Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File:                     sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier:          fBoZdw7S3QksE8hAUryTp3Z8DjJIYq7KH1W655td0eI=
Subject key identifier:   D6:E1:E6:81:8F:A4:F4:FA:A6:4A:94:76:7D:A3:3A:D5:99:CD:C1:24
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer:       /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial:       018F8824608BBCCFA2B7DF6FD14D16C3365F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number:          066E
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: fyh38QnTXinc81ltIrppdzbNquo.roa (hash: hBABV/WdaYmpN+5iEwUTT1Iq/IMF1OuXD7T9iESjWBc=)
                          2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: NV4zzTt7pdmxprMS+bWSBpai6eAzmtdCQRHlU4dYnRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:60:8b:bc:cf:a2:b7:df:6f:d1:4d:16:c3:36:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=d6e1e6818fa4f4faa64a94767da33ad599cdc124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:89:e9:5d:0a:19:87:5a:a1:af:35:ff:63:
                    8a:a0:94:06:2d:7c:34:8b:c6:b3:de:26:8c:10:f1:
                    95:bd:77:d4:ad:5d:8c:a7:f0:b8:5f:1c:94:96:b2:
                    fb:4f:d0:50:27:77:01:f0:41:2f:2d:9f:54:81:f8:
                    4a:46:10:47:93:66:b2:8b:43:71:f6:30:da:e3:39:
                    db:30:d6:e4:9e:b7:cf:7b:3b:65:2b:77:13:7d:2c:
                    66:b5:40:b9:08:bc:94:94:1d:d5:dd:af:d6:e1:87:
                    36:87:af:26:20:20:5d:87:dc:0a:a0:4f:26:22:30:
                    e9:55:d5:53:d2:06:ff:12:5c:c4:74:c8:08:f0:5a:
                    d1:67:cc:a4:26:03:17:56:5a:be:6b:18:00:2f:17:
                    a6:48:9c:d1:26:a5:52:4f:63:9f:34:ab:99:e5:79:
                    70:b6:43:3a:a2:a3:0e:68:5b:cd:ec:1e:d6:e2:a4:
                    45:2b:ce:62:f5:35:72:75:0a:58:98:d5:44:b4:b4:
                    bb:70:b9:18:70:13:cf:bd:4f:9c:c8:e5:08:c9:7e:
                    55:2a:8b:ac:af:f5:29:0a:48:45:4b:da:f8:d3:54:
                    f7:1e:f4:24:cd:33:f9:c7:1e:fc:59:f9:64:d5:9a:
                    4c:9c:43:9d:a4:40:fc:19:1e:82:ff:d8:43:44:d6:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E1:E6:81:8F:A4:F4:FA:A6:4A:94:76:7D:A3:3A:D5:99:CD:C1:24
            X509v3 Authority Key Identifier:
                keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:4f:38:35:48:61:58:a7:d9:06:a9:7a:92:9b:f5:0f:4e:
         2b:c0:a6:ab:df:7b:da:5a:48:e8:92:f3:57:7f:18:f2:ef:3b:
         cf:bb:be:db:4e:ec:37:13:eb:4b:5c:ee:09:40:b1:cf:20:96:
         ef:a3:3a:ad:0b:29:ab:dc:91:90:5c:98:a0:52:2e:fe:00:5f:
         0e:3f:1b:64:eb:24:ef:5b:9b:b5:cb:f0:4b:11:a0:26:0b:7d:
         25:ec:1a:77:2e:c5:90:2f:cc:b4:34:5b:3f:5f:36:89:fe:4c:
         30:05:b9:27:37:d4:94:39:9e:f1:f4:97:f5:c2:fd:e5:4e:d4:
         31:65:5a:e0:85:82:58:07:33:7f:25:c2:6c:e2:03:10:f9:93:
         b3:d5:d6:c8:c2:05:78:91:59:bb:78:f5:93:ab:28:e5:1e:fe:
         b8:e7:1b:fa:cc:b4:63:e1:29:e4:12:00:43:74:ca:3e:a8:ec:
         8f:81:ec:ca:19:46:69:52:77:5a:17:e3:43:42:2d:39:42:18:
         73:63:25:ac:39:87:fd:79:cb:5b:40:d1:8b:a0:60:c0:88:68:
         9d:d2:a7:1e:6f:9c:63:97:81:01:a7:4d:03:3f:24:56:1c:58:
         7b:f0:34:80:2d:00:c8:bb:8d:89:f3:3c:32:d7:d4:84:00:0c:
         0d:c8:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:38 2024 by rpki-client on console-fra.rpki-client.org