Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File:                     IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier:          4eXo/F9rJawvCYeOrQ/1nZHATrR9e6AGJNhUHFJ56hU=
Subject key identifier:   1D:E9:36:00:57:9C:2A:CD:5F:DB:AD:93:D7:D0:44:CC:2B:8F:5E:8D
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer:       /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial:       018F3A77FC806ED0DD93E7044AC635D02DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number:          10E2
Signing time:             Thu 02 May 2024 18:01:32 +0000
Manifest this update:     Thu 02 May 2024 18:01:32 +0000
Manifest next update:     Fri 03 May 2024 18:01:32 +0000
Files and hashes:         1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: sDgJoYD7gIXUQHQlevPFUiht97exShT3TU8kuxEswJc=)
                          2: gwm1RimCrVIbLLjX431A6MU6NZg.roa (hash: LAfYNDQfcxWGrQgwVnzkI4z3kaxjmR9pZpXudCo59n0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:77:fc:80:6e:d0:dd:93:e7:04:4a:c6:35:d0:2d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
        Validity
            Not Before: May  2 18:01:32 2024 GMT
            Not After : May  3 18:01:32 2024 GMT
        Subject: CN=1de93600579c2acd5fdbad93d7d044cc2b8f5e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:fb:e2:6c:f0:a7:70:22:fc:38:4f:b6:77:
                    66:bd:73:b0:64:63:f7:71:60:c1:f9:06:77:cf:f7:
                    dc:0b:b8:68:d7:88:a4:ac:17:c3:c7:ee:1d:65:9d:
                    a0:c3:64:1f:77:47:ec:a0:3e:61:d7:d0:b3:15:4c:
                    99:94:85:ac:8f:81:88:18:2b:e6:3d:31:e2:95:8e:
                    e3:c9:8a:b7:aa:4d:ae:f4:4b:50:9c:0f:20:3b:dd:
                    e9:5b:d6:b3:b6:7f:23:8a:e4:8e:97:cb:d7:83:b3:
                    d4:c8:f8:11:9e:11:23:61:42:d4:5c:15:f4:95:58:
                    33:db:5a:bf:cf:4a:ca:e9:70:a2:28:14:bd:1d:11:
                    52:b2:b8:60:fb:0b:a0:66:c6:fc:b0:91:14:69:b1:
                    b3:83:b4:d4:c2:c3:96:c9:e1:e9:e5:01:c6:65:37:
                    4e:93:39:fc:c2:58:43:75:e5:dc:29:20:e1:d4:1f:
                    ec:59:4b:27:a9:ac:a4:94:33:29:96:8d:f9:18:73:
                    79:8e:cf:40:32:67:16:4b:bf:e4:dd:50:a8:0d:f1:
                    b1:95:51:4c:e2:9a:d8:27:e8:b4:96:bd:da:79:8f:
                    c7:cf:38:a5:78:47:f8:62:b4:c3:8d:2e:30:28:0b:
                    78:db:bb:7e:92:af:2b:7d:27:a6:a3:d8:49:da:7f:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:36:00:57:9C:2A:CD:5F:DB:AD:93:D7:D0:44:CC:2B:8F:5E:8D
            X509v3 Authority Key Identifier:
                keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:6e:71:73:43:b1:4a:44:2c:e1:75:68:f9:e7:cf:dc:17:
         5d:c8:f8:80:0a:f8:80:23:c2:bd:33:f3:bf:5a:54:f2:1e:93:
         36:b5:43:63:33:c6:31:bb:86:32:dd:1d:81:22:ab:88:ed:bc:
         6f:c8:1d:34:52:fe:60:90:c7:b4:f5:79:17:e5:bd:32:66:22:
         5b:41:ea:33:d9:e8:a8:45:3a:bb:7b:b2:04:f1:b9:8b:3f:67:
         18:ce:d1:95:d0:cb:e0:6a:ef:79:72:32:ba:70:22:a6:a5:1a:
         a8:6a:f8:35:b4:c7:83:a4:10:2c:5c:cc:c5:23:ef:ee:24:7b:
         7c:82:6b:55:50:30:7d:3f:c4:d3:94:77:b8:1b:91:c9:52:ad:
         a4:f1:91:c0:d7:ea:d3:51:81:6c:08:6e:a6:1a:0b:9c:19:38:
         72:3a:69:ef:6e:47:ea:b6:5d:1f:df:13:37:a4:56:20:00:f2:
         bd:26:a5:8e:aa:00:45:d9:62:dc:a6:3e:ee:c0:f1:eb:28:c9:
         ba:35:97:8b:91:f7:0b:a0:f0:f0:10:0e:01:30:84:97:54:6a:
         ff:00:24:44:7b:a6:be:27:f8:53:bd:36:83:7b:1f:3d:75:4c:
         4f:c1:d1:ca:86:55:ed:7f:07:fe:fb:32:c0:cb:79:85:e6:35:
         86:49:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:59:02 2024 by rpki-client on console-ams.rpki-client.org