Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File:                     458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier:          P+Vt9yCeJwT2RogI08MYKOR38s+nKdJErzWf8e+0shU=
Subject key identifier:   D4:16:16:09:7B:BA:D7:13:2C:55:E4:25:7D:EA:C0:6D:1D:EF:D9:EF
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       01901E588EE9493BAB7DECE33A7D10FEC4EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number:          11CC
Signing time:             Sun 16 Jun 2024 00:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:38 +0000
Files and hashes:         1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: ySgUe92sgQJH2tpgQSfezzFjtJL8JvDj0SV2TMnIyDQ=)
                          2: JZVOQicSqQ9kZ0L8_JALfXURfRY.roa (hash: lbLC+42djuWZ60UKXlVUGmagjVYOlRMLaKKaBMnRIjg=)
                          3: qaPWFc8W4DHYDBR4lTSF2V3DUE4.roa (hash: xnbDjFAfr5Kvy9hpNdoqK7W1S/GekZWZT8BX+UHZFr4=)
                          4: tJmaU_8MK0aMA95XAsLisvttvnI.roa (hash: Bjr00zJRI9ZW+iHEJNa+a5rA8F8n3/lBrtZFiQ8Wz3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:8e:e9:49:3b:ab:7d:ec:e3:3a:7d:10:fe:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Jun 16 00:00:38 2024 GMT
            Not After : Jun 17 00:00:38 2024 GMT
        Subject: CN=d41616097bbad7132c55e4257deac06d1defd9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:ef:de:19:57:d1:18:fe:62:2f:6a:c1:20:
                    df:db:a9:e4:dd:bf:f9:ef:a9:d1:e7:fa:e2:04:bc:
                    e5:42:c8:e8:45:35:1f:6b:fe:ca:71:e1:83:80:0d:
                    3c:23:81:97:32:35:61:a3:a9:2e:1d:ba:e8:e9:9d:
                    b8:fb:58:40:6a:0a:54:e6:7b:e9:d3:b6:33:14:12:
                    f0:6b:fe:d9:c8:0e:19:4e:bc:d5:4a:9c:d8:83:b1:
                    cf:c2:5b:5c:fe:27:83:6e:5f:ec:1e:25:51:5e:46:
                    1a:44:2c:5f:2e:23:05:e2:61:c1:70:c0:b8:5b:0a:
                    da:51:4e:e9:56:c2:57:64:52:0b:84:ca:8a:c2:51:
                    c4:e2:7b:d5:28:50:44:1e:ad:5b:b6:cb:25:c6:1e:
                    b9:a1:56:85:f0:12:ab:ad:87:dc:7d:67:7f:0f:70:
                    5f:b6:72:c5:33:bd:77:63:7e:25:43:2b:67:22:21:
                    a1:1c:46:78:02:f6:0c:09:7a:b3:78:30:48:91:1a:
                    33:76:f5:36:29:76:bb:6a:d8:14:62:59:c0:eb:c5:
                    13:2b:e5:e1:67:18:2c:18:a4:9d:fa:42:e0:8b:1e:
                    bf:31:50:a3:8e:1f:99:8b:69:44:cd:ff:b2:df:59:
                    96:a5:66:5e:5d:75:4b:58:48:12:ee:4d:0e:be:e1:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:16:16:09:7B:BA:D7:13:2C:55:E4:25:7D:EA:C0:6D:1D:EF:D9:EF
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:ea:c2:3b:68:e4:10:2d:8a:e7:6a:71:77:93:cc:b3:a0:
         ee:6d:ed:29:fb:0d:ad:ac:05:60:24:6f:5b:b1:68:0e:8a:dc:
         0d:bf:c2:99:a3:2f:6f:c7:f4:58:87:fe:8c:e0:38:cd:ed:15:
         d8:80:8f:ed:62:a2:11:be:f9:54:fa:a8:08:eb:a7:fc:7d:db:
         f8:31:9b:4c:96:ea:9b:bc:9b:15:48:04:e4:2f:6c:cf:c8:aa:
         bc:20:f4:fe:66:b3:41:85:92:ae:a2:64:dd:52:56:3c:e2:73:
         0f:b5:df:e3:2d:f1:79:21:c1:66:bc:58:93:42:95:36:51:07:
         c9:2e:67:39:e0:1d:07:e6:92:c1:9e:15:e7:5a:6c:3c:01:2b:
         74:43:37:0e:e3:33:32:01:ea:9e:06:73:af:aa:65:5e:80:45:
         71:aa:51:30:4d:d4:68:11:2c:cc:b4:a3:1c:78:e6:75:ce:99:
         c3:d1:2f:4f:38:51:a9:ce:39:50:d9:a1:2a:6a:8d:dd:1e:14:
         19:f7:48:73:ff:2e:68:bb:84:76:b0:79:8d:1b:16:a8:b1:ab:
         6a:87:1f:e1:43:6d:2c:b0:35:76:fa:31:ef:a0:f7:45:0e:80:
         34:07:b1:47:c8:60:52:3d:18:be:90:8a:50:06:52:e6:04:77:
         3d:6d:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:03:05 2024 by rpki-client on console-fra.rpki-client.org