Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File:                     _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier:          Gk7sg+LC/HS1gjvFFjKBQ5VWAYt550mqiSECR706muE=
Subject key identifier:   E6:DE:AF:E2:2D:26:45:C2:1E:23:7C:F1:AC:26:E3:1E:E6:CB:C9:3A
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       018F96BCB11B66F7341EB42EDC56CE7E626F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number:          0FDA
Signing time:             Mon 20 May 2024 16:01:39 +0000
Manifest this update:     Mon 20 May 2024 16:01:39 +0000
Manifest next update:     Tue 21 May 2024 16:01:39 +0000
Files and hashes:         1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: qyCH4V+uG3dTPXAENImgxyan4ZnnYAHkyLfY/USCu9o=)
                          2: lHd7xqftLAEpkoOWzQgys_oMo1o.roa (hash: QV+zHFcW4RwbAVZAzU7oK7t9vsa1pYMso+duAWIlBCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bc:b1:1b:66:f7:34:1e:b4:2e:dc:56:ce:7e:62:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: May 20 16:01:39 2024 GMT
            Not After : May 21 16:01:39 2024 GMT
        Subject: CN=e6deafe22d2645c21e237cf1ac26e31ee6cbc93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:61:b6:88:5e:a4:b1:3a:d5:16:17:45:5d:
                    f4:a3:35:90:4e:50:2b:b2:4a:6b:ea:9e:d4:f5:63:
                    8e:26:5e:d3:87:8a:1b:90:da:94:b9:4c:46:5b:91:
                    15:41:33:cf:09:cd:be:a5:01:a7:ae:69:09:5e:19:
                    c1:38:56:c5:bd:dc:5d:bb:e5:a3:75:7e:7a:4c:9a:
                    b1:50:77:47:f8:b7:32:e9:2f:d5:3b:7f:eb:75:10:
                    f2:de:0e:63:a0:d7:cd:fc:82:0e:74:5f:04:4d:32:
                    da:80:51:a2:de:49:6a:70:19:16:bc:d7:0b:0f:cd:
                    80:06:c3:1d:2c:9d:6c:da:de:43:52:aa:d8:5c:93:
                    46:ed:0c:04:7d:83:67:96:09:6f:5d:e6:d5:42:a7:
                    04:d3:bc:0b:b2:9a:9c:2c:60:34:fd:c3:06:61:03:
                    10:b1:39:f8:73:ab:e0:02:e9:94:67:86:b9:1e:46:
                    39:cb:67:b8:18:6f:4a:71:1f:96:6c:0a:81:4c:0c:
                    23:3e:9c:e4:c9:1f:fe:12:66:6f:4e:23:e4:3c:75:
                    90:42:53:b0:8c:c3:e4:6f:41:65:60:d1:81:f6:24:
                    9f:72:50:7e:a8:d8:d8:6c:7c:de:2c:5e:48:2d:44:
                    13:7a:6c:30:38:b7:a8:6a:ae:3d:30:2e:52:68:b5:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:AF:E2:2D:26:45:C2:1E:23:7C:F1:AC:26:E3:1E:E6:CB:C9:3A
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:fe:5e:0f:cf:12:7a:5a:04:49:22:07:45:f0:eb:17:82:
         7f:19:07:2e:8f:17:7a:78:27:72:35:68:78:aa:da:f2:dc:7b:
         78:35:0b:f8:69:b3:0d:c6:a4:c0:17:8f:d6:cd:f2:12:19:86:
         f0:1a:63:c2:df:14:b2:58:32:58:3d:0e:06:a9:9c:a0:4c:ca:
         b7:ac:6c:59:5b:1c:29:a9:f4:a3:ad:a7:88:e0:05:c0:d9:ec:
         06:7a:d6:e2:8d:68:6b:6c:b2:a5:5b:eb:d4:f2:68:f3:a7:59:
         ef:83:e3:bc:44:fa:5f:40:9c:c3:49:13:88:08:fc:a6:f2:3d:
         16:4e:7e:5a:b3:8a:b3:5d:a3:ea:c7:a6:d9:92:0e:4a:ce:35:
         3f:0a:a9:14:37:fe:93:ea:f1:26:96:db:3e:12:66:26:a1:e7:
         5b:06:9d:2c:c3:dc:18:e2:4b:4e:5e:6c:66:66:ff:28:e9:c4:
         13:c2:72:96:b7:de:7e:73:c8:da:81:c0:5b:0b:c2:ef:37:1a:
         00:49:8c:35:24:2a:9e:00:39:b4:16:5f:d2:34:99:9c:d2:c1:
         a5:49:f7:b1:11:df:09:1f:a4:6a:dc:f0:49:7c:bf:fa:f3:7e:
         5e:26:08:f3:0d:d1:f9:f8:2c:05:27:15:e6:71:8c:21:8d:3a:
         3c:3b:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:55:21 2024 by rpki-client on console-ams.rpki-client.org