Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          DtiPJAGN4n1fxUtbYLaB2t/4y29tvL0hkzTRalMo/Aw=
Subject key identifier:   B6:BD:17:6B:65:99:4D:08:B2:C0:83:98:3C:67:0F:A9:95:25:A4:57
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       018F16A17F53C596DB3DCBBDF5DDF827CC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          10D0
Signing time:             Thu 25 Apr 2024 19:00:33 +0000
Manifest this update:     Thu 25 Apr 2024 19:00:33 +0000
Manifest next update:     Fri 26 Apr 2024 19:00:33 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: JLBCCphAYU/1FaCfm+lo6173/e7j28ZwughuHad0mpA=)
                          2: uVZdSHbnmnk8Ek_0tU4bWUh5e1g.roa (hash: NmTTVbO7r1PcNPaADlquWt61ePuzNGoyW8tB4CnfDo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:16:a1:7f:53:c5:96:db:3d:cb:bd:f5:dd:f8:27:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Apr 25 19:00:33 2024 GMT
            Not After : Apr 26 19:00:33 2024 GMT
        Subject: CN=b6bd176b65994d08b2c083983c670fa99525a457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9c:f4:fd:7b:2d:e9:37:60:d2:02:60:85:53:
                    81:ad:e7:bb:15:d1:1e:df:fa:3b:4f:7c:1a:2b:df:
                    0e:41:61:d5:0d:fa:e9:7b:53:25:2b:bc:c8:00:51:
                    2b:5c:74:f9:81:d7:63:d0:b8:d7:47:93:fc:21:5a:
                    92:91:44:d3:54:b3:75:ca:20:0b:39:bd:0f:fa:17:
                    e2:9a:21:24:2f:8e:9d:4b:16:10:17:cd:48:da:c8:
                    d8:dd:53:1d:84:8f:b0:06:de:85:95:eb:0a:c7:63:
                    a8:16:f1:a1:a5:9e:fc:11:55:47:06:a7:4d:0d:da:
                    a0:9e:44:7a:d6:69:96:c0:95:82:6a:7e:77:12:9f:
                    78:38:44:78:6b:c5:6f:d7:95:07:fe:3d:99:4c:98:
                    8b:78:28:71:cd:b0:67:7f:2c:b6:d2:19:79:d7:e5:
                    a2:6a:c5:0f:64:5e:76:c8:f8:7a:b2:b8:ee:c3:ce:
                    44:e6:dc:f6:8c:b0:f4:68:8a:67:07:b8:01:b5:bb:
                    9d:72:a7:c5:00:9d:23:e3:03:9a:74:7e:62:3f:ee:
                    5d:d0:9a:95:bb:8d:55:db:de:3b:1b:77:36:df:7a:
                    df:aa:2c:7f:c0:a8:7a:57:0e:b2:8f:af:a2:6d:44:
                    8e:f9:af:c5:11:74:1e:2a:7f:8f:4b:07:07:aa:94:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BD:17:6B:65:99:4D:08:B2:C0:83:98:3C:67:0F:A9:95:25:A4:57
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:47:c0:a8:0f:2b:b1:34:f7:dd:9c:eb:cf:77:58:c0:9c:
         8f:f8:92:e7:f3:c9:28:7c:f4:30:20:1a:65:87:3c:1f:8e:e3:
         a9:ac:b4:67:41:41:bc:62:f9:48:81:b8:d4:7e:83:4c:8a:c4:
         2a:3b:5b:b8:67:4f:82:77:56:a4:b3:f9:19:0b:67:43:eb:f7:
         d0:f1:c2:96:d7:2e:a4:89:92:84:08:17:41:d9:0b:31:70:81:
         e5:9b:49:18:96:30:c4:dc:6e:dd:89:af:08:67:71:d4:3d:78:
         ca:29:42:77:d2:05:f3:c6:4d:ba:09:c0:c7:5e:9c:58:11:fb:
         97:81:57:94:53:38:9a:4a:0b:3b:28:0b:ce:c5:78:6e:21:a6:
         08:34:fa:ed:09:a2:cd:32:4d:19:e2:dc:a4:d8:4e:26:a1:17:
         32:59:1d:69:60:f9:78:d1:aa:7e:da:83:d2:85:b3:96:c6:3a:
         40:ec:90:7c:7f:2d:83:2d:f8:e2:98:32:65:10:ce:28:35:4d:
         10:00:b6:77:59:70:9e:42:00:88:b5:d8:ae:f1:9e:b4:24:39:
         e7:8d:24:09:5d:0a:97:64:99:26:b8:52:d4:ed:29:1a:88:e8:
         91:5f:6c:85:a9:ce:db:97:95:48:7b:7b:32:d1:6e:25:a0:06:
         26:6d:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:42:40 2024 by rpki-client on console-fra.rpki-client.org