Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          sehLoidBX+Ro2k+XDVQmjlh+vFXZNxNdSsMMzJAubYU=
Subject key identifier:   3A:A3:08:ED:57:30:52:44:89:76:10:5A:9D:F5:BF:F6:F6:18:29:CB
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       018FD866D3C2B29DC74E32569FD48405DD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          086A
Signing time:             Sun 02 Jun 2024 10:02:48 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:48 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:48 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: zgox8wZkNy31OQ49+oJ4dPMibpTbRg56aFQHn6K9zyg=)
                          2: r80lYiODBjCzGD8xCTkBdGs8Axw.roa (hash: VuBLO56hEJnLD1ETFn9CwhRywOO6hCYjr8gtamR8aRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:d3:c2:b2:9d:c7:4e:32:56:9f:d4:84:05:dd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: Jun  2 10:02:48 2024 GMT
            Not After : Jun  3 10:02:48 2024 GMT
        Subject: CN=3aa308ed573052448976105a9df5bff6f61829cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:b7:13:f2:a7:d4:85:d2:a0:e9:68:ce:70:
                    c2:5f:f1:d6:53:46:6a:25:0d:1c:b8:a7:77:e5:59:
                    ac:34:69:79:09:69:dc:14:34:7a:ee:a9:47:3b:84:
                    70:73:27:21:69:e9:3d:39:e7:2b:c1:85:ef:58:b8:
                    fc:e2:8a:09:2a:60:64:3d:8d:ca:3b:1d:b7:79:19:
                    ee:d0:45:3d:fc:3b:7d:9b:c6:20:40:b1:1c:fc:c1:
                    9c:ef:00:a2:54:e4:91:42:88:2c:5e:73:32:04:ac:
                    22:11:42:91:6d:6b:8d:83:ad:ac:f5:35:60:77:c4:
                    96:eb:03:28:68:09:b7:be:f4:bc:e6:0a:02:d9:16:
                    3e:8c:33:08:0e:ea:5b:0e:d9:71:59:6d:ae:ea:83:
                    bf:41:0b:32:97:c8:47:a8:14:be:94:2f:d8:35:46:
                    35:4b:c6:ee:5c:24:38:84:00:98:38:ad:8d:4b:96:
                    8b:a0:eb:34:ec:c9:b7:76:22:df:8f:70:fc:f1:d2:
                    09:f7:f1:da:4a:da:e6:41:2f:25:3c:73:1f:78:1b:
                    9f:37:3e:34:42:54:79:13:9d:69:4b:41:1f:ae:92:
                    5f:84:1e:27:27:9b:97:02:45:0f:3a:d9:90:23:24:
                    01:f1:d5:61:d2:fe:64:4d:29:55:a7:3c:24:a1:00:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A3:08:ED:57:30:52:44:89:76:10:5A:9D:F5:BF:F6:F6:18:29:CB
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:18:2a:43:87:de:69:93:34:db:14:aa:d7:dd:e1:1f:8b:
         1d:7e:16:75:ab:d2:db:4c:fa:e0:c0:82:24:d7:64:ac:9d:8d:
         5f:db:1f:0b:e4:ad:0b:8c:33:d4:f6:61:19:10:ba:86:01:2b:
         57:50:4b:bc:b2:ea:94:e8:ef:65:19:f0:b9:ba:ae:9f:22:9e:
         0c:f7:47:2b:e8:48:db:38:c8:0e:43:f8:ed:54:b3:cf:e5:10:
         de:9d:a1:6c:9e:c1:89:43:d6:49:7a:95:cf:80:c1:4d:d0:9c:
         7b:9c:a2:5a:df:f5:42:e7:ac:d0:23:9d:cd:93:ba:ab:ca:3f:
         73:8a:3d:36:72:51:61:3b:82:8d:12:f1:b0:43:4a:be:92:26:
         ba:91:bd:af:9c:7f:27:3c:30:ad:96:f9:fd:26:92:8c:d6:9b:
         95:7b:23:a0:a3:69:d3:49:26:39:a3:c7:f1:8b:7a:e5:2c:4c:
         01:0a:93:f9:3e:9c:43:8b:ae:70:a8:4d:97:fa:a3:a0:99:83:
         e2:8c:7b:63:05:d6:c9:38:1c:40:eb:71:5b:64:af:da:7d:c2:
         08:5c:50:c8:f0:8b:76:3c:da:dd:38:a3:81:77:df:d8:09:42:
         4d:f7:1a:c4:f9:cc:94:4d:28:d8:2a:bb:ab:a5:e4:9d:35:d2:
         24:a7:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:04:59 2024 by rpki-client on console-fra.rpki-client.org