Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File:                     p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier:          iFY9Mv5HNyPHtHf2hZpmkMnMbTl/dIkpwjeFr12mXZM=
Subject key identifier:   82:2A:15:E0:6F:EB:35:77:EB:46:D0:2B:98:41:EA:14:30:09:45:31
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer:       /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial:       018F87ED01BDA90BB5DEF162CFB25900E4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number:          06EC
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: /XksArq2ZGAWfBtMtjJwj6MmJjbVor8nzCXi246w8xY=)
                          2: v2T3DyvjoX3LxPiCcZVDcqwdrbI.roa (hash: D5JJTY9s1hnlzYxNASvz8vTxi/V+h4Tq4/kOXkOqAR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:01:bd:a9:0b:b5:de:f1:62:cf:b2:59:00:e4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=822a15e06feb3577eb46d02b9841ea1430094531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:2c:31:42:3b:48:08:4e:08:1c:a9:c8:b7:
                    07:17:7a:3e:fb:00:61:2b:47:38:1a:34:45:5d:30:
                    0e:32:1a:fb:7b:2f:a9:2c:a7:19:1e:90:6e:c8:c5:
                    52:10:d9:fd:3b:bb:ba:0a:e1:db:36:f4:34:1e:80:
                    2f:c1:c0:23:44:1e:9e:40:f9:52:fd:7a:ef:69:d6:
                    1b:4d:e6:00:aa:81:33:4b:e7:b9:7e:07:ea:84:2f:
                    bf:c2:e0:6c:5c:8b:15:5d:7b:a3:90:5a:d5:5f:af:
                    4c:1f:dd:92:3b:8f:10:c5:b8:80:9a:b1:6b:f4:df:
                    51:46:5f:87:9f:3e:36:61:ab:e4:b6:0c:71:dc:0e:
                    84:f4:dc:fb:f7:a5:e9:70:10:18:7f:a9:9c:76:63:
                    eb:33:92:48:2f:1d:e5:de:76:c1:be:62:16:c3:08:
                    1c:91:7b:a9:23:13:09:a9:ab:4b:6b:c7:0a:08:43:
                    33:7e:f1:36:bd:a0:3e:86:5f:7c:32:b8:34:5e:e0:
                    38:26:98:b6:af:a8:8d:51:f4:ee:60:f6:31:c1:6c:
                    83:98:18:3c:ef:d8:5c:13:a8:73:a2:ce:56:40:84:
                    dc:96:ac:75:14:e7:e4:65:b8:2a:6a:84:b6:9e:57:
                    c2:5b:d8:b0:14:8d:07:a5:e7:35:24:79:56:4a:50:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:15:E0:6F:EB:35:77:EB:46:D0:2B:98:41:EA:14:30:09:45:31
            X509v3 Authority Key Identifier:
                keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:b1:98:af:26:47:76:31:d1:1c:7a:31:dd:e9:24:36:5c:
         a9:ef:e3:90:6f:c9:09:af:b1:fd:6b:ff:30:cf:c4:a9:34:b2:
         5a:fa:2e:48:67:7c:71:09:f2:96:f1:90:82:c5:3f:fc:9e:8e:
         ca:6c:3d:66:90:87:50:3c:0d:f3:ce:9f:32:ff:af:bd:8c:0a:
         97:e1:38:11:54:a1:b2:62:c9:23:ea:55:ff:00:a5:f9:50:33:
         b6:67:7b:b3:4a:59:59:a4:87:16:6d:b9:33:95:c4:bc:ba:58:
         87:36:ae:3c:bd:42:61:c1:79:f0:5e:6d:f8:b1:92:34:0c:82:
         e8:27:2f:19:3e:76:d1:b7:47:b9:4f:91:ec:ab:e4:46:31:21:
         c2:08:60:aa:0d:6a:06:cb:a7:e0:1d:ad:44:b0:7a:d6:59:2e:
         51:fd:e7:43:34:9f:21:83:30:a5:47:41:2d:67:b2:42:4b:59:
         a0:fc:e2:99:d3:a7:57:6c:9b:bc:c7:d5:44:0c:8e:e4:42:4d:
         b0:d2:45:8d:71:01:17:d9:41:7b:e4:97:9f:9f:21:ad:a3:21:
         5c:1f:75:ff:a8:ed:b0:6f:cd:83:cb:10:be:5e:76:13:e8:d4:
         71:a4:c5:4e:51:3b:b1:0e:63:e9:36:b9:cc:4e:fa:25:0f:61:
         34:6b:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:05 2024 by rpki-client on console-ams.rpki-client.org