Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
File:                     DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft (raw, json)
Hash identifier:          RxNaTTsEmULPqcgLER/9iVbVuwBXyDTBouOW77AwUQI=
Subject key identifier:   52:72:A6:6D:1E:42:3B:6B:93:F5:2B:65:6F:5F:C2:BD:9C:9D:D0:C9
Authority key identifier: 0D:48:85:A8:B5:A4:F6:B4:AC:0E:45:D1:18:38:95:1E:94:E6:EF:3E
Certificate issuer:       /CN=0d4885a8b5a4f6b4ac0e45d11838951e94e6ef3e
Certificate serial:       018F4D599AE2D68050E8476A7A1FFA0A5AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUiFqLWk9rSsDkXRGDiVHpTm7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
Manifest number:          0706
Signing time:             Mon 06 May 2024 10:01:09 +0000
Manifest this update:     Mon 06 May 2024 10:01:09 +0000
Manifest next update:     Tue 07 May 2024 10:01:09 +0000
Files and hashes:         1: DUiFqLWk9rSsDkXRGDiVHpTm7z4.crl (hash: MAhBLj+t1tE3IibhNzlZb4sRMiMeyTPhpy/TdBBY3aw=)
                          2: sqcYv9KmIv-yM4HE8gmdbq7mr10.roa (hash: hqrAmWPgsmmIr++3fmHtkKaFnKTa1i5jrkH/aJtiGvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUiFqLWk9rSsDkXRGDiVHpTm7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:9a:e2:d6:80:50:e8:47:6a:7a:1f:fa:0a:5a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4885a8b5a4f6b4ac0e45d11838951e94e6ef3e
        Validity
            Not Before: May  6 10:01:09 2024 GMT
            Not After : May  7 10:01:09 2024 GMT
        Subject: CN=5272a66d1e423b6b93f52b656f5fc2bd9c9dd0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:e5:34:fa:5b:ce:23:19:9d:84:9f:94:4c:
                    c8:72:54:b1:03:f2:82:eb:81:95:3f:72:b5:69:7d:
                    a7:a4:91:ae:e0:7a:69:01:a5:9d:9b:90:91:6e:de:
                    0b:3e:99:e6:1a:6b:f9:fa:c1:0e:b5:c8:10:d6:36:
                    12:47:bf:67:1d:06:33:34:b5:20:89:1e:1c:bf:48:
                    c0:51:4f:56:08:9d:91:af:b1:17:1f:85:b7:93:71:
                    4d:93:7c:ab:ef:58:30:1f:d3:9b:01:15:0d:2c:79:
                    5f:8b:8e:0b:d7:d2:6f:8c:41:21:e2:37:7a:f4:9b:
                    ff:80:9f:df:d7:3a:73:d0:7f:a7:73:54:9d:29:ef:
                    d0:c2:2a:5f:80:96:5b:8a:76:56:50:79:80:aa:f6:
                    79:78:af:dd:1d:e1:29:f7:d8:3d:78:cd:43:7d:3c:
                    42:7e:8e:e2:42:8d:6d:fd:54:7e:06:9d:d1:3d:d1:
                    29:aa:3c:53:8b:ec:e5:e3:81:a1:ae:51:14:e1:14:
                    5d:25:60:77:b6:7d:ee:ac:76:2e:f3:ff:3e:d6:ee:
                    cf:63:89:2c:24:cf:ce:b5:d1:1b:af:ac:ca:ac:03:
                    8e:52:9d:bb:f3:be:0e:6a:6d:d4:1c:f1:0c:0d:a4:
                    b9:ee:43:99:a7:a7:6d:33:ff:4c:a5:66:5b:8a:55:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:A6:6D:1E:42:3B:6B:93:F5:2B:65:6F:5F:C2:BD:9C:9D:D0:C9
            X509v3 Authority Key Identifier:
                keyid:0D:48:85:A8:B5:A4:F6:B4:AC:0E:45:D1:18:38:95:1E:94:E6:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUiFqLWk9rSsDkXRGDiVHpTm7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:44:ad:14:20:94:04:6a:34:9f:eb:69:37:23:1a:c5:67:85:
         15:c7:87:87:0e:3f:cb:f8:2c:9f:7a:89:18:53:5b:b9:d0:d9:
         95:49:03:1d:9f:ca:87:9a:e6:da:9b:ea:73:50:2e:94:27:9e:
         5c:90:d3:50:c6:1d:8f:af:9c:f6:9c:81:0d:97:42:97:5e:c7:
         04:2f:17:c5:88:42:e3:a2:b0:af:a1:e2:81:bb:ca:e0:2b:2c:
         b0:54:c6:85:44:cc:7a:78:f8:4f:61:1b:78:2f:b6:20:63:d0:
         94:f8:f2:e3:41:1b:8b:03:99:19:4d:5c:f8:11:03:80:f5:a7:
         1b:c1:ba:8c:4f:1d:96:79:1a:db:e6:83:a1:21:8a:c8:20:ac:
         7a:6d:b8:b4:22:c3:94:f8:38:ea:eb:81:2c:f6:48:5e:de:be:
         57:d2:6a:fe:0d:07:5e:2b:c2:ad:6d:26:b1:88:08:6f:9a:90:
         d9:c7:72:be:57:5c:6c:d9:64:ea:d7:94:c7:7b:88:9e:66:5b:
         df:f5:63:8d:45:6f:48:21:7c:5f:04:89:25:99:77:34:3a:63:
         2c:56:f6:4a:17:1e:df:94:c6:72:ee:db:20:e5:52:24:c6:29:
         14:e8:ca:d0:12:97:78:7e:85:a9:18:98:7a:8e:f7:cf:a3:4e:
         47:46:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:33:39 2024 by rpki-client on console-fra.rpki-client.org