Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          /AGc5hgDYK+KS2ZBIwo9L+YJu9y4/XhCbVM8AItxj7Y=
Subject key identifier:   55:66:48:CE:0F:A1:DD:5F:1D:46:00:75:9C:87:40:A2:89:2D:85:40
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       0190448A855823F045241B407E9C1F5DCB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          08BA
Signing time:             Sun 23 Jun 2024 10:00:46 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:46 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:46 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: Cn6spEZp7RimRuBPwx8FCL+7v38qX99BJyu5cgvus3g=)
                          2: XnnWc3t1TrM3Ubz85jFHN9RP67A.roa (hash: wUMfZwr24tVvjk9S23Mem8LTrke6ZHjmB+UP4Zg8tAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:85:58:23:f0:45:24:1b:40:7e:9c:1f:5d:cb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Jun 23 10:00:46 2024 GMT
            Not After : Jun 24 10:00:46 2024 GMT
        Subject: CN=556648ce0fa1dd5f1d4600759c8740a2892d8540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3d:1e:e2:5d:c7:dc:93:40:50:ff:18:97:4c:
                    f5:48:d1:be:81:79:ca:0f:e9:1d:35:90:0e:6b:0b:
                    90:1d:a7:9e:b8:fe:c3:74:9a:ba:11:a1:e9:3d:44:
                    40:f7:29:ae:9f:09:ad:02:50:45:fa:fd:ee:55:a5:
                    a1:e8:c8:c6:11:55:ee:cd:44:4e:8d:1b:7a:2f:2c:
                    15:7d:1d:6b:66:84:50:71:8f:ac:55:a9:53:a6:95:
                    b5:cb:ba:2c:24:13:c2:28:11:32:78:bb:37:8f:21:
                    07:48:9e:50:4e:9c:e4:9b:94:e2:72:27:58:f1:7e:
                    44:c5:80:8c:09:ab:c5:b2:b7:ce:59:47:05:f7:69:
                    ad:42:83:02:4a:37:1d:1f:c1:07:04:c9:0e:7b:3d:
                    dd:10:d4:d3:a7:ef:a5:c2:a7:2f:1d:0c:32:88:65:
                    65:1d:04:74:4a:37:f6:5d:5b:09:c4:ff:09:30:d8:
                    70:de:c1:85:b3:cf:e0:7a:c0:df:af:c2:dd:5e:ec:
                    89:ff:7d:35:d8:c2:1f:02:0f:97:3b:bf:42:10:14:
                    e0:2f:f1:2b:2f:91:53:d5:8e:a4:90:36:28:05:f8:
                    1f:c3:e0:f5:71:c8:ad:19:0a:b2:03:40:3e:fc:a9:
                    df:74:93:5b:e8:dc:74:22:8e:84:ef:6e:3c:f3:3b:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:48:CE:0F:A1:DD:5F:1D:46:00:75:9C:87:40:A2:89:2D:85:40
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:16:bb:92:da:86:c0:7b:97:81:3c:af:be:73:96:34:e2:f2:
         3e:f4:80:05:d2:d0:64:9f:ca:19:e3:55:2e:cc:91:af:28:2a:
         f9:02:34:84:35:6f:f8:b4:05:39:eb:be:66:8d:b6:a2:af:5f:
         15:9c:63:ec:41:08:03:77:a1:13:7e:de:cd:d1:68:a6:d1:42:
         e7:06:37:e7:47:e7:fd:8a:89:e2:b5:86:f1:03:b6:d6:49:d9:
         b3:13:3a:6c:97:a3:ae:a8:e2:e1:65:30:1c:be:9a:0c:97:5a:
         e2:31:a7:52:f8:0f:b2:30:d3:7a:50:58:81:a1:2a:c0:6b:4d:
         0b:6f:15:52:50:e5:f3:fa:33:ba:9d:ce:e3:96:76:7d:d7:77:
         d6:ce:8c:77:27:be:40:6b:41:6e:3f:d5:2a:b7:98:5e:c2:1e:
         88:5d:a8:3e:13:f1:53:e9:3a:0a:4c:82:e0:10:80:2c:d7:a0:
         ad:23:25:68:ff:63:ff:f8:60:b5:85:45:44:21:56:db:73:45:
         4d:47:13:6d:e7:a6:fe:89:d3:87:e7:1b:45:52:74:94:9f:c1:
         62:e1:e9:ec:60:54:3c:9d:bb:82:98:14:9d:6e:ac:3b:34:a8:
         17:9e:59:1c:04:4f:aa:f9:48:17:3f:a7:b7:65:08:1f:59:02:
         50:21:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:50:58 2024 by rpki-client on console-ams.rpki-client.org