Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          a6j4C07JDH2qkvlDQprYyhPcRpmhBydCU4wBKqvmEOU=
Subject key identifier:   E0:4C:BC:E3:DC:B0:65:73:DD:C6:55:83:E1:2F:91:B1:EF:C8:17:2D
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       01901CA174302E12E20E8E2FE404259831F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          03DC
Signing time:             Sat 15 Jun 2024 16:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:01 +0000
Files and hashes:         1: DqQytDeVMW5h8WKEQbRa1rPijz4.roa (hash: txM3XNHx1v9Dr0BDgpdasqWFjO4GE+HemqCr+mGH2GA=)
                          2: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: 4FyxgVkP53lyRanOEmt8GJLJoSBIy6oHgULTNIsTo/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:74:30:2e:12:e2:0e:8e:2f:e4:04:25:98:31:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Jun 15 16:01:01 2024 GMT
            Not After : Jun 16 16:01:01 2024 GMT
        Subject: CN=e04cbce3dcb06573ddc65583e12f91b1efc8172d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:cc:37:94:c5:10:4c:53:24:6a:62:e0:3b:
                    e0:8f:dc:30:8f:ee:d6:d2:dc:8e:81:b7:e9:99:e8:
                    ff:e8:8d:8a:06:e0:a9:d8:fd:5b:da:8f:c1:5a:da:
                    84:54:a6:c8:94:d9:1a:6a:a5:f2:6a:13:0c:d2:4c:
                    96:61:56:5c:c4:76:cd:5c:66:20:3b:2e:17:0e:06:
                    75:6c:1c:39:94:84:5a:5f:c9:4d:c6:f1:3a:48:42:
                    c7:ec:3d:cf:75:86:fd:0a:a7:b4:ba:04:e4:4f:80:
                    02:88:3b:99:78:54:c9:68:54:38:c6:2c:a6:d9:d4:
                    8a:20:44:e6:54:24:03:a8:63:d5:92:81:5f:e7:c7:
                    29:26:7d:d8:45:04:b7:d3:3c:28:e6:5a:d0:7d:7e:
                    5d:94:08:94:d9:e9:e5:5a:3e:cf:27:c6:9f:78:ad:
                    17:55:24:e9:0d:14:ba:3a:cc:98:8f:8e:c7:ac:20:
                    9a:eb:0c:3b:a8:4f:c6:07:c7:9d:20:f3:83:70:65:
                    0e:6f:95:30:4a:1a:ce:88:98:85:73:1d:00:14:f3:
                    95:9a:c5:dc:4e:03:0c:db:2a:67:52:70:ac:01:c6:
                    f5:72:35:61:a1:7c:45:7f:9c:12:8f:c9:79:b1:47:
                    27:95:02:59:e3:44:2e:72:1b:3d:f1:cc:a6:4b:55:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:BC:E3:DC:B0:65:73:DD:C6:55:83:E1:2F:91:B1:EF:C8:17:2D
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:8d:82:fa:73:82:69:29:b9:6c:50:6a:16:60:39:59:7b:
         59:ab:f4:96:7c:09:6f:4e:7a:bd:a7:3e:5c:67:25:84:a0:01:
         c4:74:fc:86:02:eb:95:5a:6d:ab:5a:a3:05:37:27:39:2a:15:
         5c:d7:62:6a:d4:eb:d0:4a:d8:ce:7d:c5:df:45:1e:f4:d9:a0:
         37:63:af:84:17:3e:19:c6:dc:15:0b:78:6c:0d:9b:ff:85:d2:
         d5:e3:6e:3e:88:b3:11:b9:5a:eb:63:76:4e:f3:2f:9c:01:1f:
         32:e8:6f:0c:dc:d1:97:a0:aa:7b:d6:94:70:e8:af:72:e9:cd:
         04:23:68:ba:54:09:57:79:99:be:7a:83:01:31:8a:c0:ff:b9:
         9a:aa:08:bf:a9:79:d6:9e:d0:a8:0f:66:03:2b:23:9b:b3:23:
         b2:88:18:8f:c8:ce:f4:bd:ef:3c:aa:d1:ec:68:26:fe:f3:28:
         b2:b7:75:21:90:8e:f4:07:3e:e8:5d:f4:91:3a:c8:88:ce:74:
         03:6b:e4:01:0c:ec:a6:71:dd:b4:8a:7b:23:fa:7a:bc:f1:04:
         40:04:d5:9c:fd:8f:d8:61:67:9d:87:b5:86:f3:07:de:0f:c2:
         eb:53:e0:3e:06:e4:e4:fe:b0:a2:98:5c:bf:39:31:b1:a7:eb:
         45:eb:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:35 2024 by rpki-client on console-ams.rpki-client.org