Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File:                     WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier:          mzZCXZ1NEVwVI7ZU/2ZO5h9mDoC9ny4uYdi6Ebl2WME=
Subject key identifier:   E4:04:1F:D1:E4:4A:FB:57:3D:62:82:11:31:8B:7D:FB:5E:C5:72:9D
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer:       /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial:       01901EFD957398696B700C7C0ED8CEF7F18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number:          054F
Signing time:             Sun 16 Jun 2024 03:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:53 +0000
Files and hashes:         1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: kUCNoo3NDOCoIniyyp86NwJUNQgprPym56QCfYEcJSQ=)
                          2: fewNTuSaupIUJYdzfVD7kPmvWBM.roa (hash: tNbb69C/cLgIj7y/34jeI6l9WdRwaeOwonadTKiXjnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:95:73:98:69:6b:70:0c:7c:0e:d8:ce:f7:f1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
        Validity
            Not Before: Jun 16 03:00:53 2024 GMT
            Not After : Jun 17 03:00:53 2024 GMT
        Subject: CN=e4041fd1e44afb573d628211318b7dfb5ec5729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:84:ce:80:6d:25:24:6e:d2:44:7d:fc:1f:
                    cb:ba:7c:ca:dd:be:3e:a8:5a:2c:73:e7:c3:41:5f:
                    9b:20:f4:d8:fe:53:87:37:b4:c6:4e:9c:8b:6c:ad:
                    f1:a2:bc:c9:64:26:62:44:b2:1a:3a:2c:9e:30:14:
                    60:9b:a7:12:0e:a0:e6:15:8c:09:f1:16:71:6b:7e:
                    7a:66:06:43:cd:fc:c4:2e:38:cd:82:70:09:bf:4e:
                    ea:74:d3:30:43:99:e4:3d:12:99:b8:d0:92:fd:af:
                    41:34:53:c1:93:b9:e2:69:09:8e:63:52:1a:38:2a:
                    32:20:66:e3:53:c6:91:9c:8e:e4:93:40:dc:b3:af:
                    67:ec:76:d5:63:65:0c:b1:89:27:81:48:f4:16:72:
                    8f:bd:9b:d1:a5:33:56:35:0e:98:64:07:74:15:af:
                    57:41:f7:44:fb:fa:18:58:65:79:c9:ba:4b:19:4e:
                    d7:fb:e2:d4:f9:ba:f1:a8:6b:b5:f5:f6:b1:0a:72:
                    ed:3b:88:b8:dc:1b:8e:a2:40:96:bc:b8:c1:55:05:
                    8d:c3:ac:fa:d9:4b:a9:a2:42:f9:0e:66:2d:1a:f8:
                    4f:a6:35:b7:9e:84:99:8a:4c:f9:d5:73:8f:8e:2d:
                    c8:f7:72:f5:90:5b:e8:0e:28:b9:68:a1:d0:61:15:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:1F:D1:E4:4A:FB:57:3D:62:82:11:31:8B:7D:FB:5E:C5:72:9D
            X509v3 Authority Key Identifier:
                keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:80:bf:30:1a:9a:b8:f1:70:0d:e8:4c:6f:25:17:40:52:
         4d:17:ae:f1:32:9c:7e:97:4b:94:7e:b3:ea:a6:c7:be:c9:e8:
         6c:ce:5c:aa:af:1b:73:0a:fb:1a:10:a4:8a:bc:f9:8b:27:c8:
         49:30:c3:f4:5c:0a:d1:66:36:90:88:df:9f:2c:d9:4d:6b:a6:
         58:99:43:f5:ad:b1:c8:cf:4f:77:b0:c2:ba:1a:34:36:8f:bd:
         39:ac:23:5d:e5:7d:28:2e:1d:15:69:49:96:22:eb:26:74:cb:
         8a:e9:e5:11:25:91:37:d5:f8:e2:1a:2b:2a:c2:ca:e0:88:eb:
         24:55:5a:de:8a:61:ce:bc:25:f3:5c:0f:46:92:d1:6b:1d:95:
         89:83:72:e0:c2:08:ee:cd:50:d6:11:7a:b0:0d:77:f5:12:49:
         d3:c4:62:fc:bf:f3:ac:37:12:1e:6a:82:6f:8a:2d:fd:2a:ea:
         43:27:03:d8:41:c5:f8:23:bc:89:44:57:d4:88:0f:30:cb:32:
         1f:b3:3f:f1:9a:af:71:7d:43:6c:38:39:e2:24:84:68:41:76:
         1c:a2:11:33:f5:4e:d8:1a:b3:cd:fd:fd:b7:28:bb:52:11:50:
         be:01:6f:65:96:7a:16:a3:55:b1:5e:f8:4a:df:c6:80:97:18:
         37:45:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:10 2024 by rpki-client on console-fra.rpki-client.org