Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File:                     cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier:          Frw7yyHHO2hRAlQzL41TD0n26M4euo5OdxEIrew3DFQ=
Subject key identifier:   6A:E9:F8:C6:C1:C0:8C:E5:74:14:A1:DE:8E:37:D3:AB:FF:A6:AF:42
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer:       /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial:       018F885B4B234F4B7AFD5FAFF3F313CABE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number:          05BA
Signing time:             Fri 17 May 2024 21:00:35 +0000
Manifest this update:     Fri 17 May 2024 21:00:35 +0000
Manifest next update:     Sat 18 May 2024 21:00:35 +0000
Files and hashes:         1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: I9Oa3Idwwl7586cXUlFqUzU4XTAOpsW/PUOQxz4P8PE=)
                          2: yxPYpnugJUz8XR9OcycTaUGiiaw.roa (hash: ccZreOan+pb6Y8gBYnxcCrcII+hI1DUPhF+drqnVwLk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:4b:23:4f:4b:7a:fd:5f:af:f3:f3:13:ca:be:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
        Validity
            Not Before: May 17 21:00:35 2024 GMT
            Not After : May 18 21:00:35 2024 GMT
        Subject: CN=6ae9f8c6c1c08ce57414a1de8e37d3abffa6af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:09:b5:da:14:4e:4b:c4:3b:9c:84:d7:e9:
                    04:1d:cd:ca:c3:b5:58:6d:d1:90:eb:21:91:6d:9f:
                    df:d6:e5:be:4f:38:85:a1:bd:bf:6b:8d:a0:99:46:
                    11:28:bd:a6:99:24:a6:ad:8b:f9:26:13:03:73:a2:
                    bf:d9:7b:14:4f:d3:59:73:3c:3a:99:6b:54:2f:88:
                    a9:6a:4f:f4:ff:5f:76:81:9d:c9:c5:6e:54:c8:43:
                    84:be:ce:7e:d8:fe:40:10:06:34:23:70:29:c9:8d:
                    18:24:5d:20:27:2b:71:34:44:d9:97:ed:bb:95:02:
                    82:ba:9c:1c:b0:05:6e:64:ef:08:79:4f:bb:93:d4:
                    9f:d6:59:f9:b4:7c:e4:df:a4:5a:47:10:8b:55:31:
                    a0:87:71:ae:7e:e6:9d:62:a2:1f:51:aa:1b:6d:8e:
                    25:30:08:69:75:e5:fc:49:83:50:00:bf:c0:50:11:
                    86:0e:0a:63:1d:20:d5:58:1e:6a:fb:28:5a:d4:10:
                    7a:e3:b5:69:f3:fd:3c:cf:2d:49:51:99:79:51:be:
                    4c:42:95:20:54:f0:49:7f:87:85:53:03:68:8e:9b:
                    1a:d5:07:f8:21:a2:5b:55:ac:e6:93:c9:94:bb:b3:
                    32:90:b0:cf:cb:db:05:6f:3b:18:b2:b4:0d:a9:f9:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:F8:C6:C1:C0:8C:E5:74:14:A1:DE:8E:37:D3:AB:FF:A6:AF:42
            X509v3 Authority Key Identifier:
                keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:05:90:17:e9:62:cb:06:d7:47:af:c4:6b:ca:25:7b:0b:
         52:a5:e2:73:ac:b3:94:c9:e4:a5:13:0e:31:31:a5:b9:d4:be:
         a2:f2:04:6a:0f:82:43:bf:16:44:fc:c3:c4:a4:8a:ab:29:84:
         20:33:f9:03:8a:08:04:b6:fb:99:8c:c7:7a:5c:87:f9:c8:72:
         c4:ea:a6:14:44:84:c2:97:3c:92:f1:66:dc:62:95:1e:3e:c6:
         e9:0d:8b:20:b0:ee:f5:ea:a5:ad:c1:be:42:2a:16:6c:78:1c:
         6a:15:c9:5c:97:20:d8:fa:a8:09:a7:15:4a:eb:09:c7:47:db:
         48:6b:de:fb:9c:4f:87:ef:37:b0:1f:d3:d3:ef:4d:fb:46:19:
         28:78:0b:39:50:d1:e6:2b:a1:65:62:a6:cd:bb:dd:1e:23:31:
         7a:2f:ee:26:ea:70:02:a0:22:74:9f:e5:f8:99:73:b3:e7:08:
         8e:85:c8:3b:9d:de:6d:f2:8e:a4:3a:00:e7:70:88:e4:a1:24:
         9e:24:95:8c:8f:d0:40:92:36:6e:0e:32:4b:4c:64:9a:93:00:
         07:f3:56:dd:57:42:69:af:56:09:a5:f3:ce:9d:ec:bf:65:2d:
         6a:b8:90:fc:a7:13:ad:4c:07:b9:86:a8:92:68:7f:4d:d9:a1:
         2c:b7:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:23:28 2024 by rpki-client on console-ams.rpki-client.org