Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
File:                     45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft (raw, json)
Hash identifier:          o+ZMsm3awqm12Tk9+kZf3HpmWhP2MSYoqbPgmsB0KS4=
Subject key identifier:   FF:85:45:83:95:1F:C1:0B:ED:DC:1B:55:01:FE:02:6A:D2:47:97:C1
Authority key identifier: E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E
Certificate issuer:       /CN=e39b1000e786b4fd6d61737790e4f3429892650e
Certificate serial:       01901DECB3202F8E93B1DC7C84E7866B2846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
Manifest number:          0A71
Signing time:             Sat 15 Jun 2024 22:02:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:49 +0000
Files and hashes:         1: 45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl (hash: ramxxgylCrR2nALLqjZeEjqa4gcONymfTUf/TGzJ3Z0=)
                          2: fkb-wFSujNU3L7Tz3O_wi7H2n-Q.roa (hash: +8vx8PaGwLUDNlX/mFuxb2e4aksK7V2DgTYg0GqQxFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b3:20:2f:8e:93:b1:dc:7c:84:e7:86:6b:28:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39b1000e786b4fd6d61737790e4f3429892650e
        Validity
            Not Before: Jun 15 22:02:49 2024 GMT
            Not After : Jun 16 22:02:49 2024 GMT
        Subject: CN=ff854583951fc10beddc1b5501fe026ad24797c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:f5:92:f8:19:6d:fa:b9:9d:80:30:10:f9:
                    e6:fa:3a:c1:62:60:73:1d:cb:d6:06:3f:e6:bd:b9:
                    b2:95:3c:e1:2a:15:26:d3:3c:df:88:61:80:26:17:
                    75:7d:93:6d:47:ad:c1:fa:0d:81:6d:98:61:97:8d:
                    21:e2:39:92:81:71:bc:74:d8:45:6a:87:bc:b2:fc:
                    e8:b3:87:14:89:aa:3d:b3:c6:ae:8b:c2:0b:4b:7d:
                    55:13:86:7f:e6:6e:2c:69:7a:53:5f:78:34:5f:77:
                    a1:8a:1c:0d:8e:ca:83:e6:5e:8a:47:08:99:b9:7d:
                    4f:c3:70:39:e2:70:d0:a1:29:66:71:30:f5:6f:9f:
                    2c:8e:18:1a:ea:c1:13:23:e0:0c:91:07:db:9c:4b:
                    58:e6:e3:f8:24:5e:dc:1a:00:49:34:af:33:92:79:
                    2f:a7:60:65:46:ee:53:63:8c:6b:e4:95:74:17:95:
                    5d:d3:da:7e:1d:4e:6d:7f:c8:83:71:83:c9:bb:70:
                    fb:63:e7:97:88:d5:96:f9:38:a2:d3:49:69:5d:4c:
                    d9:94:39:ba:2e:3e:b2:fb:4a:ed:17:61:d0:78:0e:
                    44:ca:c4:31:a3:f3:35:2a:1a:6f:ad:6b:bb:9d:ac:
                    80:10:db:f1:b9:cb:23:97:c6:ac:26:c0:2e:58:f2:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:45:83:95:1F:C1:0B:ED:DC:1B:55:01:FE:02:6A:D2:47:97:C1
            X509v3 Authority Key Identifier:
                keyid:E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:e7:de:7b:6f:fa:38:d6:4c:71:9e:3b:db:84:3c:c5:8f:
         4c:ed:bd:d9:13:33:76:bd:0e:4c:4a:14:56:cd:c1:9d:de:66:
         13:e8:e5:1b:5e:11:e4:c3:90:83:59:3e:1e:9a:3c:d7:93:5e:
         34:eb:c6:67:75:59:78:1a:b7:af:98:bd:34:58:59:7f:be:a3:
         34:e5:f9:ee:c1:c2:c5:25:76:7e:eb:64:e9:1b:4f:b4:ea:45:
         14:ff:80:ea:c5:cf:58:38:c1:32:cb:d9:dc:c6:ea:c3:af:bd:
         b2:ff:c6:e6:ab:10:12:24:b4:ec:d4:d2:f3:9c:d3:f7:32:da:
         26:87:ba:c1:cf:58:d6:1d:3b:84:8d:0d:bb:e3:78:6b:26:76:
         6c:4b:98:7f:47:14:f0:a8:9b:97:10:f2:a3:58:4c:37:20:c7:
         56:2a:9f:d8:54:b1:5f:9e:d2:e9:ab:53:7e:c4:9f:1d:b5:c1:
         ca:34:29:63:d3:96:36:94:4d:39:e2:ef:04:19:5e:8e:8e:c1:
         d2:73:72:5f:dd:ac:17:c2:35:a1:96:cb:a6:62:1b:d2:a8:36:
         82:6d:e6:55:69:99:4f:67:22:9d:07:56:d8:8a:b3:46:28:29:
         e5:89:77:25:db:00:27:6b:68:11:f0:3f:fd:43:ad:69:d8:af:
         69:91:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:33 2024 by rpki-client on console-ams.rpki-client.org