Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File:                     Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier:          upKuXCcBVrQCTlKN0A+vyfTFUoY8DobZJFCEOM647Vc=
Subject key identifier:   90:B0:CA:6D:AB:DC:98:D6:2E:4F:29:C4:90:17:7B:07:C2:BA:C8:42
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer:       /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial:       018F87499115CC85B367FABB067AA46C7073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number:          0DB1
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: Qs3ABsnaIZqgrg+Xkmt8gp4nX0FCr/CGS3JlDfEifpM=)
                          2: bathhTEz2C5vsBdxkoa1B5GuHSc.roa (hash: JJ2kBfAkUVj9iAAvlgZR7gvYUuAt9cqa7mFsw8vpD0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:91:15:cc:85:b3:67:fa:bb:06:7a:a4:6c:70:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=90b0ca6dabdc98d62e4f29c490177b07c2bac842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:bb:a4:45:cd:74:54:cf:ae:31:57:64:43:
                    8b:36:04:8c:b2:7f:cc:67:5b:cb:41:dc:fe:a4:d4:
                    a1:bb:87:e3:a1:37:48:da:26:e1:f3:2f:25:41:41:
                    4a:52:fb:2e:52:2d:05:66:56:81:bd:3e:d4:76:49:
                    46:b3:fa:63:1b:85:68:87:a8:d5:a9:4e:e2:f0:4c:
                    4e:a4:64:6a:d1:06:b2:3c:ed:02:72:73:1e:67:e7:
                    5f:ad:9a:0c:a4:66:17:78:e1:87:92:83:91:1c:51:
                    a4:5a:f5:3c:eb:92:73:e2:92:89:ce:66:a3:a9:db:
                    13:5d:81:f9:82:45:8b:79:f2:58:bf:62:1e:11:36:
                    86:75:a4:e7:af:db:29:3f:05:25:03:74:7d:41:1f:
                    f1:cd:9d:5d:d8:ce:39:f5:ee:af:25:a0:3e:29:d7:
                    f7:49:7b:d0:4c:f9:a7:78:08:3c:c8:33:ce:f0:94:
                    9b:f7:e5:0c:9e:8e:da:2e:31:dd:cf:2e:4c:6d:63:
                    9e:af:81:59:29:84:76:ed:fe:6f:de:fb:b6:8f:23:
                    9c:a9:41:86:87:65:10:1a:84:af:62:7c:15:4f:05:
                    c3:27:89:8f:5c:b1:10:84:db:53:5d:08:35:30:c4:
                    dd:73:dc:33:4d:f3:9a:70:88:8d:b9:1a:4c:7d:26:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:CA:6D:AB:DC:98:D6:2E:4F:29:C4:90:17:7B:07:C2:BA:C8:42
            X509v3 Authority Key Identifier:
                keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:96:f9:09:bc:d1:15:06:1b:5c:65:d6:b8:cf:41:bf:6b:25:
         7e:34:fd:a0:60:63:35:e5:9a:be:75:28:53:b8:7d:89:aa:a4:
         b5:48:2b:06:8e:27:f4:ff:10:60:18:87:9b:b6:99:60:a2:31:
         1a:db:fd:f3:27:0d:8e:a3:22:98:a2:84:5f:77:c2:09:92:b8:
         d7:a0:45:77:16:a1:a6:25:36:94:a5:d7:75:b2:3c:18:eb:50:
         4b:f3:c9:17:ff:0f:f0:b5:d7:8f:34:e7:5d:3e:87:af:16:09:
         59:16:fc:25:c9:cb:a7:70:51:4b:07:fc:5e:4a:6d:5f:60:94:
         0a:ac:c7:03:53:b0:9b:d4:b2:98:66:1b:4d:af:47:b4:b4:19:
         bf:f6:5c:af:d7:ac:b4:d4:f4:cc:46:2a:28:c1:d3:18:0e:ed:
         66:7c:dd:a2:11:b0:e1:22:30:b4:ea:80:af:70:43:64:97:3b:
         6f:ce:b2:9d:aa:14:ba:9f:cf:e0:1c:fc:ae:bd:bf:a8:5f:50:
         c2:39:ad:a4:01:d1:12:5f:27:22:5a:f7:f3:0b:cb:af:cd:24:
         cd:a9:7d:08:09:63:9a:54:ed:d5:14:dd:10:87:af:99:1f:4b:
         cd:fa:69:3a:c7:3c:bc:52:ad:e6:83:57:2f:02:65:64:75:c9:
         b2:71:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:29:33 2024 by rpki-client on console-ams.rpki-client.org