Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          ZYVpS/fFnXh14T/mBk3uL1Ksu2NiGvP7OwDarr0MLU4=
Subject key identifier:   A6:69:DB:D4:10:65:C5:1A:B1:C6:43:B4:AA:B3:05:8B:23:98:31:8E
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       01901DED3D32AF21BD984F1386C63F354520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          0E4B
Signing time:             Sat 15 Jun 2024 22:03:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:25 +0000
Files and hashes:         1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: jYg21vyaaz8kcTZxVdEZbkSzJXTH8ir9xSntj5vVgcI=)
                          2: uWB3vb5P7hwYU3Kipr3VRidZh_g.roa (hash: cuIDvlKV3CF9CznX93cbrOrXOm1MbmjoaRxKwp3MbKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:3d:32:af:21:bd:98:4f:13:86:c6:3f:35:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Jun 15 22:03:25 2024 GMT
            Not After : Jun 16 22:03:25 2024 GMT
        Subject: CN=a669dbd41065c51ab1c643b4aab3058b2398318e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:d8:9d:59:4a:ef:1a:99:c5:22:05:e2:37:
                    9e:62:fd:a8:7e:0d:b5:f3:1b:da:c1:44:85:d8:2d:
                    9e:23:5d:d3:56:4c:a4:43:fd:a6:9e:63:e1:57:c2:
                    34:40:a7:f0:ee:bd:a9:aa:14:89:29:18:d1:f7:9f:
                    8c:9c:86:4d:6d:70:fe:7b:65:13:ed:1d:42:59:6a:
                    86:6e:92:9d:b5:78:80:3a:f2:61:d5:b0:a4:b1:ba:
                    46:87:d1:20:0d:cc:2a:da:1f:d5:34:2a:37:71:01:
                    98:63:0b:e6:37:e6:fc:4a:e7:8f:da:13:42:9a:21:
                    22:a0:ef:23:55:73:41:b7:5d:51:dd:3c:db:cb:87:
                    de:d0:ca:c3:8b:ea:c9:e2:d3:bf:91:d9:ff:20:fd:
                    b0:03:16:64:15:b5:7a:e6:3a:3b:fc:6a:6c:cb:be:
                    b5:2a:81:04:db:e6:6a:85:59:81:15:4d:32:6d:d3:
                    49:b0:4d:5b:23:17:a9:1d:04:e6:8a:0a:98:a7:fb:
                    ff:29:32:8b:ae:fe:8f:37:83:0b:51:13:c0:eb:ca:
                    90:ec:d1:32:2b:b6:74:46:b6:89:f0:7c:f6:1b:fe:
                    48:62:b3:67:ec:ba:67:2f:d7:c6:60:f5:e7:02:3b:
                    9d:d6:67:b8:ff:9c:6b:8a:a1:6c:d1:91:4e:e0:91:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:69:DB:D4:10:65:C5:1A:B1:C6:43:B4:AA:B3:05:8B:23:98:31:8E
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:2d:fc:a1:53:bd:f9:8a:4a:52:11:00:47:74:67:e1:c0:
         d3:7e:c6:f9:4a:bf:5d:4b:00:b8:e3:75:4f:9b:b5:70:44:54:
         83:bc:49:85:51:88:5c:e9:98:b8:0b:15:ed:4e:b3:bd:65:93:
         12:38:c5:22:65:18:65:e7:4f:b4:8c:34:ad:96:d5:d6:21:ef:
         77:72:2e:ee:b8:e0:b4:ce:52:b1:ab:13:27:c3:b1:4e:2d:2f:
         f9:06:76:da:3c:c0:b2:33:00:55:dd:b4:97:28:7e:56:83:50:
         bf:ca:f9:61:67:b5:ef:4b:a7:5c:7d:bc:b9:de:0d:cb:35:b8:
         3b:43:1e:2f:e9:64:3e:a0:fc:2b:56:46:89:25:5c:3f:95:a9:
         55:62:e9:aa:cc:22:81:b5:c8:9f:5e:12:f7:19:23:e3:cf:0b:
         0c:23:13:30:9b:b3:85:db:89:48:f2:33:79:af:a5:a0:5e:10:
         a8:6b:59:3a:d9:28:65:18:02:16:85:a2:3d:24:71:a8:18:5f:
         92:06:f0:e3:4f:f6:87:a9:dd:0c:f8:3f:57:7f:35:a1:9b:ff:
         eb:e0:93:a4:80:e6:8d:3f:34:8e:9e:dc:f8:61:50:ee:db:94:
         40:03:e0:a8:c2:90:3e:0a:d4:48:ad:67:79:aa:e8:6e:77:37:
         08:70:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:19 2024 by rpki-client on console-ams.rpki-client.org