Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          eFzGHKd4G9VXuTv0W1flcnb6KhmryGXSKrsSAkTgefE=
Subject key identifier:   3E:94:E9:50:41:73:03:B9:AE:4F:68:87:03:3E:92:07:78:B6:F6:20
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       018F8749A7DBE16AC40D47E20CDFAD4D7374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          030D
Signing time:             Fri 17 May 2024 16:01:42 +0000
Manifest this update:     Fri 17 May 2024 16:01:42 +0000
Manifest next update:     Sat 18 May 2024 16:01:42 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: L2Ttj7he0Myth+U+1htrLaaKhwl/Ah5WWbwlmiw+/Eo=)
                          2: VJ38n93YBydWGZ0qOQ3Sz7r1S88.roa (hash: hr20eXfg/VfemAnnmj+6ced8goDGunKyIu9QfS9tcLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a7:db:e1:6a:c4:0d:47:e2:0c:df:ad:4d:73:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: May 17 16:01:42 2024 GMT
            Not After : May 18 16:01:42 2024 GMT
        Subject: CN=3e94e950417303b9ae4f6887033e920778b6f620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:2d:ff:56:39:9e:f0:17:30:ae:43:de:ce:
                    9b:fb:fe:e6:36:a3:df:fa:54:5f:1f:43:6f:75:4a:
                    1e:57:7c:03:8b:9f:07:8a:16:53:9a:c0:1d:92:d5:
                    9a:ae:83:ff:b7:42:da:c7:6c:1d:cb:3e:d1:a4:44:
                    d5:35:70:0f:cf:66:25:ec:85:d9:da:84:38:b3:0e:
                    39:2d:c2:f9:da:26:90:cf:f2:5e:ac:f8:31:45:84:
                    96:15:10:1e:9a:be:9f:71:2d:3a:c4:14:76:05:df:
                    e7:40:ec:67:0c:92:0c:8c:06:ad:b9:c2:f6:97:c3:
                    76:d0:72:7e:0b:29:8e:56:0d:0a:5e:b5:a5:48:b4:
                    bb:17:1b:a6:dc:98:27:9f:15:3e:d4:32:21:60:be:
                    d6:eb:d2:40:72:4e:19:97:c3:47:89:80:46:90:e6:
                    9a:ae:ee:8d:26:73:07:70:0e:f8:7f:79:9b:b4:de:
                    8c:d0:1b:bd:f6:74:28:3c:b8:36:19:b0:a1:84:e1:
                    01:90:df:85:16:99:c7:ed:7b:40:53:04:a7:9e:f1:
                    99:7a:7f:5b:e7:a6:87:95:f0:89:4b:a5:3b:65:12:
                    ad:6d:ac:c3:fa:bc:3a:9b:be:9e:04:4b:a0:c6:17:
                    c2:55:06:06:33:6d:4b:2f:42:d5:60:de:e3:7b:c4:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:E9:50:41:73:03:B9:AE:4F:68:87:03:3E:92:07:78:B6:F6:20
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:53:a2:b9:81:69:63:2f:2a:0d:7c:f2:51:54:13:4e:53:
         1b:f4:81:e8:83:d1:8d:a7:7d:f0:74:e7:00:8b:1e:ed:f8:33:
         5b:c3:8e:bf:c6:b1:60:69:34:d3:9b:34:f5:d0:19:b9:c8:62:
         86:ba:92:1b:b0:a3:d9:69:36:6c:88:13:d9:d1:8d:50:44:f2:
         db:06:16:4e:ff:5a:fd:0e:de:53:13:9e:25:a4:b6:e3:d1:c9:
         cd:60:55:a1:8d:d7:14:dd:07:5d:ea:f0:f6:c4:8a:c0:11:18:
         62:a9:b8:66:c8:dc:92:ce:14:68:ca:92:b1:9f:d1:ce:30:3e:
         54:5b:7f:b8:1e:90:a2:c9:17:29:c4:ce:9c:83:a2:92:06:39:
         4d:e3:da:d8:5e:12:5e:1e:71:80:52:00:50:8a:39:03:44:fb:
         19:d6:b3:be:eb:6e:65:13:49:7d:b0:55:40:85:ec:29:c5:af:
         51:1a:ce:33:db:c5:aa:66:90:f6:86:f3:60:9b:e9:c3:6b:b7:
         97:44:d9:08:ef:c6:00:b3:f9:a1:ee:b1:f4:d3:95:af:ab:00:
         d5:b0:6c:ec:82:fb:2a:21:99:37:86:c9:ed:54:66:9d:a2:d7:
         4f:85:8b:02:f2:b2:1f:e3:4b:fb:15:ba:60:71:9b:15:3f:a2:
         a9:c7:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:29 2024 by rpki-client on console-fra.rpki-client.org