Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File:                     1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier:          bBQqI3dkRVnvbA+vbBfbPSVTiLDMPbgrKZQAXOS7n+I=
Subject key identifier:   2D:26:70:3B:28:96:05:B1:9F:DD:87:56:5F:2B:00:9A:39:02:FA:9F
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer:       /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial:       018F2049E4203F3276436F9AC68F94F87D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number:          0689
Signing time:             Sat 27 Apr 2024 16:01:04 +0000
Manifest this update:     Sat 27 Apr 2024 16:01:04 +0000
Manifest next update:     Sun 28 Apr 2024 16:01:04 +0000
Files and hashes:         1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: pdD3P35G6MdUQ5H9HLzmVUR8Nmn7CdKvfpkM57Z67c4=)
                          2: aFtYd19mLo1XewR0mMMx5qRQayw.roa (hash: B1BMuQ367J1JrdVH+sEyccOwS63MilgOaXsdtE8aVrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:49:e4:20:3f:32:76:43:6f:9a:c6:8f:94:f8:7d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
        Validity
            Not Before: Apr 27 16:01:04 2024 GMT
            Not After : Apr 28 16:01:04 2024 GMT
        Subject: CN=2d26703b289605b19fdd87565f2b009a3902fa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:38:40:1d:f3:ab:85:65:5b:b2:05:12:ba:
                    13:ae:b3:42:44:f2:28:8d:e7:f4:29:ff:e3:b8:ee:
                    c5:f8:ec:e5:bf:38:52:ef:11:55:8c:ef:84:57:08:
                    5b:a3:4a:8e:59:5a:9c:d0:4c:b6:a9:6a:5c:a3:20:
                    72:0e:62:4e:2a:e9:67:76:78:f3:64:2e:1f:54:dd:
                    b5:7e:67:62:c0:0c:0d:ca:7e:6a:40:cf:f1:3d:40:
                    cc:13:69:9f:03:d7:11:99:75:c5:fb:e5:b9:c1:0f:
                    a9:d3:09:3e:06:02:35:51:88:4b:9e:24:01:5e:d6:
                    01:ee:3d:c2:11:4b:27:c7:b4:e0:6b:cb:f1:58:c6:
                    a5:e2:8f:7c:1e:9b:8d:bc:d8:68:a3:46:eb:e0:fa:
                    e7:f6:f0:c0:39:33:ad:37:72:82:95:73:ef:24:9b:
                    96:35:0f:13:0d:71:ff:87:b8:33:cf:50:ca:27:45:
                    cf:7b:cb:a8:77:a8:55:97:73:22:06:b7:62:f8:d6:
                    20:9f:03:03:46:84:ca:b6:ac:d6:87:4d:75:78:de:
                    12:73:1a:98:30:3e:67:35:1b:1d:0d:c9:8d:54:18:
                    28:e4:d3:2a:a0:fb:01:92:3c:96:6c:9d:ff:8c:46:
                    c8:f8:51:37:81:de:48:15:39:01:80:da:3b:2e:1c:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:70:3B:28:96:05:B1:9F:DD:87:56:5F:2B:00:9A:39:02:FA:9F
            X509v3 Authority Key Identifier:
                keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:e1:33:15:4d:27:d7:e1:4c:89:eb:b3:c7:94:7e:d6:74:
         91:d1:0a:85:d7:7b:04:8c:17:ac:86:ed:bc:e8:71:1e:4d:62:
         0e:d5:f6:ac:b8:9a:3f:ac:22:73:9c:dc:66:d8:2f:6c:7b:46:
         61:22:06:3c:bd:ef:aa:f8:12:cc:76:8d:d2:b9:50:29:c3:c8:
         3c:77:60:39:44:b6:a1:ec:b0:21:dd:6b:18:0f:44:71:55:5f:
         90:83:53:e6:7a:53:a5:72:df:75:9e:53:53:ce:6d:1a:e9:8e:
         f1:b1:32:d1:54:78:11:4d:b9:77:2c:b9:fd:1e:e8:df:50:ab:
         5c:f2:87:ff:97:f5:c6:6f:85:1d:ad:67:b9:46:30:c2:be:62:
         00:ba:94:73:df:d1:d9:72:ab:30:de:29:f0:65:31:9c:de:b6:
         65:7a:a2:aa:82:a7:d1:9c:1a:03:ab:16:b5:4d:de:5a:7b:3a:
         39:0c:b3:b2:8c:b1:34:d5:a4:04:30:a8:24:12:4f:47:dc:33:
         b4:90:19:55:8f:0e:a9:7c:ee:0c:1b:a7:ca:6f:8c:39:ec:e1:
         24:89:69:7e:eb:d4:31:39:6b:74:08:b3:91:2c:80:35:51:2d:
         97:5b:e5:df:08:cf:bf:76:cc:5a:b5:ea:3e:7d:43:98:6c:8e:
         38:d4:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:04:46 2024 by rpki-client on console-ams.rpki-client.org