Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File:                     r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier:          elQW5VXiP9KG/eGuKGkyxOchIgsyWQKRX7ApKFmjfXw=
Subject key identifier:   58:2E:E5:FF:32:A4:DC:13:E9:54:53:A5:A8:94:3D:43:B9:ED:3C:F4
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer:       /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial:       01901BFDF672CC4B05119C54120B2E278BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number:          0445
Signing time:             Sat 15 Jun 2024 13:02:26 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:26 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:26 +0000
Files and hashes:         1: ITyF61HWwY6zZ0y9iK7N-vpFPbo.roa (hash: MSYgsA8v8475ekBKI1CzSZLgdhHbZUsLOJfzFuYoqDw=)
                          2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: fBQH92x3YPJt07mCgLdTIwEyfiy/fEjl9hn726FzluA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:f6:72:cc:4b:05:11:9c:54:12:0b:2e:27:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
        Validity
            Not Before: Jun 15 13:02:26 2024 GMT
            Not After : Jun 16 13:02:26 2024 GMT
        Subject: CN=582ee5ff32a4dc13e95453a5a8943d43b9ed3cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:a5:56:ed:e3:ff:8d:b9:81:3d:d0:1e:9b:
                    09:74:b5:b9:c2:36:bd:16:c7:60:4e:b9:59:bd:41:
                    de:45:31:72:9e:8e:5d:e9:a2:e5:f4:77:93:4b:0a:
                    82:3a:a7:46:c9:6a:09:e2:9d:a3:fe:16:be:6c:09:
                    8b:75:ed:cd:36:a5:64:52:f7:1c:d3:a6:7c:25:b3:
                    3f:04:da:b5:b6:81:9b:c6:58:e5:09:53:b5:f5:b7:
                    5f:4f:9b:be:3a:23:a4:15:0b:e0:87:c7:74:5f:ec:
                    84:c7:23:eb:7c:d8:e5:40:ea:99:d0:5e:76:26:1f:
                    0b:06:0f:18:ba:51:ae:1e:c6:8d:61:37:56:cd:79:
                    71:63:d6:6f:6e:1d:d6:e6:ae:28:7e:06:51:5d:da:
                    e3:7d:39:e1:66:84:88:4c:cf:59:e8:fc:5c:58:57:
                    b7:05:ee:f0:9c:0a:36:95:c0:a2:7d:5c:dc:a4:f5:
                    c1:86:66:e2:26:04:bc:a7:14:60:81:22:d8:d1:ac:
                    8c:27:a0:24:da:18:e0:58:38:76:4e:a5:0c:0a:d4:
                    8a:12:82:25:43:77:bc:93:99:99:f5:56:3c:ce:5b:
                    ea:35:00:b4:88:69:74:8a:5d:ef:9b:de:ce:74:6e:
                    14:a6:09:06:52:c1:ce:28:64:61:30:98:6f:10:46:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:E5:FF:32:A4:DC:13:E9:54:53:A5:A8:94:3D:43:B9:ED:3C:F4
            X509v3 Authority Key Identifier:
                keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:12:6c:27:28:e2:ae:be:c9:87:66:d4:fd:35:9d:b0:7c:
         88:0f:2f:5b:fa:4e:cb:51:93:0f:51:4b:28:fb:1c:8f:b9:c2:
         a1:19:6d:05:8b:7f:59:9e:6b:72:d9:5c:25:57:3a:1f:c9:b9:
         f0:73:5a:6a:0d:a0:48:71:0d:3a:d7:a1:aa:24:06:d6:c3:16:
         9c:dd:18:da:55:d9:3b:8f:8d:6e:02:bb:51:54:87:af:f6:87:
         76:e7:77:53:04:20:5f:d5:58:4d:35:5c:2c:e2:93:13:ac:54:
         d1:67:b9:18:d0:78:31:3c:6d:63:d9:6c:dd:d8:89:67:ea:da:
         23:83:56:a7:55:bb:4e:02:c4:2c:55:37:32:e9:85:db:f6:24:
         1c:c9:69:28:14:c1:9a:8f:64:e1:cd:d4:0e:a6:05:a2:70:16:
         76:12:26:07:63:b9:81:42:24:c7:b4:d7:25:e7:27:ea:3c:06:
         de:27:a9:e8:51:b7:b6:7d:61:ae:e5:de:83:3d:44:04:1c:0b:
         43:1d:92:8e:bd:b7:95:80:69:d9:2f:23:a8:fd:47:a5:dc:42:
         70:71:96:1c:3c:99:2e:29:cb:0c:06:0d:4c:3a:1d:d7:db:28:
         c8:3e:e2:47:d3:52:83:b3:5c:ab:e8:3a:09:40:01:e1:60:a2:
         48:aa:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:50:19 2024 by rpki-client on console-ams.rpki-client.org