Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File:                     V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier:          MPGz58y0q46h+RnJlftpTGDuPbve0onwPaMpmITNZkU=
Subject key identifier:   5E:61:61:DF:2E:0D:BE:2A:C8:FB:19:BA:CF:C5:43:A2:7D:9F:E4:D0
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer:       /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial:       01901BFD03528158E2E7816BABA13AD59888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number:          07F0
Signing time:             Sat 15 Jun 2024 13:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:24 +0000
Files and hashes:         1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: VevbuffajsozgZ6aRAnikrKa4YCjuOwt74dLkNJsvNM=)
                          2: oaT3wa1qDaUMv1f7UCdWbxxv1Dk.roa (hash: u6RGitc4Rvk1ybXuc7w5+av7rq63hwVeDy/OlW51NYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:03:52:81:58:e2:e7:81:6b:ab:a1:3a:d5:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
        Validity
            Not Before: Jun 15 13:01:24 2024 GMT
            Not After : Jun 16 13:01:24 2024 GMT
        Subject: CN=5e6161df2e0dbe2ac8fb19bacfc543a27d9fe4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:5d:82:81:c5:1b:ff:99:ef:53:42:75:5d:
                    17:04:d5:51:f9:c9:7f:9e:75:dc:ef:2b:c0:ad:6d:
                    cb:b5:4c:19:0d:95:ec:b0:94:ec:50:8d:88:a2:ea:
                    a3:ac:bc:b6:ad:7b:62:9d:3f:a9:97:26:02:7f:f5:
                    5f:87:e2:1f:94:e1:9f:7b:d8:ef:f7:a1:bd:9e:66:
                    1b:fe:dd:07:9c:6e:7e:fd:93:11:ed:b5:90:e1:80:
                    55:f8:31:f3:d8:22:9f:a2:5f:ae:eb:98:d5:14:6b:
                    42:1c:75:ff:d0:c6:11:54:f1:45:f9:ec:53:26:5f:
                    1d:0d:02:a5:6c:f5:c8:02:31:8b:04:07:66:41:a7:
                    f2:8d:82:b3:16:4c:b1:8b:b1:df:aa:30:e3:cb:06:
                    91:ae:5d:b6:7e:67:f7:d6:3d:c3:be:34:dd:27:0b:
                    4b:16:13:d5:1c:3c:54:7f:93:b2:84:bd:3d:35:2f:
                    f7:9c:d9:8b:71:c7:62:22:9f:4c:59:a5:3b:3f:de:
                    dc:db:80:0d:2e:f7:97:d3:b7:ad:c6:90:d0:56:ee:
                    ff:c2:22:ac:c0:73:91:ae:97:47:e2:3a:ed:a3:b5:
                    81:56:5b:e8:f4:62:7d:27:1c:ff:41:77:36:c2:3a:
                    e2:11:e6:64:75:ec:10:00:26:f7:d0:05:62:e7:0c:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:61:DF:2E:0D:BE:2A:C8:FB:19:BA:CF:C5:43:A2:7D:9F:E4:D0
            X509v3 Authority Key Identifier:
                keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:0b:16:93:26:03:13:d7:2d:30:2c:7c:0f:6d:1f:21:8f:
         a7:a9:de:b6:81:16:1c:2b:61:5e:3a:91:08:89:69:f3:0c:90:
         c9:00:bb:40:6a:42:c4:ec:1a:d5:8c:84:5b:c3:38:4c:0e:32:
         fe:e0:1d:a3:db:65:e8:5b:6b:65:c5:11:32:87:bd:a3:35:93:
         4b:31:f0:a6:94:65:5f:f5:5f:85:6e:66:1f:7c:27:fd:0b:95:
         46:9d:42:3b:9f:f5:2f:29:6f:3b:51:69:9d:8c:a8:52:88:c2:
         57:79:13:f5:5b:4b:b0:39:85:67:6d:b9:c0:46:a6:db:1e:2e:
         a0:09:cd:32:45:68:58:46:fc:3f:b6:4a:c6:c8:78:6b:4f:da:
         8c:5e:04:41:9d:10:10:44:08:2e:17:6b:b0:29:cf:0c:5c:08:
         33:14:0d:82:e1:db:82:b7:fd:79:c1:37:b1:21:7a:af:7e:f7:
         64:3e:b9:73:38:f2:3e:b7:bd:59:2d:72:62:5d:1d:99:18:d2:
         d2:7d:a3:40:98:f4:ca:32:0e:a5:13:c3:41:4f:a6:ea:dd:b7:
         36:b4:28:3b:06:9a:a7:8e:57:95:70:24:5d:b9:d7:6c:06:a2:
         3f:2d:d9:9c:a9:5f:c5:99:a9:83:31:d5:86:e0:c6:83:07:f3:
         34:8e:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:12 2024 by rpki-client on console-fra.rpki-client.org