Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File:                     en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier:          9X55ylOMFg4ua5eFarrQJ+d3ZGKrpXpeg6SfgeVCtsw=
Subject key identifier:   AF:48:5D:AD:DE:8B:6D:7F:E9:E0:4F:E0:3B:FA:E9:41:6A:9A:79:1A
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer:       /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial:       01901DEC66A633FCA5D85F6EBC0189A8AEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number:          08A6
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: CmAlb_vdUZhIb6vdAx0YAseO0DQ.roa (hash: 4s15DX5QLMP26VT0qXEMzQNo7Q/M18mjufN9WSa0d84=)
                          2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: HHYKX1hRosOYh60Act30GCS8rhSwrTTxCssLhIvrITs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:66:a6:33:fc:a5:d8:5f:6e:bc:01:89:a8:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=af485dadde8b6d7fe9e04fe03bfae9416a9a791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:3f:76:07:c8:3c:c5:13:9b:67:be:2e:ec:
                    b5:ed:25:20:60:d1:46:0c:35:20:9a:1b:03:14:d9:
                    0d:46:5c:ba:17:42:87:af:d3:dd:6f:16:a0:39:15:
                    bb:ae:5c:d6:9e:14:09:bc:19:17:c5:4f:90:44:3a:
                    bc:3a:e7:9b:b4:d7:b1:86:de:70:a5:68:e1:a7:be:
                    a7:50:8d:2a:42:6e:8b:47:64:01:93:f4:81:dc:7c:
                    3a:a1:6e:a1:20:75:e7:a0:96:1e:c7:34:e9:f4:ee:
                    f2:51:11:18:9f:95:ca:14:00:fb:47:0f:0a:b2:71:
                    47:ac:46:e6:40:16:84:4d:ff:fd:81:a6:dd:b8:a0:
                    1f:95:20:c1:96:28:c8:f2:64:83:bc:2e:26:f1:a0:
                    ce:0c:cd:8d:39:88:36:20:c3:56:0e:2f:6c:e7:21:
                    4b:b4:21:f3:2e:6f:b6:a6:83:ba:54:37:c6:e9:f4:
                    c1:8c:5e:54:2f:43:98:50:d9:3f:55:87:88:e5:96:
                    7d:86:ff:7c:f1:8d:f9:9e:6a:69:4a:f9:f2:ed:87:
                    b8:62:64:10:54:38:c8:3f:66:6e:24:06:5d:5b:92:
                    83:63:40:ea:23:4f:fb:63:6a:30:9f:28:7d:97:b2:
                    77:2b:55:c4:c1:f8:4f:db:41:c3:c1:32:ff:7a:a2:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:5D:AD:DE:8B:6D:7F:E9:E0:4F:E0:3B:FA:E9:41:6A:9A:79:1A
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:ca:99:e1:d6:14:54:ca:0e:6e:ce:b0:6d:eb:cb:88:55:
         2b:37:71:a4:e6:ff:f6:4a:c3:2b:d0:87:50:f5:03:68:a8:b4:
         ae:b7:9f:53:42:d3:b8:79:5e:7d:f5:d3:96:6a:60:a4:97:74:
         60:bc:35:83:6e:cf:79:d0:d6:46:21:c2:41:bb:e9:83:91:0e:
         c8:a1:c3:9f:40:97:a8:b4:9d:65:3e:4c:cc:97:a2:40:40:8f:
         a6:44:6b:50:de:5c:f1:bd:43:ba:f2:fd:93:27:2f:ee:62:89:
         e7:c5:86:9d:58:9e:07:a2:0f:34:ff:ee:ad:08:2f:74:77:c2:
         76:18:1c:e3:3f:8b:77:1b:f4:6d:04:99:7f:bc:e2:38:fe:32:
         b8:5d:c1:31:fe:99:d2:a1:6c:fe:53:e8:10:30:2b:6c:db:5c:
         f7:2e:ef:75:e3:d0:b6:05:6e:35:39:67:33:10:a3:b0:72:09:
         45:f8:82:f7:38:bb:41:1b:ed:60:0a:c7:a3:42:50:e7:17:d5:
         3b:e3:f4:3f:87:97:9e:c3:a3:e0:13:3d:a9:08:dc:b9:1b:7e:
         1b:28:94:47:9d:30:d4:9f:0a:ca:b6:6b:90:16:6e:41:cd:c6:
         09:86:eb:a5:2d:ec:9e:bd:33:09:28:7c:1a:f5:6f:43:bd:5d:
         ab:77:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:07:29 2024 by rpki-client on console-fra.rpki-client.org