Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          Reer7zQay8mwMNvu2mBzahzPND3i7eboWtt4GjCFQvs=
Subject key identifier:   06:54:60:D7:A1:FE:35:4E:8D:7D:A7:09:A9:B8:CC:0E:30:AD:24:96
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       018F51DB58C28CBC7E2EC1CD2A7D3A1B9A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          0B9A
Signing time:             Tue 07 May 2024 07:01:20 +0000
Manifest this update:     Tue 07 May 2024 07:01:20 +0000
Manifest next update:     Wed 08 May 2024 07:01:20 +0000
Files and hashes:         1: By_i-lxDyACJEp0Nm-7qHvNFiZs.roa (hash: +MgLhaLzGygee1YQJPyAViAyazBkbkST/n244tkIxBk=)
                          2: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: YbvaYZuCJP67oAYQPAolmn8SGIVsPMv949jtaIz0N5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:58:c2:8c:bc:7e:2e:c1:cd:2a:7d:3a:1b:9a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: May  7 07:01:20 2024 GMT
            Not After : May  8 07:01:20 2024 GMT
        Subject: CN=065460d7a1fe354e8d7da709a9b8cc0e30ad2496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:fc:5a:54:ac:59:45:a9:ac:9d:e8:b9:f0:
                    ca:05:8b:04:46:31:75:a9:0b:00:04:bb:96:ed:5e:
                    3c:fd:28:9e:99:2b:7f:19:51:3b:f7:02:98:eb:82:
                    dc:04:17:7d:e6:77:85:76:38:f0:2a:ec:1a:75:aa:
                    d0:c3:83:6b:dc:84:59:7c:19:9f:7a:59:62:20:4b:
                    c6:72:41:a4:92:88:83:32:f3:57:4d:e3:80:da:75:
                    a2:6b:80:fa:86:c9:0a:50:a3:aa:29:61:65:2a:7f:
                    3b:cc:3e:b5:cf:7a:23:1a:e5:d7:8a:51:f1:e1:46:
                    5f:61:36:e3:37:0d:4c:3b:42:fb:c6:ba:93:07:58:
                    89:48:c6:b3:88:d1:72:a7:33:18:72:71:aa:58:97:
                    5a:fc:38:ff:8f:9f:e6:d2:00:a1:a5:88:c4:35:3b:
                    50:9a:3f:d9:a8:c2:f3:4a:aa:0a:c9:6b:48:a6:81:
                    95:c0:bd:b4:72:55:89:34:85:61:b3:51:18:27:df:
                    a4:6d:c9:40:dc:77:62:58:1f:9f:ba:40:b7:eb:f5:
                    41:f4:2c:9d:b3:16:bf:ed:f9:33:24:29:37:54:2c:
                    3d:49:bd:a4:6b:d8:a3:6e:3b:b2:8e:85:25:2a:ca:
                    30:33:94:b8:63:da:4a:7a:98:69:e7:57:6f:44:a3:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:54:60:D7:A1:FE:35:4E:8D:7D:A7:09:A9:B8:CC:0E:30:AD:24:96
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:d5:a1:cc:fd:ae:6a:8c:b5:50:1b:e4:7d:14:36:cd:f9:
         ce:37:2d:f5:ef:2b:5c:cb:d5:66:db:27:24:fa:c9:f1:4a:22:
         b2:34:f9:77:03:a5:0d:b4:df:df:01:11:68:ef:bd:71:66:39:
         41:c5:9f:6d:1e:33:74:52:93:5a:4d:0d:b7:8e:7e:dd:c9:4a:
         f6:fc:a8:5b:60:a5:4f:5e:26:84:91:36:a1:ce:1e:70:2a:f9:
         bd:13:b3:5a:66:d6:e9:75:ff:b7:ec:3b:50:1b:a8:60:0d:49:
         e1:9a:8e:13:da:7e:43:17:ec:e1:12:6e:c9:d1:b1:58:3e:3c:
         0a:e9:d0:c7:08:24:1b:2b:f0:db:76:fc:11:e5:35:e3:ac:20:
         e5:39:e5:58:92:ab:77:ef:91:2d:6b:82:06:be:70:c8:c9:8b:
         78:96:7e:da:e1:44:8a:8c:3f:2e:fc:ef:14:90:e6:b5:0c:d0:
         84:4e:da:5b:21:ab:66:21:60:bc:b4:77:bf:92:fc:a9:7a:43:
         8e:c2:5b:0f:42:7f:8d:66:15:f0:4d:ad:3a:ed:32:6c:a6:b3:
         3f:41:1c:b3:ef:2c:a0:24:91:c2:f1:af:f7:4e:4d:60:e2:8e:
         15:28:5f:82:51:c4:ca:32:fa:27:89:d7:14:ef:51:c2:63:e3:
         59:72:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:45:00 2024 by rpki-client on console-ams.rpki-client.org