Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          A5BxLFt1YouZjwwS0BYMB2Q/HMv9VXtUi0HIhEMa8mw=
Subject key identifier:   4A:33:4B:F9:77:F7:10:43:98:29:15:1A:D2:DA:0C:A3:49:8F:E9:70
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       01901EC680D09A0875CE0BDE2AAE6327A236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0980
Signing time:             Sun 16 Jun 2024 02:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:43 +0000
Files and hashes:         1: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: IP6gOpNRAzLEJICucDRmAitSj1+BT4cgk7pC+tt7ZAc=)
                          2: T4cqfjnENNSKj9M7dYvA_IXZGH4.roa (hash: BfhxC+A1x6yY45FStJ6mZdgkbBbx5PyhgFntDJQ1NlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:80:d0:9a:08:75:ce:0b:de:2a:ae:63:27:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Jun 16 02:00:43 2024 GMT
            Not After : Jun 17 02:00:43 2024 GMT
        Subject: CN=4a334bf977f710439829151ad2da0ca3498fe970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:db:46:73:ab:5f:31:9e:62:33:8b:92:59:
                    8f:7a:b1:42:bb:42:a2:cd:e0:46:83:8e:2a:0e:8a:
                    6b:0b:5d:01:50:e0:c7:61:0c:cf:b3:0d:aa:ef:2f:
                    f9:98:7b:ac:54:2d:96:5b:85:32:a4:49:dc:36:55:
                    84:06:ee:a6:e1:a0:3a:72:6e:6b:41:f5:a2:7c:50:
                    10:01:a1:e9:70:43:d6:20:9f:fc:42:ab:c1:3b:b0:
                    a0:43:8e:01:e3:a6:22:e7:d6:d3:ba:0d:92:2e:c8:
                    14:30:fc:13:69:88:1c:21:1e:13:5d:d6:dd:12:e0:
                    c2:bc:54:76:a8:4a:1a:ac:98:f1:13:06:88:1d:43:
                    39:d7:7a:46:b7:a2:6a:3d:ed:a7:69:12:d0:b0:09:
                    ba:be:1d:a2:8e:8f:4d:8e:f3:8a:fc:4a:97:d7:ae:
                    91:c3:c5:af:6a:b0:6d:71:ee:d1:ba:7b:4d:38:d3:
                    62:84:35:d8:38:81:dc:9d:66:17:11:87:ee:ab:d8:
                    03:3f:48:5c:85:6a:b8:56:e7:69:87:26:0b:6b:5c:
                    3b:f9:03:43:ea:2f:cb:da:e9:e0:b7:2d:35:42:d8:
                    80:63:2d:e7:67:63:90:98:ab:43:b3:c7:e1:07:26:
                    e0:fa:5f:8c:b1:f3:4f:2e:c4:2c:13:ba:1a:0d:fb:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:4B:F9:77:F7:10:43:98:29:15:1A:D2:DA:0C:A3:49:8F:E9:70
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:02:da:53:1a:6e:3b:21:0a:20:cc:2e:31:65:d7:d9:b1:
         d0:2c:20:11:9e:cd:e1:4f:9c:d4:4b:72:6f:9a:d0:33:27:fe:
         23:0c:e4:b4:cd:02:08:52:44:e6:ba:e4:3b:3b:4e:5a:19:dc:
         ad:61:69:c3:6e:43:48:bf:3c:dd:b6:98:fb:88:aa:33:e6:a8:
         3e:c8:f6:58:cd:bb:94:76:89:45:cf:cf:85:ce:86:40:e9:c8:
         f3:4e:24:2a:1a:82:22:bc:a9:ce:da:5e:90:e6:fc:15:15:05:
         34:de:b0:cc:f4:a7:d5:02:19:59:f7:93:6a:b2:bd:20:bb:e2:
         99:2d:26:4a:ad:d3:dd:b2:77:54:6a:8d:29:89:e7:b5:c6:c9:
         a8:ac:b6:d0:24:27:a1:32:91:5c:53:0e:d1:9f:1c:95:75:28:
         81:a4:75:fc:b5:54:1d:f2:29:e9:dd:f5:7e:64:e0:02:cc:92:
         c5:3b:c6:c5:2a:fc:2d:94:b4:ce:7b:e8:e0:32:5b:da:2b:30:
         53:07:2d:bb:91:d9:d5:fe:97:a0:84:7d:f0:08:c2:97:d9:62:
         b1:4b:99:09:57:52:7d:4e:f4:0d:49:08:6b:88:f7:ca:a1:04:
         2e:45:6f:2c:5f:77:8e:74:9a:83:f0:30:b3:9f:71:f5:9c:d0:
         3f:63:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:51:11 2024 by rpki-client on console-fra.rpki-client.org