Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File:                     klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier:          p/vCDm1THiEb0Pby5osDNNVcp0CDE1RjSTR5C3QJG90=
Subject key identifier:   64:27:DC:86:05:FC:CD:1A:DF:7C:60:34:2C:A5:82:45:62:F9:68:BF
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer:       /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial:       018F8936DE5A693349084EBDECDF89105FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number:          0D06
Signing time:             Sat 18 May 2024 01:00:25 +0000
Manifest this update:     Sat 18 May 2024 01:00:25 +0000
Manifest next update:     Sun 19 May 2024 01:00:25 +0000
Files and hashes:         1: 8Mcq-zl4dkvfFvsT7cZ47w4xd-A.roa (hash: eZOdsLsNSiBLDVudHyPUNQ6UbOIPbSjAhg2agmaOnRI=)
                          2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: t3kUy2JrUR4+dA8JWdzzNGT3IWdiOITpeJPOTCcwEpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:de:5a:69:33:49:08:4e:bd:ec:df:89:10:5f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
        Validity
            Not Before: May 18 01:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=6427dc8605fccd1adf7c60342ca5824562f968bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:e0:08:d9:e4:77:87:23:a6:4c:48:8c:61:
                    29:6d:be:05:2d:3e:2b:b7:0f:54:7f:ad:e2:fe:be:
                    62:1a:03:d5:c6:09:5e:af:a2:97:e1:31:08:a6:23:
                    69:4c:2e:06:25:40:57:f7:e3:5a:46:0a:63:ae:ed:
                    8d:6c:8a:97:07:1b:86:27:d2:5e:36:ad:5c:2c:d5:
                    d8:26:e9:19:c4:9d:d0:ea:35:b9:7a:5f:24:b2:3d:
                    94:4c:49:b3:25:d9:9b:3a:da:97:57:71:37:75:db:
                    d1:f7:08:3b:81:7e:75:e9:af:61:57:71:6b:6d:56:
                    37:9f:cf:99:7a:c8:fb:cb:a0:f0:68:d4:b9:fd:ac:
                    33:93:0d:11:b9:03:f1:b4:e0:c6:76:ec:fa:c5:bf:
                    74:29:fb:0e:71:49:a8:fd:72:3c:f4:a6:3d:ce:fa:
                    76:9e:3b:99:bb:ba:8d:6e:b3:e6:76:77:02:ba:f0:
                    52:02:8b:0f:31:04:39:ca:0c:f9:7a:9c:88:48:3d:
                    78:58:19:cf:15:87:c4:01:b0:e5:63:f3:95:b5:66:
                    ac:e3:c6:2d:cd:17:1b:32:06:86:be:64:bd:e1:f6:
                    98:5c:69:2b:85:99:30:0c:0a:7d:9d:da:42:aa:55:
                    62:3e:d5:8b:d2:fb:0e:ea:e1:88:df:ae:0b:f9:6b:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:DC:86:05:FC:CD:1A:DF:7C:60:34:2C:A5:82:45:62:F9:68:BF
            X509v3 Authority Key Identifier:
                keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:f6:6a:d3:28:08:23:5e:bc:a9:e0:a3:f3:6c:8a:9c:78:
         97:53:f7:7a:af:07:e7:a8:db:7a:2f:91:ab:f5:19:00:d0:85:
         1a:2b:f5:94:0b:0c:d3:71:6e:a6:0c:03:d4:df:fd:b9:7e:1c:
         72:bd:06:fa:c3:18:77:31:d0:f0:8d:0c:b7:ea:0d:c5:c4:8a:
         c3:74:2f:2b:71:b3:b6:a2:83:64:95:84:4f:7b:49:9d:f5:0b:
         ab:2c:ee:fb:98:0b:a8:cb:ed:b4:ce:ff:ea:00:f8:74:fb:a4:
         c4:7f:8d:9b:37:fd:fa:bc:ea:61:c4:79:a9:c3:ca:ad:7b:1e:
         23:87:41:1b:2e:1a:87:55:b8:d4:b6:0f:4b:ae:c6:f1:7e:67:
         c4:05:04:20:7b:38:d9:f0:3a:b6:ec:6c:3f:ef:c2:5e:b0:9e:
         ae:f4:d9:de:d7:78:53:07:33:9b:6f:eb:9a:c0:a5:01:1a:d6:
         84:39:4c:3e:14:54:70:f3:ab:14:2e:3e:53:6b:e6:46:6f:26:
         3a:b0:ed:4f:e8:bf:4e:ce:66:d0:0d:a6:e1:a2:e1:d0:b8:58:
         bf:69:07:78:f2:f2:87:ad:08:65:99:76:38:ca:fd:5b:64:96:
         f8:48:27:dc:25:97:44:8b:49:4b:94:03:ce:e4:ac:17:d5:03:
         7a:b3:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:00:22 2024 by rpki-client on console-ams.rpki-client.org