Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          0+f7Z5p4AfiefVWdUo3Qd79YrJqFfcIwPm/LXfvcQr8=
Subject key identifier:   A8:1D:A8:49:C3:9D:A0:25:9D:EF:3C:38:10:05:80:4F:53:52:A0:33
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       018F3A0C652D00BA8B798667E5C5114DD7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          0DE2
Signing time:             Thu 02 May 2024 16:04:01 +0000
Manifest this update:     Thu 02 May 2024 16:04:01 +0000
Manifest next update:     Fri 03 May 2024 16:04:01 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: GpTmozEUkWOF5rsHVK52n5NMxW5TvaKQB+yzH6aJSzc=)
                          2: pkRfg_fw7MzXAB8QCUA3oTAyC2E.roa (hash: c3bM9L9qeGFOmUFH361d/kKc3GdhRsURNh7ZiQvopMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:65:2d:00:ba:8b:79:86:67:e5:c5:11:4d:d7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: May  2 16:04:01 2024 GMT
            Not After : May  3 16:04:01 2024 GMT
        Subject: CN=a81da849c39da0259def3c381005804f5352a033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:ac:cb:ed:06:ee:29:50:55:dc:d5:66:05:
                    4e:1d:c6:25:05:a4:9d:84:a7:f9:45:ee:40:36:71:
                    17:ce:2b:26:13:a7:ef:26:b9:f8:a7:67:12:75:aa:
                    77:ac:1d:16:45:88:96:c5:86:77:eb:47:d5:3a:62:
                    cd:af:e6:63:67:75:9b:4e:53:26:21:d0:d4:20:b8:
                    7d:5c:6a:83:51:00:a5:7e:37:5c:a2:b6:84:b9:88:
                    ad:8e:f4:9a:12:34:51:d7:e3:2e:7a:cf:20:50:11:
                    30:6c:94:a1:8d:0b:ef:2a:d6:e7:7e:19:32:e2:18:
                    59:d5:21:8f:a7:f7:a0:e4:38:03:20:65:8a:7c:4b:
                    15:d0:49:95:88:07:c5:ac:cf:37:86:5a:b9:0a:7e:
                    2d:e8:13:64:0d:a6:a2:09:bd:b1:c4:d1:bf:66:90:
                    eb:91:cd:87:e5:30:a4:cf:2a:32:7e:d2:b6:0e:ee:
                    e6:06:db:49:05:d7:ef:d7:07:6e:20:55:5d:4c:65:
                    90:08:59:c9:33:3c:4c:bf:42:73:97:ae:e1:af:11:
                    59:2e:ac:cb:e3:03:c7:ed:7f:a4:dd:21:57:f0:ff:
                    0a:b0:d6:38:fc:e2:ee:d4:19:71:fc:c0:47:86:69:
                    5d:f1:2e:e4:01:f4:f9:e9:c0:82:9c:e2:ca:fd:41:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:A8:49:C3:9D:A0:25:9D:EF:3C:38:10:05:80:4F:53:52:A0:33
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:1b:13:b4:f8:5f:3b:9d:91:96:59:52:63:6c:26:d7:27:
         43:0c:d9:b6:89:30:2f:23:7e:c0:a4:b1:c4:de:58:0e:10:a9:
         12:3e:95:e6:f6:61:42:c9:e6:80:f4:81:d5:fe:5b:1b:90:a3:
         48:a8:bf:d2:cb:6d:fb:b0:18:29:80:22:4b:28:63:8a:10:e0:
         c0:ae:9f:8a:66:a4:52:01:30:75:e8:03:58:b5:06:b5:22:d3:
         28:6a:01:00:36:9f:f3:c0:88:83:30:a2:50:9d:3b:e1:45:67:
         ad:b4:52:55:3c:60:c0:9d:0f:37:a0:ec:4f:8e:7d:94:0c:c7:
         c3:d2:bc:f4:4f:93:c4:8f:84:b4:1a:3c:41:d0:f6:f6:ee:f9:
         c5:bc:f6:53:4b:d4:91:19:12:36:70:bd:c5:ff:a3:d2:bb:6a:
         66:d7:ce:90:84:c4:34:d7:ee:95:c1:69:04:7a:1d:92:31:d5:
         2b:de:28:cb:df:77:f9:83:eb:b6:f3:e5:cb:97:10:62:8c:4d:
         d3:54:02:ef:e5:8b:4e:cc:21:d4:cd:2f:4d:d0:40:d2:12:2f:
         c8:0a:58:25:a0:9f:b5:ae:61:54:7d:58:d0:12:97:dd:75:01:
         f8:3f:2f:6c:59:a0:61:10:ec:d1:3a:08:9b:27:fc:7c:bb:74:
         20:72:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:24:29 2024 by rpki-client on console-ams.rpki-client.org