Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.mft
File:                     1-XpUa2biRJzmKEMt2ArW1NAM0D4.mft (raw, json)
Hash identifier:          9PSj4gRKZk3VkY2U/aDv6fR6+3C+cOVurtpVxWfLgso=
Subject key identifier:   2F:AF:93:8B:18:E4:7C:33:20:0E:A7:A5:FC:C5:BF:55:2F:94:BA:35
Authority key identifier: F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E
Certificate issuer:       /CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
Certificate serial:       018F4B6CB411FD7C26B6300056AF36C5081F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.mft
Manifest number:          06A6
Signing time:             Mon 06 May 2024 01:02:46 +0000
Manifest this update:     Mon 06 May 2024 01:02:46 +0000
Manifest next update:     Tue 07 May 2024 01:02:46 +0000
Files and hashes:         1: 1-XpUa2biRJzmKEMt2ArW1NAM0D4.crl (hash: 3VjaqFD6pcX4iUQtgxYdEQ8gl3tkk37pkiIR+MA1t+o=)
                          2: qwJajgsBTFSsfVHRIUdqd0bJ9L0.roa (hash: 7shBf2J0cLJamhXB6hFKxvisUkvkPlgZrhnkXleQCFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:b4:11:fd:7c:26:b6:30:00:56:af:36:c5:08:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
        Validity
            Not Before: May  6 01:02:46 2024 GMT
            Not After : May  7 01:02:46 2024 GMT
        Subject: CN=2faf938b18e47c33200ea7a5fcc5bf552f94ba35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:4d:28:60:d9:47:bb:28:2f:50:9b:d2:ba:
                    65:86:c4:9a:40:54:60:4c:1e:10:5a:56:84:78:62:
                    1e:66:ae:a1:7f:10:41:8b:ab:1d:b8:00:75:15:de:
                    56:6c:3b:3a:8d:85:7b:a5:01:98:bc:99:ee:c6:7b:
                    3a:31:94:66:79:50:4e:e7:6e:30:7b:ce:47:d9:b9:
                    c0:7a:3f:cf:7e:c2:71:ee:d0:dd:c5:ef:f1:4c:46:
                    80:4d:64:8c:72:90:50:bf:82:38:66:22:cc:cf:83:
                    4e:d8:af:bb:86:64:0c:a1:ec:2d:79:3c:f1:64:5d:
                    88:13:ec:0f:65:e5:76:6c:1a:d2:f4:fc:e4:82:13:
                    aa:75:2a:64:8c:23:87:b7:de:a7:9d:8d:9f:68:8b:
                    d8:9e:2f:2c:5f:4b:d2:7d:63:62:f4:6c:26:66:c9:
                    d0:0c:e2:9a:d0:0a:48:e0:45:ce:d0:d2:6b:23:a2:
                    83:03:3d:d2:38:46:29:11:4e:50:07:4d:d0:86:26:
                    ef:67:01:49:59:24:a4:2a:2a:31:13:b0:9a:fb:9e:
                    99:5b:77:0d:34:5f:47:4c:5f:01:3e:e5:1a:87:24:
                    6c:75:48:7e:42:5b:a4:8d:aa:0b:df:e6:64:c4:8a:
                    e8:a2:3e:aa:cb:77:1b:c0:d2:6e:d4:71:c7:45:7a:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AF:93:8B:18:E4:7C:33:20:0E:A7:A5:FC:C5:BF:55:2F:94:BA:35
            X509v3 Authority Key Identifier:
                keyid:F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:05:1f:10:02:a9:00:eb:d4:bb:8b:fe:f2:de:56:cf:51:fe:
         c8:62:18:07:01:0d:2f:a2:95:6b:7e:53:74:4b:d3:2c:d3:a9:
         1e:eb:4b:1b:e5:93:1c:7e:47:a5:07:58:53:8b:2c:0f:07:86:
         02:1f:e8:06:b4:d3:10:f3:f3:91:f4:04:ae:f3:97:39:02:16:
         47:cb:a7:99:7d:ff:bd:fb:2d:e8:66:64:b7:3d:dd:55:30:11:
         23:a8:c0:04:70:85:75:61:dc:b1:4e:88:e7:e2:c8:57:77:67:
         57:e3:de:09:b8:b6:14:bf:df:c5:18:f1:a1:8a:c5:bc:e6:c2:
         dc:87:49:22:3f:4b:b7:d6:e3:d1:eb:dc:ea:20:5b:0a:94:22:
         1a:93:7d:81:f7:60:60:66:2c:c4:ec:39:5c:dc:36:67:ae:eb:
         90:b9:e1:f6:07:07:0f:7f:03:80:c0:df:d9:27:6f:5f:07:1d:
         90:f3:99:5d:c8:b9:34:93:c5:e6:ca:59:8f:bf:c7:30:6d:15:
         6c:c8:95:38:8b:f6:ed:8f:eb:0f:46:62:77:05:0f:fc:87:dc:
         ec:c8:04:b8:4d:53:ba:d7:ae:78:4a:78:0f:47:bc:b1:35:ec:
         ad:21:28:41:b8:50:2b:73:a4:ae:9a:fe:45:66:bf:2b:f8:a9:
         91:6f:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:03:24 2024 by rpki-client on console-fra.rpki-client.org