Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File:                     SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier:          eSRhcLN0oYQWcRTlEPxVxZ3Gt2ZMltvrw1MkqaRU8hw=
Subject key identifier:   AD:92:B9:29:54:1E:5B:38:D7:FF:31:D6:F8:51:00:9D:72:8E:B8:32
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer:       /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial:       0190486999900E05C9EA27C6A37FC67DC692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number:          0AB0
Signing time:             Mon 24 Jun 2024 04:03:18 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:18 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:18 +0000
Files and hashes:         1: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: fQ3fS8AojjtfG4Ryo4qfm5/0Cd3upt5jNmO+du8UDQM=)
                          2: xS7RNTqCJXEqfO4r_LFu99a1G2c.roa (hash: LEkHeIdZuVNnCKqk6FI6ADiIZnnjWKRpmOgQemvk60Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:99:90:0e:05:c9:ea:27:c6:a3:7f:c6:7d:c6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
        Validity
            Not Before: Jun 24 04:03:18 2024 GMT
            Not After : Jun 25 04:03:18 2024 GMT
        Subject: CN=ad92b929541e5b38d7ff31d6f851009d728eb832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:cc:e8:1d:2d:f4:dd:0d:58:17:62:07:c9:
                    b7:8a:79:1b:23:4d:0a:3a:ca:1a:4d:b4:04:bf:a5:
                    0e:05:21:a7:68:c0:23:eb:44:95:cb:1d:91:6f:ed:
                    89:f2:b2:62:09:45:f2:43:ab:04:4d:bb:07:d9:d9:
                    de:04:e0:22:7b:3b:b9:cb:1e:6d:88:14:27:b8:ee:
                    46:71:51:73:9a:1a:b3:75:e0:85:d1:0e:40:a8:68:
                    0a:c5:96:82:f4:85:85:c2:fd:af:05:aa:57:4a:21:
                    cd:e4:9f:81:b9:80:1d:a6:b4:ba:37:bb:d6:76:99:
                    77:ae:64:4c:bf:95:d5:96:20:de:58:cf:8c:0b:9c:
                    25:cc:f6:b7:02:c4:c6:91:05:f0:e6:cd:77:37:38:
                    f7:eb:63:8a:44:36:a8:36:a5:a7:c7:36:9e:c9:c9:
                    f5:0c:87:a0:7d:95:00:9f:01:93:44:07:36:e5:04:
                    9d:86:67:a3:55:bd:47:ba:62:32:35:d4:35:d9:c7:
                    d2:06:06:8e:31:6b:3d:04:55:5b:1d:3c:06:e5:b1:
                    59:5e:41:1b:ec:51:45:08:0f:4c:9e:27:3c:2c:05:
                    86:48:48:a8:1f:33:5e:10:d8:30:37:f6:24:bb:f8:
                    9c:69:b7:97:a5:9b:ed:71:9e:bd:cb:b8:ad:7a:2b:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:B9:29:54:1E:5B:38:D7:FF:31:D6:F8:51:00:9D:72:8E:B8:32
            X509v3 Authority Key Identifier:
                keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:53:87:2f:96:08:c2:28:32:d0:be:73:d9:ca:4b:c7:f1:
         40:dc:ee:72:15:70:a2:0e:cb:bf:94:93:52:4f:4a:eb:bd:dd:
         4b:a2:11:c8:e7:87:06:8d:32:e1:bf:14:3b:a5:b4:60:2c:a0:
         0c:6e:9a:c9:e7:28:fd:d7:43:a6:0d:f8:4e:c6:9e:02:b1:fe:
         b5:18:38:74:a4:f3:41:db:7b:21:7a:36:b5:6a:d5:0f:a9:60:
         08:04:5b:56:e1:ea:02:9a:36:73:a1:bd:5a:af:7b:a2:ec:18:
         67:b9:d2:9e:2b:ef:af:eb:06:28:ba:f6:fe:74:7b:8c:d7:fe:
         d0:66:15:d4:38:d1:d2:ba:5d:48:d8:ee:24:54:5b:0c:92:25:
         c4:19:83:aa:d6:f2:47:f7:cc:c2:3f:1a:fa:13:96:e2:68:c4:
         88:b1:fb:89:95:1a:1e:06:44:42:41:70:e7:4f:a0:fa:7f:0a:
         1a:b4:54:e2:e0:41:cc:63:a0:c9:45:15:d6:5a:e7:32:13:3c:
         b8:ff:c0:db:e3:00:3c:71:3e:ac:f0:7a:fd:ba:41:83:d2:a6:
         13:07:bb:df:49:86:39:cd:d9:75:95:c9:e4:d5:d8:e0:fa:7a:
         ef:33:13:47:4b:c6:40:25:88:ef:6b:ae:78:da:55:1e:64:15:
         63:89:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:01:28 2024 by rpki-client on console-ams.rpki-client.org