Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier:          lx1YisQBHUnzu1YC0OMHol/SC4k3D1TlSkixV9n8FrM=
Subject key identifier:   6A:7F:C5:87:A0:34:37:E7:D9:84:4F:6A:41:80:88:A4:2C:B8:36:67
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       018F4F481A55849542E0EABB02EB6FA8EFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number:          064F
Signing time:             Mon 06 May 2024 19:01:16 +0000
Manifest this update:     Mon 06 May 2024 19:01:16 +0000
Manifest next update:     Tue 07 May 2024 19:01:16 +0000
Files and hashes:         1: 6Gh_uO8PX7BS9Hj23c7uaPYgtO4.roa (hash: tMKQRV/08HCdMLdB9ocdfLlfpcOScSxMXxAurIwiYCM=)
                          2: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: Rn4rkYhCd+3HwE2jRe18uTEBCVUQyQv1Yd1Kr/InXdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:1a:55:84:95:42:e0:ea:bb:02:eb:6f:a8:ef:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: May  6 19:01:16 2024 GMT
            Not After : May  7 19:01:16 2024 GMT
        Subject: CN=6a7fc587a03437e7d9844f6a418088a42cb83667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:0e:00:4c:14:4d:c5:9f:82:e2:8d:9f:ba:
                    9f:ee:f4:e8:0f:a1:b7:8f:e0:dd:eb:02:5f:af:03:
                    65:82:16:10:f6:a4:a5:7a:6c:d6:f5:ac:5d:b6:aa:
                    ed:44:fd:be:63:50:ae:56:2e:84:99:e4:54:a4:23:
                    29:cb:bc:a1:2d:31:fe:27:a3:e0:4e:ec:b0:4d:5f:
                    4a:23:b7:68:67:bd:d8:8d:44:51:51:06:5e:f7:42:
                    22:3b:05:f1:0c:f1:48:40:1a:45:5c:05:2a:39:38:
                    bb:52:8e:82:e7:f6:14:ba:8b:18:75:5c:10:78:6c:
                    56:65:3e:61:e2:17:b3:af:b0:65:69:da:6e:a3:6b:
                    12:a1:00:89:7e:5b:7f:b5:d4:95:d7:9f:ff:e3:42:
                    e9:fd:06:2c:b2:f3:18:8e:93:0d:18:02:be:c1:51:
                    1e:41:69:0a:24:20:e2:e3:e6:6c:f4:9c:3a:cd:70:
                    cf:3d:25:4d:48:25:cc:7c:a6:f9:e9:57:57:7c:41:
                    6e:cc:bb:eb:cc:06:09:e2:02:9f:62:70:a5:b5:2f:
                    dd:e6:c1:e0:97:11:d3:f1:b4:d0:98:37:fb:d3:39:
                    95:9e:2f:22:71:90:2d:76:cc:57:e5:24:df:fc:e6:
                    bd:48:5a:7e:0a:fb:94:a4:21:f3:78:c3:0b:79:ff:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7F:C5:87:A0:34:37:E7:D9:84:4F:6A:41:80:88:A4:2C:B8:36:67
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:25:a0:04:a8:33:3b:99:01:fa:19:b6:23:de:fb:86:71:04:
         45:c4:61:88:3b:1b:06:6e:e5:e1:05:9f:55:3a:b6:17:a2:28:
         36:74:d9:cd:13:2a:85:ae:ca:87:2a:8e:a4:88:4e:a9:99:7e:
         bd:6a:63:a3:e2:64:c2:3b:f6:79:cb:cc:49:3a:6a:14:51:c9:
         10:da:92:7f:8f:62:38:b9:ff:fd:45:5d:b8:0e:c3:20:f9:f3:
         e0:8a:a5:26:30:1d:3d:f3:e3:12:3e:d4:0d:0e:d7:ca:46:09:
         b3:0f:9a:ee:2c:09:79:3f:a1:a5:8d:8c:c2:0b:38:1c:6d:ba:
         94:e9:85:31:6a:0a:3b:c0:06:61:64:22:30:81:98:6b:57:7f:
         96:cd:ae:41:c0:3b:5d:df:96:e5:73:a6:70:47:30:23:cc:32:
         71:68:a4:f3:df:99:bc:5f:38:e1:a2:fe:8c:f3:e2:74:f4:8f:
         aa:66:48:90:06:c5:52:66:cc:80:87:1e:43:1e:ad:9b:3d:c6:
         b3:f4:9d:0f:e1:39:5b:0b:93:9d:7c:c2:a1:e1:17:79:20:d7:
         4d:cd:76:22:52:ff:c8:f8:c3:13:ec:60:8c:9e:61:65:49:ef:
         35:bc:89:46:26:fb:e1:ea:dc:55:4a:ed:43:ae:f8:23:e3:e6:
         af:e2:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:51:55 2024 by rpki-client on console-ams.rpki-client.org