Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File:                     XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier:          NgeLGn6Uvidm7RoiCMlAkHl3t2pRYBYrXEqpu16tm6s=
Subject key identifier:   73:38:0C:5D:59:B8:7D:B3:92:90:3B:38:09:D1:56:EE:D6:4E:9E:15
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer:       /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial:       01901EC6DCA0888E9A954A083D3092CBE44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number:          1036
Signing time:             Sun 16 Jun 2024 02:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:07 +0000
Files and hashes:         1: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: zVLOUkw2iUxbkx6/4Wwq6UG9zcPLDR9/rdI2jmdT05s=)
                          2: oDez6TEVUoEvgctcSdpeGk6jrUA.roa (hash: Htcy73my5W7nqRxBPakeI5o1amKZPnkc8bVZiu5glf4=)
                          3: tWv38KFjoQM-_KWFvFMTczJRG78.roa (hash: rP+xZZy+IdHuz3j1zur5ys+SVN3T/wOnPuqWMeAe+4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:dc:a0:88:8e:9a:95:4a:08:3d:30:92:cb:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
        Validity
            Not Before: Jun 16 02:01:07 2024 GMT
            Not After : Jun 17 02:01:07 2024 GMT
        Subject: CN=73380c5d59b87db392903b3809d156eed64e9e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:e5:8a:2b:1e:71:9e:fc:3c:70:57:8d:af:
                    f8:ef:c8:b7:37:75:c1:37:9d:74:c3:f4:1f:8b:cf:
                    e2:21:7d:b4:ff:24:61:b3:ae:1c:2d:8a:14:a0:f4:
                    72:70:51:b5:19:7f:88:9f:38:0a:c9:b3:2f:04:9e:
                    3c:b4:d2:da:87:c2:9d:ff:2d:95:07:21:e8:e4:6e:
                    a9:42:d4:d3:e1:ba:8c:7e:10:e9:58:56:b8:4b:07:
                    2d:56:5b:19:56:32:10:86:25:0d:7c:b4:83:08:8a:
                    12:83:fb:a9:39:5f:0e:09:f3:ca:21:df:67:de:54:
                    26:dd:dd:18:86:a0:8f:fb:d9:fa:b4:76:89:f7:37:
                    7f:59:97:25:a9:64:0c:70:b2:30:7a:34:d6:2e:6a:
                    bb:c9:1f:9e:55:e7:13:49:1f:ea:19:78:4d:f2:13:
                    34:4b:d8:f9:ad:f5:14:74:7d:af:84:45:ed:bb:9e:
                    e5:11:97:ce:80:fb:fc:76:e0:17:96:76:ad:60:4a:
                    94:66:e9:6d:54:a9:08:2d:7e:ef:53:e0:bd:31:a1:
                    14:1b:e8:b4:de:64:39:98:bc:03:fc:f9:35:84:18:
                    09:c0:26:78:85:59:7b:b3:fc:ea:23:57:05:2b:4d:
                    da:d2:74:72:35:b4:f6:a6:b7:82:73:de:22:71:25:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:0C:5D:59:B8:7D:B3:92:90:3B:38:09:D1:56:EE:D6:4E:9E:15
            X509v3 Authority Key Identifier:
                keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:1d:2e:95:14:ab:e2:59:29:82:9c:43:11:ca:60:ce:ed:
         94:1b:ce:de:e0:0a:9d:f1:d9:82:55:24:78:17:ab:e4:f4:1f:
         fb:38:fc:8a:fc:1f:9b:36:46:69:be:6d:40:9e:b1:3a:11:de:
         68:d4:03:7f:6a:bd:d0:44:1d:7b:51:bc:c0:fd:81:0b:16:a5:
         3a:b8:59:cf:83:ea:7b:6b:ee:ff:31:b0:2a:a9:c0:75:fe:0b:
         24:83:48:c1:c5:25:c8:de:65:58:c5:9c:3d:16:fb:89:b5:82:
         8e:46:85:69:28:5c:1e:70:87:78:a1:64:16:cb:42:8f:37:cf:
         ed:ca:e9:31:11:14:92:dc:32:62:4b:3d:9c:46:42:e2:15:40:
         84:68:79:75:93:04:cd:a2:b0:77:54:ad:e1:d1:14:3a:50:a2:
         5c:21:c5:d5:a0:3b:29:27:cf:18:da:f2:7c:67:bf:44:39:a7:
         29:07:ba:2a:6a:f7:62:39:cd:bc:98:07:98:68:d1:0a:a5:e7:
         01:96:f2:7c:89:8f:8e:aa:a3:68:f2:03:01:fd:81:32:9f:b1:
         0f:b8:9b:79:85:33:bb:b3:1d:2a:b8:ee:c9:2a:3c:94:ec:07:
         17:ff:ab:0c:0b:ee:06:e2:9d:1d:96:f9:52:9a:41:98:cc:dc:
         dc:00:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:42 2024 by rpki-client on console-fra.rpki-client.org