Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File:                     gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier:          BVjuJSSUfQDPyFbkGlhT4/3ul+CGjgronLXPjy1fG90=
Subject key identifier:   40:D1:75:B7:24:4F:01:F7:C8:72:9A:B0:34:C4:AD:C9:C8:66:13:51
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer:       /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial:       01901BFC544FDC719A24365A0E16F888EB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number:          04EF
Signing time:             Sat 15 Jun 2024 13:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:39 +0000
Files and hashes:         1: 3oAeNWy6PYbk92k4scKk0X807qU.roa (hash: Zo37FF6HkWDPefh3vep2yJeu3ABlxtUVEMS6dbrYLWE=)
                          2: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: Byuv9wtuPMYSCHGDDEYIREYnImGQZMVhBokPCbYh9+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:54:4f:dc:71:9a:24:36:5a:0e:16:f8:88:eb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
        Validity
            Not Before: Jun 15 13:00:39 2024 GMT
            Not After : Jun 16 13:00:39 2024 GMT
        Subject: CN=40d175b7244f01f7c8729ab034c4adc9c8661351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:bf:95:2c:1a:55:d7:c9:97:37:cb:59:18:
                    fc:ee:1c:63:a2:68:29:30:eb:de:0b:59:5d:25:55:
                    a4:51:17:64:a1:5f:b4:a1:db:bc:e6:87:13:56:b1:
                    13:da:c7:a0:86:cc:d1:7e:e5:54:51:09:1c:97:48:
                    ca:61:f1:c3:68:fd:1a:66:4d:d3:21:ce:9b:3e:02:
                    90:8a:15:b9:69:02:20:d9:a2:7f:22:f2:f7:0f:de:
                    af:20:b6:a4:ea:2d:cf:94:4e:d2:70:9a:d5:56:67:
                    e3:a3:04:91:da:f5:47:94:c6:57:28:b6:27:1f:2a:
                    8d:3a:ac:38:4e:44:98:a4:a0:8c:e9:c6:fa:fe:6d:
                    80:95:24:56:86:04:86:cf:0a:1b:63:38:bf:c2:f3:
                    f7:e8:52:e6:0c:66:27:9d:99:65:60:fe:8d:2a:f3:
                    28:87:54:72:48:cb:07:61:5e:15:84:ab:20:05:b3:
                    c3:b1:bb:18:3f:82:e2:b4:19:31:0c:31:f9:4b:3f:
                    4c:44:26:05:84:fd:11:46:75:75:ed:87:c1:23:f4:
                    60:3d:50:a0:36:ef:16:1d:a5:19:ec:38:da:96:2a:
                    34:b9:1c:e1:88:f7:74:93:e4:f9:21:70:80:ca:f3:
                    d9:8d:e4:e2:e3:50:25:5b:8a:c6:80:31:db:64:8e:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:75:B7:24:4F:01:F7:C8:72:9A:B0:34:C4:AD:C9:C8:66:13:51
            X509v3 Authority Key Identifier:
                keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:24:b3:5d:e9:c5:87:24:4a:fb:3c:12:d2:a1:d7:9d:ae:
         2d:81:e3:3d:c8:6f:8c:02:60:11:d9:bc:11:69:c6:99:ac:9a:
         ee:2b:0f:6c:00:1b:3a:d9:3c:21:72:05:36:4a:17:9f:69:d4:
         cf:b9:32:3e:e7:72:e7:a7:90:77:00:d0:88:9f:57:59:5e:72:
         b6:61:39:9d:75:d0:9e:a0:9b:45:aa:e9:32:d9:2f:75:e6:39:
         8d:96:1f:11:e3:b2:23:e6:df:b4:31:dd:10:1b:91:03:3e:b6:
         ae:24:d2:c0:86:1e:2d:b5:aa:9d:4d:57:28:04:9c:75:42:8b:
         01:a0:95:ed:68:14:24:a5:49:68:ca:a5:d5:ad:5a:c6:73:46:
         db:5f:7e:64:b7:7e:f6:90:14:ae:f0:7b:e1:f2:4b:a3:be:cf:
         b7:02:76:90:8a:43:21:2d:16:c9:7f:b9:82:ac:eb:0b:0d:ba:
         b1:25:d4:03:30:24:59:52:a4:b8:33:0b:e5:24:a7:55:6b:d5:
         cb:48:8b:0c:f6:1f:5e:e8:40:f7:da:74:27:af:c5:ab:01:f1:
         b3:06:a8:5e:13:35:ac:08:ff:db:b2:ff:35:a0:02:b8:02:47:
         b4:c2:b8:25:38:d6:14:f8:4f:3f:03:3e:c0:a8:7a:d2:8e:2b:
         c5:b0:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:56:35 2024 by rpki-client on console-ams.rpki-client.org