Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File:                     IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier:          +q+a4b5E4rl+h8mYykH9dabyx9puY8uuIGQoENFqg5E=
Subject key identifier:   3B:EA:BB:6C:25:B7:FA:2D:E3:57:48:06:76:BB:C6:9C:D8:69:5F:F3
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer:       /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial:       018F45A1A9DD8EE5B16A2F15A5EBBFC50ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number:          0C61
Signing time:             Sat 04 May 2024 22:02:53 +0000
Manifest this update:     Sat 04 May 2024 22:02:53 +0000
Manifest next update:     Sun 05 May 2024 22:02:53 +0000
Files and hashes:         1: GQrc7B9uGOdrFZyLVdiy0La5ZKY.roa (hash: OuBhu91WfsQjS32L8XgLKc5QVbti1pa5cdldeZVZhmc=)
                          2: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: nP6j+2vdZpPjSe2Xr+wm/59FYjNk6NhXbZ2wvAYTvM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:a9:dd:8e:e5:b1:6a:2f:15:a5:eb:bf:c5:0a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
        Validity
            Not Before: May  4 22:02:53 2024 GMT
            Not After : May  5 22:02:53 2024 GMT
        Subject: CN=3beabb6c25b7fa2de357480676bbc69cd8695ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:e5:39:65:15:d2:e0:1b:16:9b:6b:ab:03:
                    aa:4e:e6:69:fb:3a:7e:64:6b:9b:3d:f9:4a:3d:0a:
                    a7:b2:6a:c9:a0:01:b9:a6:f9:ca:e9:7f:22:40:9f:
                    52:94:7d:7e:40:8b:12:a2:28:d3:8e:d0:89:10:2c:
                    ec:93:9e:89:89:00:8f:a9:d8:08:f1:c9:e3:63:a0:
                    d2:e9:16:f2:0e:f6:99:48:ba:26:6a:e3:e4:f1:ae:
                    84:bc:78:5e:cf:a9:44:05:eb:4a:4e:af:0a:25:f8:
                    74:7b:77:0d:f8:c6:4c:da:43:3e:b1:f3:70:39:e6:
                    45:13:23:d3:b3:f2:6e:65:56:1d:d0:70:6a:3f:c6:
                    f6:bb:f6:ff:bb:62:fc:8d:59:7c:69:ae:88:b1:11:
                    17:3b:e6:72:e6:54:56:cb:4a:07:04:cd:c8:16:c6:
                    1c:98:38:62:d5:a2:f8:a7:36:f5:6b:72:bb:65:ae:
                    13:df:a0:f8:02:ae:42:aa:8e:7f:14:d6:62:ee:6c:
                    f2:08:ba:13:32:57:ac:1c:66:a0:8e:76:25:34:8f:
                    b4:68:2f:88:67:71:55:90:90:54:41:3c:a8:65:b5:
                    d8:23:b1:cc:58:aa:1a:35:66:33:c9:c2:2f:cf:59:
                    61:a2:65:b4:53:8e:e2:b8:ad:db:af:93:96:26:b6:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EA:BB:6C:25:B7:FA:2D:E3:57:48:06:76:BB:C6:9C:D8:69:5F:F3
            X509v3 Authority Key Identifier:
                keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:5f:10:a9:c8:26:91:9b:0f:ae:e3:cc:46:cb:87:40:f8:
         ae:31:65:65:4e:38:00:99:63:0a:97:2f:4f:4e:85:fe:2b:d7:
         a6:e8:f3:66:30:28:14:5b:eb:50:3e:39:64:fa:02:fc:fa:d5:
         bf:97:f2:fa:91:a6:e7:82:a5:ee:6a:20:f5:ff:51:7e:c3:a5:
         0f:97:15:1c:58:98:d1:b9:5e:9f:2f:1e:22:1b:f3:b2:8a:b6:
         12:f8:3c:ee:82:90:d9:bb:67:9c:80:7a:5c:4b:3e:f4:2a:71:
         5f:41:cf:a5:46:eb:53:54:26:27:49:e0:74:a6:a7:d4:99:6b:
         db:c3:76:d2:35:14:32:cc:5a:da:82:bf:66:69:07:6e:0e:8f:
         45:ad:3c:79:ff:85:b5:7b:67:0d:bf:56:c7:78:fb:50:2b:aa:
         0b:1e:db:cc:ea:31:72:43:f6:09:6a:80:d0:92:80:95:c3:1e:
         9b:57:40:a3:3c:82:ef:95:99:43:dc:70:63:c1:83:2c:31:f1:
         85:d2:cb:01:39:46:f9:28:c6:47:58:65:d6:f7:d0:8e:a1:bc:
         d6:88:c0:9e:67:91:ad:e3:56:7d:ef:64:23:8c:96:14:b9:74:
         37:0a:c6:4e:d7:12:08:dd:41:fa:17:17:88:65:c3:9c:be:2c:
         35:10:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:17:35 2024 by rpki-client on console-ams.rpki-client.org