Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File:                     4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier:          69entsGZpcw21D2nefyHbN9+Pw1dD9jauyYLSxg5quU=
Subject key identifier:   0E:9D:BB:96:E5:E7:FF:AC:F4:85:30:42:F9:16:59:8A:33:F0:47:9D
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       01901FD9B64B5496C17A4F3DFBD0E2FDA5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number:          050A
Signing time:             Sun 16 Jun 2024 07:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:19 +0000
Files and hashes:         1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: pnoPIrLkCdjWMcIbjD1RjhDqYFnJRrT9OTNODdv1994=)
                          2: yox5EwRnepJQLTECir_-jc_lEc4.roa (hash: kSA8LnxSCSDe1VD850GrwAbXsGZq3D2vSZIC3FLRGC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:b6:4b:54:96:c1:7a:4f:3d:fb:d0:e2:fd:a5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Jun 16 07:01:19 2024 GMT
            Not After : Jun 17 07:01:19 2024 GMT
        Subject: CN=0e9dbb96e5e7ffacf4853042f916598a33f0479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:0b:c8:8e:ce:ad:d6:00:e8:f8:9d:a2:98:
                    cf:f0:13:3c:dc:c4:bc:c2:5f:7b:5d:e5:d3:cf:87:
                    9d:49:46:39:9f:fa:91:68:4f:77:06:25:ee:0b:cb:
                    e6:44:e7:3c:ee:51:8e:f6:48:99:69:d6:ba:ee:a8:
                    3d:f8:f1:31:9f:06:e1:a0:28:1e:46:a7:55:f2:19:
                    0d:79:76:0d:17:46:d7:ca:bf:c5:0d:7b:bb:54:a6:
                    c6:b8:a2:66:6a:1f:9a:88:e4:14:e8:08:82:a5:e8:
                    23:01:d1:a7:0e:e8:a0:10:33:3b:3b:45:ff:a7:73:
                    22:01:24:10:c3:e4:71:07:7b:21:fe:a3:0e:b6:e1:
                    2f:e6:3c:d2:47:da:af:17:b1:61:15:22:85:22:4a:
                    2d:6e:45:cb:66:89:88:ba:e4:7d:41:ae:09:21:31:
                    65:e6:df:78:fb:56:8c:f9:93:64:52:0c:88:e9:69:
                    02:5a:0a:fa:f9:97:c0:a0:f7:6a:a5:60:91:6b:7d:
                    1b:a2:ba:21:ca:3e:fc:8a:84:97:ee:86:15:ea:7c:
                    11:ef:71:51:11:64:15:77:22:6f:d3:23:fb:ae:7b:
                    18:ce:97:54:65:c4:f2:ae:84:12:fd:13:3a:a4:24:
                    ea:aa:83:69:66:fa:cf:62:63:24:7c:56:dd:37:c3:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:BB:96:E5:E7:FF:AC:F4:85:30:42:F9:16:59:8A:33:F0:47:9D
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:47:0b:c7:dc:46:cf:64:26:1f:69:1d:f8:6d:a4:7b:0a:65:
         c8:9c:da:35:de:ec:45:ce:4f:36:66:a9:5b:b9:23:e9:e3:da:
         f6:47:c8:cb:4f:82:65:77:18:22:d3:62:61:65:ea:54:7a:1d:
         60:5e:bd:49:30:2a:aa:8d:c6:e2:3e:46:00:ba:d5:fb:8c:30:
         56:b5:9a:70:d0:c5:9b:62:f4:dd:0a:27:92:23:1e:22:fa:d6:
         6c:85:88:b1:40:62:c1:96:ac:5d:1f:4d:d4:49:e7:8a:3e:02:
         c4:b3:9d:50:f2:1f:fe:ca:1c:75:1e:51:d6:51:3f:32:df:d6:
         40:b1:f0:aa:14:0d:7d:2d:07:3e:6b:37:5e:8d:22:3b:d1:b2:
         db:ba:19:65:58:75:59:50:02:56:14:a8:f6:34:07:b2:78:79:
         98:e3:a1:57:31:cd:fa:a5:5e:00:d2:31:d8:a5:ca:91:a5:52:
         b1:6a:e6:af:c9:2b:09:59:76:96:dc:34:77:a2:89:c9:88:c6:
         e8:87:b7:c2:9b:08:35:4e:16:bb:30:21:26:e2:67:5c:4d:1d:
         e4:c3:e9:55:4a:5b:c6:ff:bb:ea:40:25:6a:dc:a8:26:be:c4:
         35:f3:9c:3f:62:b4:26:9e:03:37:39:6f:a3:6a:a7:0a:b5:48:
         3b:89:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:03:01 2024 by rpki-client on console-ams.rpki-client.org