Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File:                     IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier:          sjgOLCaMopzvErqCJDJ3a8dSmuzxFGObnTfRZnHfpK8=
Subject key identifier:   03:07:C8:1C:BF:C5:E5:C1:BB:7B:ED:1E:DD:F2:4D:F3:9B:B8:E8:EC
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer:       /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial:       018F1DEDBCF1C125FA7C1596A58E6E6A85D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number:          09A8
Signing time:             Sat 27 Apr 2024 05:01:10 +0000
Manifest this update:     Sat 27 Apr 2024 05:01:10 +0000
Manifest next update:     Sun 28 Apr 2024 05:01:10 +0000
Files and hashes:         1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: hCXRBxiUNff1m4lsK0peaEXyLCPVCqSerVi6FtaZRGQ=)
                          2: zQbng0C92EiiK6VfScCiY0yEQT4.roa (hash: 7SJSSgSsDsQMU0aWa6FaRAMQyzaDM8VaNcSiQvsImxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1d:ed:bc:f1:c1:25:fa:7c:15:96:a5:8e:6e:6a:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
        Validity
            Not Before: Apr 27 05:01:10 2024 GMT
            Not After : Apr 28 05:01:10 2024 GMT
        Subject: CN=0307c81cbfc5e5c1bb7bed1eddf24df39bb8e8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:9b:e7:ec:02:06:7b:9d:ea:73:61:36:d3:
                    30:21:16:9f:87:5a:c1:75:c7:76:ae:ee:a8:0b:13:
                    2f:d5:f5:0e:ef:c6:e6:44:45:a2:88:47:45:5b:e6:
                    69:9a:27:70:95:70:69:f7:4a:4e:9b:f5:33:83:b3:
                    25:4d:8f:f3:93:e2:ce:9b:62:0a:3d:21:3a:a8:81:
                    43:39:52:7c:f3:32:e1:94:9b:14:70:35:73:5f:ee:
                    6e:f5:df:8f:a9:73:2d:ad:82:c7:e2:9d:85:71:6c:
                    47:42:f2:9b:97:1f:27:f9:a9:e4:0c:30:4d:e1:e7:
                    18:e6:f3:73:ef:65:ae:cb:23:d7:ec:e2:d1:92:50:
                    21:13:d8:11:09:b3:d5:1b:ae:3a:5c:c0:60:ba:3b:
                    45:35:af:84:03:0a:a4:60:00:54:07:78:89:8b:56:
                    0b:4d:70:32:d7:9d:cf:82:e4:32:e1:cf:67:dc:27:
                    07:c7:5b:3a:47:83:f5:ea:9f:04:ea:52:32:fc:7d:
                    c2:c6:d2:8e:94:b3:2c:58:9c:d0:31:c8:2c:e9:a2:
                    72:12:ed:30:a8:80:13:34:ab:0e:28:36:fc:7a:f2:
                    23:87:1b:3f:59:47:61:b8:e4:c7:69:e0:b5:46:f2:
                    ef:85:27:a0:7f:44:6e:6b:a0:06:06:79:78:fc:37:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:C8:1C:BF:C5:E5:C1:BB:7B:ED:1E:DD:F2:4D:F3:9B:B8:E8:EC
            X509v3 Authority Key Identifier:
                keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:8c:76:aa:cb:31:6c:59:2c:04:20:f3:e1:41:7b:b5:36:
         11:61:35:7d:a7:57:77:ce:e8:29:5a:3f:ac:84:14:25:d2:25:
         c0:8d:3b:1b:86:93:1e:86:39:b9:c7:c8:ba:12:35:b5:77:38:
         5f:c1:c0:67:08:63:1f:a3:1f:db:01:04:f6:69:5e:30:26:9f:
         f7:a9:5c:21:e0:0b:0f:ba:72:a4:20:34:6f:e7:c5:cf:24:60:
         41:56:a3:92:07:ba:a5:b4:c7:97:c2:30:d9:ca:a1:a2:5f:ac:
         d7:4d:1d:72:73:46:b6:ae:b8:ad:13:c9:45:ba:1e:00:50:0f:
         6b:94:9b:2c:ac:f5:c6:e8:96:66:30:f6:b9:a7:f5:c1:fb:d1:
         9f:b9:1b:d1:7f:3a:b9:12:f6:9e:43:ce:ad:72:7f:96:ed:4e:
         56:84:a7:b2:81:4b:97:09:42:42:ac:3a:2c:69:52:ee:93:11:
         6f:24:1c:35:65:2e:d8:38:0e:c7:2c:a9:94:d6:71:68:e9:2e:
         f7:0a:5a:ae:a0:f6:06:ae:b7:d0:60:70:4d:0c:5b:d9:b0:0f:
         37:77:8c:aa:33:16:a1:8d:34:d5:a9:f2:e6:3e:12:93:5e:3d:
         f5:65:03:43:45:bf:59:c5:e3:56:ac:6b:80:a8:4e:e4:23:7f:
         37:a1:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:06:58 2024 by rpki-client on console-ams.rpki-client.org