Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
File:                     2O6yCogM20lOnmLUOy7yjJDLnu8.mft (raw, json)
Hash identifier:          fwJUX9F6nKfRuOAdQ7zSHOrCVcqeb375nb/7pV2nGFM=
Subject key identifier:   E9:59:29:FC:7A:0E:56:02:AA:DD:90:12:D9:65:F3:F5:83:51:17:CD
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Certificate issuer:       /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial:       018F86DA571842C87E972F47CAEAC75BA6A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
Manifest number:          69
Signing time:             Fri 17 May 2024 14:00:06 +0000
Manifest this update:     Fri 17 May 2024 14:00:06 +0000
Manifest next update:     Sat 18 May 2024 14:00:06 +0000
Files and hashes:         1: 2O6yCogM20lOnmLUOy7yjJDLnu8.crl (hash: 3bxtxkUqMrZ/PQJNzhj0zoQxAqDm8qBeI1s9lDhITEM=)
                          2: ae4YJm6N64rGjpfN54e07sDcryw.roa (hash: zVaTbAECM7tnKXzr31kIRtan/Lu7QIs0UjlL+3nQPjg=)
                          3: l82RUD0Uijsg9d7Aqde4hsRJOAk.roa (hash: CLt2YuWoR3gjcNWBn/3+et+gNTdMlv1fB/eIiEHriGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:57:18:42:c8:7e:97:2f:47:ca:ea:c7:5b:a6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
        Validity
            Not Before: May 17 14:00:06 2024 GMT
            Not After : May 18 14:00:06 2024 GMT
        Subject: CN=e95929fc7a0e5602aadd9012d965f3f5835117cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:f4:52:f6:55:17:98:4f:09:53:4d:b1:a4:
                    09:ad:a3:d9:fc:e5:2c:e4:0e:d8:16:13:5c:c7:d5:
                    85:82:25:68:c4:d7:4e:79:0a:3f:2f:83:7b:fb:bb:
                    2a:bc:58:68:51:fc:44:d8:c1:0f:36:b3:28:d0:2b:
                    27:9c:de:89:1a:b5:36:22:5d:5e:a7:c4:67:05:68:
                    de:17:e2:16:8c:07:a2:fc:87:bb:ce:c0:61:87:79:
                    4d:ef:6c:c6:e7:08:e5:b7:ea:94:18:d0:dc:22:86:
                    b3:90:da:4f:3d:86:3d:b9:80:08:d5:11:9c:5b:74:
                    41:d3:05:fd:5e:1b:da:5c:b7:b1:1a:fb:0c:5f:1e:
                    53:c6:c6:03:88:48:4a:aa:20:86:7a:42:2e:e1:87:
                    d8:97:a6:df:2d:44:e1:1e:bb:66:9e:8b:fe:33:67:
                    d9:fd:fb:63:f6:db:40:e9:4e:33:f5:04:d2:d3:fe:
                    48:7a:b1:22:0c:9f:7c:95:92:a1:16:3a:19:52:c0:
                    bd:36:f4:47:3e:3a:06:fd:cc:d6:60:7a:26:81:3e:
                    43:c2:8e:09:b1:8c:07:eb:d2:23:88:3b:fb:e0:ac:
                    cd:e3:18:04:9a:82:92:85:e2:4a:0b:ea:a9:7a:62:
                    7b:fb:31:1c:01:e7:26:4c:7e:3a:aa:c0:72:da:12:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:29:FC:7A:0E:56:02:AA:DD:90:12:D9:65:F3:F5:83:51:17:CD
            X509v3 Authority Key Identifier:
                keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2b:71:3f:2d:d5:d5:67:24:b8:90:92:b2:f2:59:5e:7a:5e:
         f2:a7:d2:df:30:7a:09:53:db:ec:39:c2:56:4b:2b:36:f0:e5:
         e6:a0:4a:06:66:8b:c1:3a:41:3c:9c:60:25:2b:80:45:27:e1:
         c0:5b:97:a5:e6:c6:78:cf:4c:1c:dc:2c:ad:bf:03:c4:84:a6:
         2d:7e:76:66:c2:d6:8a:80:3e:d8:18:0d:49:bb:26:24:de:43:
         87:e5:88:51:2f:45:82:24:55:ee:06:93:5f:14:3f:6c:2c:2e:
         80:bf:ed:13:28:dd:8c:28:07:0a:3f:cd:de:8a:c2:03:01:05:
         29:14:57:f8:26:38:d3:0c:6a:90:e1:38:62:70:94:1c:3c:7d:
         5d:f4:ec:38:ef:9a:87:58:04:bd:f5:8e:19:75:03:e9:d9:33:
         dc:b0:f7:07:1a:1f:04:d3:7a:c1:1e:8d:3e:80:6f:b1:4e:0a:
         5b:51:09:f3:f9:b2:3e:90:62:ac:43:9a:68:5e:6c:35:2e:f4:
         a6:c2:95:0c:bc:b3:53:cf:0a:a7:e8:f3:11:8c:8f:8b:31:09:
         ec:f8:ca:80:ea:60:a4:52:2a:a7:ad:11:18:de:7b:54:9f:6c:
         f0:1c:90:35:29:d0:eb:fe:8d:6b:e8:18:c6:25:84:a3:02:9e:
         31:34:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:25 2024 by rpki-client on console-ams.rpki-client.org