:31:bb:40:9d:26:ef:f9:38:1a:bc:22:0f:1f:33:
         15:0e:c3:5e:66:40:32:19:71:bb:b7:3b:be:d2:06:22:ca:49:
         38:50:5b:52:ac:2e:67:49:6c:14:67:8f:33:a0:22:24:f8:85:
         45:24:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:25:28 2024 by rpki-client on console-fra.rpki-client.org