Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File:                     M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier:          c2dqLPPVOOdqQd55dDQ1AcVmOxPIfc3cnjvPHx81YiA=
Subject key identifier:   D1:90:F3:1C:A7:DF:9C:04:69:81:61:ED:B1:A6:50:03:FD:1B:F8:C8
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer:       /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial:       018F87ECF881290BA16D59FF7B12C743C9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number:          019A
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: CgSsTWHkdBKBkz50vT3JViWh1yaI4OTiLy8E1s/JiBA=)
                          2: rEX2-eY8Bm7Hk_CiTR7dvOZTxgU.roa (hash: hgTsk5IEAmKEQ81FFF4XZGp/St6qogUUtfQ5wo1s7CM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:f8:81:29:0b:a1:6d:59:ff:7b:12:c7:43:c9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=d190f31ca7df9c04698161edb1a65003fd1bf8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:25:89:f5:b9:47:b0:2e:00:6b:a4:b2:3b:
                    98:98:a7:11:18:1c:56:07:f3:f2:48:99:83:d2:71:
                    f5:cf:70:b7:18:00:46:69:8d:2e:bc:4d:70:1f:a8:
                    c5:95:80:27:cb:47:94:b9:ea:f3:da:2c:ae:ec:cd:
                    1c:0a:0d:4d:a6:a0:4a:fa:82:ce:15:d6:ed:c6:c6:
                    e1:72:cb:3b:6b:4f:91:5e:4a:3d:86:b6:62:ea:fb:
                    b1:31:2c:6d:90:3d:6a:47:6e:93:f3:a6:73:b3:11:
                    96:ec:48:14:1c:0c:c1:e0:53:35:1f:96:0e:cd:61:
                    4b:fc:ed:fc:b9:f9:60:1e:7e:71:d9:a6:58:fe:4f:
                    7d:b7:bc:2a:cb:5e:18:82:84:cb:5e:bc:44:fc:56:
                    ce:cc:af:ed:d7:56:68:27:05:83:a9:35:84:61:d8:
                    e3:69:2f:96:9f:2c:b9:b8:b3:27:cd:0b:94:14:00:
                    39:3a:cc:3d:d1:52:f7:c5:1e:10:eb:03:a5:bf:d2:
                    a2:34:37:c8:f4:63:ee:13:d9:fb:ab:58:0e:42:b2:
                    8c:c4:d1:ba:a2:83:39:8e:be:b2:ef:c8:76:b3:76:
                    ea:2f:bf:c1:c0:1b:a6:28:3a:e4:cb:0f:56:8a:59:
                    35:a5:ce:99:94:cc:07:80:02:18:b9:d9:33:b4:ab:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:F3:1C:A7:DF:9C:04:69:81:61:ED:B1:A6:50:03:FD:1B:F8:C8
            X509v3 Authority Key Identifier:
                keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:2b:40:3b:8d:5b:80:62:76:f7:2e:a9:c6:61:b5:d7:1b:
         e1:95:20:65:52:90:96:79:d2:a6:59:44:69:c1:bb:94:e1:53:
         67:a2:da:44:ad:39:51:c4:5d:f2:c4:fe:fa:eb:64:f7:c6:63:
         6c:3f:ee:c8:e1:ad:71:67:e3:9c:62:76:a5:71:ac:39:0c:f7:
         c0:28:1b:21:5d:0c:c4:4b:f7:6e:49:9a:91:da:03:2f:b1:88:
         9f:1f:89:20:4b:fc:80:16:cd:d2:17:e7:ea:c1:01:4e:e6:19:
         65:9a:39:89:ec:8c:fb:7f:15:68:e3:68:af:a6:6b:2c:b4:95:
         12:8f:e9:13:f6:a1:ae:b0:92:c2:4f:d7:1b:69:61:29:6e:a2:
         98:da:d6:b9:1d:11:ea:66:12:ba:6a:fc:dc:3d:a2:b0:af:58:
         ce:2c:8c:42:8b:11:f4:59:78:29:89:98:4a:f0:c4:1d:2a:4d:
         f5:d1:c3:de:d7:21:67:30:17:b3:e6:e5:c9:0b:2e:0c:94:77:
         b4:8d:15:01:01:20:2c:82:00:0e:79:bb:8c:a6:d7:55:58:84:
         23:77:ab:28:86:77:69:26:be:4f:6e:4f:c4:85:5b:ec:50:ba:
         ea:7c:3d:da:5d:4b:7e:da:76:25:ee:e8:ff:ff:f0:16:54:1e:
         a9:5e:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:37:24 2024 by rpki-client on console-fra.rpki-client.org