Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File:                     ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier:          TkW+KEGMC5gZaXLd+NRUNxYub6+OVFejxw1YwnNO430=
Subject key identifier:   94:C9:53:D1:0A:2A:2B:14:83:B9:7D:BC:2A:29:4B:07:D2:BC:25:57
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer:       /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial:       018F8749F0DF4DA96AFD32A9B087B5453CD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number:          0336
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: 8Mu07eulTAqgXuEcVhPis9I9uvM.roa (hash: 4Kqr/RznDWLvKxFe9r5dYWcbDt8TInkLamHsv7IXgpc=)
                          2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: jmh+aXI22/kfRaRmp3PVMK6w68fNCun19BH4QbWKTBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f0:df:4d:a9:6a:fd:32:a9:b0:87:b5:45:3c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=94c953d10a2a2b1483b97dbc2a294b07d2bc2557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:37:8c:73:36:b2:11:59:d2:1a:c5:8f:14:
                    6d:2e:38:09:8b:9c:2b:34:fd:f0:5e:82:48:00:d6:
                    34:6a:d0:8f:66:f9:e8:db:96:f6:d4:2e:28:85:32:
                    27:cb:aa:68:9c:7b:7d:2d:5b:1c:cb:7c:bd:d1:fe:
                    df:4f:df:53:ab:6d:47:ff:1e:ea:a9:e0:d7:2f:eb:
                    aa:b4:fd:9d:1e:57:2d:76:90:37:01:a0:b0:5d:6f:
                    68:be:b1:ee:bd:9e:6c:81:33:62:f9:43:3e:aa:a0:
                    d0:8f:04:de:a0:a4:40:a1:df:da:a1:4e:c9:bd:8b:
                    57:15:29:95:f3:3a:d2:8d:29:a8:1f:dd:56:26:b1:
                    44:1c:2e:56:bb:9d:f7:1d:69:65:e2:19:61:f4:ae:
                    5e:42:53:54:62:83:ee:cb:f5:35:5e:f4:18:bd:4f:
                    19:59:64:e5:3a:4e:6d:b0:02:b6:65:f2:36:28:0e:
                    36:79:59:04:d8:51:51:6b:ba:c9:08:1b:38:b9:8a:
                    98:79:ce:d9:df:fc:11:1c:c7:6e:91:05:4b:0f:25:
                    86:22:d3:f9:60:11:0e:24:6f:5b:96:89:73:8e:1c:
                    5d:d0:d5:5a:22:f1:15:b0:5b:14:19:30:d4:9f:7c:
                    4f:25:34:5c:66:01:dd:c7:9b:e0:17:c7:ea:38:ff:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C9:53:D1:0A:2A:2B:14:83:B9:7D:BC:2A:29:4B:07:D2:BC:25:57
            X509v3 Authority Key Identifier:
                keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:32:ac:a7:b0:3e:00:80:2a:70:c9:9d:56:4d:ae:47:64:9b:
         fc:c7:bd:57:d2:b3:b3:36:36:a0:22:98:5b:7a:7b:a3:17:b7:
         98:c8:9c:cd:ac:a5:a4:ea:94:4d:40:dd:b8:34:56:12:06:56:
         e4:ec:03:c4:8c:59:a0:80:94:0c:7f:51:ac:16:7e:88:73:14:
         34:b4:35:71:11:e1:76:50:c1:75:1d:8c:57:c0:ab:e6:a0:ef:
         6d:d3:20:6a:1f:8c:0d:5b:d0:5a:9f:28:09:97:2e:73:d2:80:
         ae:02:13:a4:aa:07:6d:3d:3a:e3:65:05:bc:6e:a7:6e:04:9b:
         3f:db:38:8c:5a:d4:93:d5:40:5c:1a:dc:61:71:f0:a3:63:b1:
         e8:35:12:ea:8d:dc:62:f6:86:fd:c6:37:99:4f:b4:64:fb:e3:
         dd:c4:b4:5f:99:7a:b9:eb:c2:32:4c:7b:16:9c:97:65:a0:a2:
         9f:57:0c:22:ec:59:f9:61:64:9d:23:7d:f5:3d:6a:9c:b1:c9:
         34:1c:94:6b:bb:8e:89:7d:63:91:b6:b3:a7:12:4c:4b:0a:42:
         1e:f2:e3:cd:22:9d:e0:b5:08:a9:db:49:cc:47:07:82:c9:e9:
         11:cb:92:23:6d:2a:ce:c4:ea:fc:6e:17:42:31:9f:4e:2e:d7:
         b8:f7:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:47 2024 by rpki-client on console-fra.rpki-client.org