Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File:                     rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier:          lpZHkWr8g96Lm1p9d4sBRBaJXA9kTK1eZar752W/ssY=
Subject key identifier:   83:DF:BD:F9:9B:14:CF:8E:AD:75:6A:FE:90:93:91:E2:6E:D1:29:A6
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer:       /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial:       01901D0F280B2A712E94BA4526A7CC4B806C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number:          0614
Signing time:             Sat 15 Jun 2024 18:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:50 +0000
Files and hashes:         1: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: dXzzLhLChKBUtt738R342F29lWnIorxa82pL6FC7V0E=)
                          2: t4jnOQdYy98wRe_kbij1S9ctR3E.roa (hash: E8CDGxT7LEPIs6E9OlQs7hsjk6Tvt4G7w58+BQbWU3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:28:0b:2a:71:2e:94:ba:45:26:a7:cc:4b:80:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
        Validity
            Not Before: Jun 15 18:00:50 2024 GMT
            Not After : Jun 16 18:00:50 2024 GMT
        Subject: CN=83dfbdf99b14cf8ead756afe909391e26ed129a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:2f:f2:b9:a1:18:75:eb:76:71:35:bd:63:
                    b6:0c:d2:e9:23:cc:00:25:61:5d:18:6b:bb:00:3a:
                    c2:e2:6a:48:76:d4:6c:e4:b8:1b:5c:e7:f5:0f:1f:
                    d4:dd:79:d5:65:2e:eb:18:a2:52:50:35:e9:1d:11:
                    c7:10:7e:dd:10:82:b4:8c:42:e0:07:dd:0d:bd:13:
                    6b:ac:13:9a:c4:90:d0:2a:c0:ef:01:77:d8:4d:47:
                    c5:a9:a0:5a:47:ed:d0:b4:db:c2:90:a1:47:1d:83:
                    9f:a8:ce:8c:cb:23:e5:1a:11:cb:19:8e:92:ef:fc:
                    de:60:7f:51:1b:b1:1d:ae:95:24:14:c1:48:9e:ce:
                    a4:4f:f0:c4:9a:43:66:f2:e4:be:90:6b:37:bc:b5:
                    c9:9d:f6:54:fa:9a:5d:a2:74:6a:7c:5b:b8:c3:f7:
                    1e:ff:f4:83:30:b3:12:30:20:1c:03:36:85:cf:33:
                    e8:95:0e:74:56:42:2f:0c:da:3a:17:be:bc:c9:e3:
                    b6:44:1b:49:1d:20:d9:34:97:09:c2:7d:cf:7f:42:
                    23:5e:ff:cc:61:68:d4:c4:73:24:8b:9a:b5:3b:b0:
                    6f:d5:dd:a9:11:73:45:72:13:56:8e:2b:a0:67:d8:
                    90:46:4b:96:ae:d2:1b:73:05:95:cd:56:e6:e4:78:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DF:BD:F9:9B:14:CF:8E:AD:75:6A:FE:90:93:91:E2:6E:D1:29:A6
            X509v3 Authority Key Identifier:
                keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:25:0a:38:d8:ce:de:b3:cf:a6:81:01:da:9c:ce:1a:24:
         dd:c2:c7:57:72:0a:f2:c5:26:25:12:89:5c:98:e8:97:e2:54:
         13:c2:30:45:08:85:86:86:2b:9b:ed:3a:42:3b:61:bf:44:39:
         e5:0c:ed:dc:bd:5d:36:15:5c:02:99:5f:6e:7c:52:b9:50:c6:
         07:6a:30:17:a4:84:19:28:7f:c2:86:18:48:6e:d7:4a:27:e0:
         b2:a8:93:e8:97:20:e2:6e:b1:66:08:e7:14:01:e4:7c:eb:71:
         10:4a:43:58:d8:b4:f8:ee:3f:da:c3:84:8d:6e:92:1b:71:46:
         6b:23:46:29:62:b3:5c:ac:90:2e:b3:63:e1:d6:ee:cc:6b:86:
         d3:a2:c3:79:b6:75:6a:9e:f8:17:eb:2c:c7:50:98:7a:93:22:
         e7:fd:87:f7:a5:09:34:65:bf:bc:2d:52:b0:8b:d3:33:ac:6a:
         93:f0:fd:86:49:1a:39:cc:6c:f1:9b:c9:17:55:60:62:e5:f9:
         2f:e9:96:64:3f:d0:76:75:9d:85:8f:03:b3:74:91:71:0e:52:
         c5:d9:49:48:be:fe:76:ae:07:92:85:f0:fd:0b:d5:be:da:77:
         a0:de:c5:9d:79:cf:0d:4c:cc:17:80:33:3d:bd:37:03:b9:db:
         f2:1e:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:09:58 2024 by rpki-client on console-ams.rpki-client.org