Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          NgRjGWl9CkG41hApEU5K7AmX/WhyZV1ej226BE+PI24=
Subject key identifier:   E5:EC:DB:A6:BD:F7:3E:8C:A7:F3:21:0D:52:CC:2C:C3:DF:C5:F9:FE
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       01901B21047B59D19230C802E426F940C3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          0CEE
Signing time:             Sat 15 Jun 2024 09:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 09:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 09:01:06 +0000
Files and hashes:         1: R72GYrk4HwBQWQe_AsSO2kZ6u58.roa (hash: L2G9HPx42ifnYP123qAw3CGoLvdoH6OsKvgkGESdv+c=)
                          2: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: DbKyCB8D2tuNtdSf+2AbnoaNtywZMPT5b0mLJIjTCfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:21:04:7b:59:d1:92:30:c8:02:e4:26:f9:40:c3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: Jun 15 09:01:06 2024 GMT
            Not After : Jun 16 09:01:06 2024 GMT
        Subject: CN=e5ecdba6bdf73e8ca7f3210d52cc2cc3dfc5f9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:00:56:47:aa:d7:c1:23:8d:ec:7b:c3:a1:
                    1c:2c:b4:90:ca:ce:9c:e9:c9:53:71:a7:a9:18:96:
                    f7:34:62:24:52:38:9b:99:25:41:98:75:dc:a1:86:
                    3b:fe:33:90:93:06:c3:08:99:85:c6:f8:b4:03:51:
                    ae:0f:fa:ea:4d:8b:57:54:e5:d1:68:ee:de:f4:a9:
                    b4:79:b6:35:81:fa:51:da:51:13:a8:93:b4:e0:19:
                    b2:20:e3:78:46:2e:4a:9d:b8:2f:a3:8b:0e:1a:6f:
                    93:38:85:42:ac:69:d4:47:ae:10:c4:1d:07:bd:40:
                    89:65:23:80:79:71:24:06:c2:cd:1d:c5:37:a8:bb:
                    7e:87:c3:dd:3a:c2:17:e9:ec:27:20:61:0a:ab:90:
                    99:e4:39:fd:bd:91:ee:ad:4a:67:54:71:d2:28:41:
                    cd:4c:82:41:65:56:69:0f:67:81:fc:fa:38:46:c8:
                    57:9f:b4:b5:f5:98:88:a2:35:32:2c:df:b6:50:bc:
                    29:ab:04:15:c1:1a:76:ff:f1:11:55:2e:58:1d:04:
                    19:ca:84:6d:16:77:45:25:03:82:03:e6:e0:0d:20:
                    31:f4:88:b2:34:ed:0e:cd:79:1b:78:f7:72:44:5a:
                    0e:ca:59:26:3f:09:4e:15:cf:24:8c:55:b3:53:27:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:DB:A6:BD:F7:3E:8C:A7:F3:21:0D:52:CC:2C:C3:DF:C5:F9:FE
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7a:1e:87:96:81:91:a5:36:c0:98:8b:d5:09:65:7b:fb:52:
         8b:ff:7a:a0:a8:1c:60:b0:37:ca:d3:e4:d6:e8:92:ec:e3:41:
         f8:2d:67:43:64:16:f7:35:58:a8:23:69:c2:28:0c:7a:55:cf:
         1d:04:63:b3:d7:33:50:7c:75:40:43:77:69:2f:d5:69:e7:17:
         1d:3a:dd:95:96:9a:50:c7:f1:96:3c:df:04:47:66:92:34:46:
         f0:60:7b:3b:51:05:da:71:96:06:f3:f9:3a:63:8f:66:63:bb:
         58:f1:dd:c8:5a:1e:f8:e2:46:65:3e:9c:87:a1:19:56:38:4e:
         f0:c6:51:6f:cd:ff:71:d8:65:64:1b:74:a3:f3:74:84:07:b5:
         c2:50:5a:98:18:16:a6:4b:c6:a5:5f:a9:52:be:c4:a6:5c:a3:
         f9:c3:35:49:5b:fa:e4:6b:9b:f4:24:07:ba:5f:ff:9d:03:b4:
         92:79:b8:6e:7a:2c:a6:e6:e2:bb:0c:78:05:13:74:ff:8c:47:
         e7:e0:7c:d1:ee:65:99:87:67:3b:9b:43:60:a1:df:64:ab:c8:
         12:91:bb:43:87:70:82:ca:1d:6f:85:98:d7:be:97:cc:1b:d2:
         97:1d:d3:db:d7:27:28:26:4d:8a:19:81:a7:7f:e3:80:32:b7:
         9c:1e:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:54:48 2024 by rpki-client on console-ams.rpki-client.org