Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          gs1GuxwllnjXTPFQc2/QRhv6yfGDV5mtY9EqjwSIgw8=
Subject key identifier:   E5:99:CC:96:1B:0E:7D:37:8D:6C:98:95:12:81:52:50:80:5B:0F:E2
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       01901FDAE97B5556CF2A4F599BEA59A598ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          1145
Signing time:             Sun 16 Jun 2024 07:02:38 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:38 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:38 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: C4pYT8PAH4BtbljEE3KC1gNLCf+uTGOJa7hTeWQv3Uk=)
                          2: kIKAhgvOodsa_O0Br7sXETFt51Q.roa (hash: bd96VwputTnIUWhZDxzKLBiEr6g1NnL8+iXqtQKz7a4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:e9:7b:55:56:cf:2a:4f:59:9b:ea:59:a5:98:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Jun 16 07:02:38 2024 GMT
            Not After : Jun 17 07:02:38 2024 GMT
        Subject: CN=e599cc961b0e7d378d6c989512815250805b0fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:74:60:e9:66:c4:fc:fb:57:29:c4:25:26:03:
                    3a:a3:43:8f:23:1a:f3:9c:b4:12:bf:4c:e3:d7:6a:
                    36:c1:37:6e:65:e1:28:79:1f:57:b6:4a:cf:20:30:
                    ed:b2:aa:9e:c4:2e:0e:7b:25:cd:23:28:b6:0a:03:
                    42:5b:c7:36:e9:c1:16:13:df:48:6d:56:76:47:f3:
                    08:cc:72:a4:21:97:f1:dd:b7:14:c6:e9:ce:fd:fd:
                    02:81:66:b0:83:a4:94:7b:c4:0f:14:7f:cf:be:35:
                    e6:d7:75:ec:1d:66:85:c1:ae:8b:e2:c3:c2:e9:37:
                    b5:3f:30:bd:75:6a:21:0f:f0:c6:81:3f:0c:e3:74:
                    bc:2a:c3:b2:31:5b:fa:17:81:9e:d8:cf:e8:4c:7b:
                    a3:4a:a9:ff:0c:85:db:93:fc:26:bc:9c:e2:0b:20:
                    da:5f:00:38:84:3a:5d:6b:eb:d1:d8:70:73:84:ad:
                    b0:0d:7b:f9:74:f1:02:d8:e7:f1:0f:a6:9f:30:a5:
                    71:f0:28:a3:f8:67:5d:52:52:ce:9f:6e:62:8b:ff:
                    cf:fa:99:80:ec:c5:0e:0b:26:a3:aa:59:0b:6f:12:
                    ef:02:66:c3:fa:22:a1:dc:4c:d3:f5:b2:d1:3b:55:
                    81:11:45:69:0b:04:23:d4:0f:e8:93:4c:41:fd:24:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:CC:96:1B:0E:7D:37:8D:6C:98:95:12:81:52:50:80:5B:0F:E2
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:b8:81:1c:42:31:78:ce:68:f8:6d:1e:11:7d:95:18:7c:
         72:6d:76:1b:3e:2a:3d:a3:0e:b3:9f:4b:45:88:e2:de:a2:71:
         03:ce:9a:ad:8a:b5:9f:93:fd:b4:92:ce:38:7e:1d:25:ae:b9:
         ee:46:77:95:8a:f9:34:4c:f3:40:41:74:ad:87:f7:5d:95:58:
         fb:c8:78:6f:fb:33:f6:4c:df:89:81:6e:e8:6a:64:91:04:db:
         79:38:da:1b:6f:ee:9e:61:0e:39:b3:ac:cd:8f:8f:23:b8:73:
         ec:e6:dd:70:a6:69:05:72:86:31:f6:41:9e:9a:e3:7d:69:ff:
         1f:4c:56:b3:b0:b0:d8:df:cb:63:8f:a4:de:ad:55:66:02:50:
         52:05:5c:fd:c8:94:fd:10:56:86:a8:95:75:5e:90:63:33:f0:
         a5:9b:b7:d0:ae:aa:5d:f3:e3:c6:e3:73:04:f4:4c:09:30:77:
         c4:1e:1f:bd:f9:5c:bf:f2:92:75:5a:b1:31:0c:3f:5d:d1:0f:
         71:54:2a:fb:43:fa:33:d8:5b:f3:81:26:d7:6a:bc:2e:14:f5:
         3f:4a:6c:dd:21:b6:24:11:51:78:25:b2:e3:cb:0d:b0:3b:c8:
         e8:6c:d8:fa:79:b0:c0:70:dc:79:49:3d:c0:86:76:a4:b4:ad:
         e9:3b:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:54:58 2024 by rpki-client on console-ams.rpki-client.org