Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File:                     elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier:          Low/yaFYTaFemwQcgmq13x0Ct48jBG/gzrfl7coSHSs=
Subject key identifier:   AC:D8:6E:82:F3:CE:35:22:63:8F:1D:C9:DA:25:EE:0A:CC:68:FF:46
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       01901DED95444FE8BE293F68CF8A7BE0A8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number:          0212
Signing time:             Sat 15 Jun 2024 22:03:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:47 +0000
Files and hashes:         1: 6fsHGE6rHvyIoUgcKttXXlEw4D8.roa (hash: md6LUeaTE73C5uoPyNyXeSo+KPwUFRjel+/hJ4W2m7Q=)
                          2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: 4799nOVf7iUnQIAnrXeo8f3Es96X5i6We7NM2ecSIe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:95:44:4f:e8:be:29:3f:68:cf:8a:7b:e0:a8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Jun 15 22:03:47 2024 GMT
            Not After : Jun 16 22:03:47 2024 GMT
        Subject: CN=acd86e82f3ce3522638f1dc9da25ee0acc68ff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:95:e5:af:6b:0d:a2:a2:48:73:be:78:bb:
                    0b:23:09:ef:8b:47:5b:bf:c9:f9:71:a6:78:1b:6e:
                    22:e8:9e:8a:ac:5c:81:5e:c3:98:5a:b8:f1:b0:32:
                    32:9c:2c:a0:43:f0:b1:29:63:1c:9e:e0:8c:4a:59:
                    e2:0f:56:bf:ab:ba:ca:fc:8c:e6:e5:1b:6e:39:12:
                    b9:39:66:5c:95:82:d2:a4:a5:6c:75:7c:48:2c:c4:
                    0b:27:5b:b1:69:e7:64:40:99:25:e8:34:a6:4b:3a:
                    15:7a:97:b4:60:fb:cc:69:25:22:84:00:eb:c9:99:
                    2f:c1:cf:d7:cf:4e:48:40:81:37:0c:aa:cd:2f:e2:
                    cc:9e:08:25:c9:01:b5:e1:ba:a4:87:8c:fa:ad:cc:
                    67:1a:08:1e:57:b4:2c:c7:32:a3:30:03:b4:5a:e0:
                    e6:d9:e2:99:19:fd:81:b7:af:d4:cf:c4:79:20:9d:
                    4f:78:59:7c:7d:a5:e7:8d:e1:da:f3:54:ec:1b:e8:
                    ec:62:a5:3c:06:d8:17:c8:54:88:c5:17:91:12:24:
                    e0:24:bd:db:64:b3:54:b0:31:48:d1:4b:cc:13:27:
                    99:0f:53:34:8c:32:3d:7e:a9:24:ea:39:0f:45:0c:
                    f9:7d:08:c9:95:1f:a6:bd:41:eb:d2:80:bc:a3:0f:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:6E:82:F3:CE:35:22:63:8F:1D:C9:DA:25:EE:0A:CC:68:FF:46
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:19:99:90:8f:3b:02:f0:81:6d:59:8b:81:41:a3:77:19:
         77:b0:01:95:92:23:a1:01:41:df:e6:4a:ef:4b:52:ed:63:35:
         5c:18:be:da:0f:a2:fb:a2:71:8f:47:54:91:71:71:70:c8:80:
         c4:a7:6d:ba:f8:a7:79:46:b7:2c:db:97:f2:69:3c:60:d7:2f:
         27:7d:5e:13:b8:16:bd:4f:2c:a5:48:65:33:ca:f3:dd:24:a7:
         07:dd:04:ab:6e:24:69:3f:35:14:9b:cf:ef:92:8a:d1:36:74:
         1a:cb:3a:56:41:e7:0e:0f:e7:88:18:6f:23:bd:c5:69:81:83:
         20:44:a3:d1:c6:25:56:de:18:e1:d4:18:60:82:f3:4b:06:6d:
         89:7e:cd:4e:b0:d6:8e:2d:05:5f:4d:b6:c8:2e:33:84:1e:17:
         35:52:17:8c:d9:cc:83:a7:e8:53:7e:64:25:30:47:90:dc:8f:
         fd:2b:22:51:63:83:29:b7:59:1d:a1:d4:32:8b:92:b2:50:1e:
         2f:3c:d8:29:31:1e:23:46:c9:4f:bf:4f:c3:27:b9:80:58:bf:
         25:d4:0d:76:77:d4:4d:9b:ef:46:18:cc:69:4c:fd:b5:b7:cb:
         81:8a:7a:88:9b:ab:80:85:9e:c3:2b:30:77:26:62:45:e2:8e:
         22:05:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:07 2024 by rpki-client on console-ams.rpki-client.org