Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
File:                     C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft (raw, json)
Hash identifier:          ZN2EGZ8Mqr2lICJVGY3LH4wZDwkGxJvRAe+f+nfY6aw=
Subject key identifier:   37:2C:FF:BD:28:7C:19:3E:EA:A8:BB:28:16:49:22:39:DF:D8:8E:F4
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       01901D7CE22416C9979CAF075C8C150C706D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
Manifest number:          05A1
Signing time:             Sat 15 Jun 2024 20:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:41 +0000
Files and hashes:         1: C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl (hash: keCElu6WkWS/z46CJG/uhT0Q5tOYd0MxUkwEPx7eF2s=)
                          2: UCWbatgBJPQcMnt_cIrf5TLmTco.roa (hash: 4jcy0IYkPMn7MDwLiqp5NkEDbpXuNSrVECnd37hVlmY=)
                          3: oCbzyFW_iMdJeJOmrQaDzBKeUKc.roa (hash: xJoPeu1+eFTg2/xxBScBJwYTAZ7d5q/njwo2nTqO35M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e2:24:16:c9:97:9c:af:07:5c:8c:15:0c:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Jun 15 20:00:41 2024 GMT
            Not After : Jun 16 20:00:41 2024 GMT
        Subject: CN=372cffbd287c193eeaa8bb2816492239dfd88ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:91:37:ff:4c:ab:49:f3:59:49:6d:f4:1b:
                    fa:ae:da:96:19:b1:91:89:51:7a:c4:d5:43:68:32:
                    1c:8e:43:ba:c9:a9:f3:9c:73:c4:31:a1:33:58:9b:
                    85:e2:8f:8e:72:fc:42:30:7f:78:7e:e5:5f:96:ef:
                    33:6f:92:53:e0:f3:c0:70:a1:40:b8:c4:70:36:cc:
                    93:71:9b:1e:1d:2c:87:ab:88:e2:8a:a5:85:0a:df:
                    bd:29:38:a9:d9:7e:6e:3b:9c:46:f9:40:26:44:bf:
                    7e:ed:6e:c0:d2:c6:8a:ac:c3:64:ee:4c:b2:76:6c:
                    99:b4:e5:04:de:b8:39:a2:3f:52:46:2c:53:16:30:
                    97:4a:3d:b8:34:1c:0d:77:ab:fd:39:76:0a:af:0f:
                    43:87:62:ef:53:74:7a:6d:13:cb:0b:f9:17:d7:b7:
                    db:e7:16:4b:66:d1:36:d3:a1:4c:76:41:3b:1c:54:
                    67:65:1c:39:13:a7:3f:cf:f7:2a:0e:dc:7b:21:75:
                    6c:f7:98:80:ec:02:12:7d:ce:8f:27:70:cc:40:ef:
                    29:54:7c:60:fe:2c:a9:3c:ac:12:94:7c:ec:5d:85:
                    be:0e:55:d8:d6:49:20:15:a7:43:70:e5:e9:77:9a:
                    30:55:40:3e:32:d7:8e:06:c6:2f:d5:8f:b5:74:91:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2C:FF:BD:28:7C:19:3E:EA:A8:BB:28:16:49:22:39:DF:D8:8E:F4
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:51:8c:ba:2f:ad:e6:88:e2:a8:bc:6d:af:87:fc:1c:a7:1a:
         8c:89:b3:28:f4:d8:bb:ec:73:81:0e:60:dd:87:0b:80:2c:07:
         d7:7d:0a:19:75:b8:cb:d3:fc:e5:9e:dc:98:76:95:ac:c8:41:
         47:76:a1:6b:4a:97:a1:d1:eb:15:fb:05:48:1c:85:59:c8:49:
         43:aa:6f:51:90:c6:02:60:63:08:d5:f2:cf:be:7f:a0:62:12:
         0b:25:5a:d8:2d:13:d2:e2:94:92:c4:f1:a8:55:96:31:6a:e8:
         c1:6b:65:a0:ff:7a:60:72:3c:1f:95:6f:45:8d:a0:8b:11:6e:
         17:da:c5:1f:82:d9:b0:bb:c1:e4:61:97:be:65:d7:aa:fc:40:
         df:3b:69:07:55:c1:19:de:8e:6d:b8:58:e3:4b:df:d5:2a:05:
         1c:a1:05:d0:51:33:85:1c:3f:ef:31:a9:3e:d5:9d:e8:b8:bb:
         c4:09:08:a3:e1:b4:58:4a:29:f9:ba:ac:44:3a:ea:d2:1f:51:
         43:5f:c2:11:b2:39:97:a1:b5:0e:ec:1b:14:18:f5:59:22:5b:
         37:33:af:d8:fc:b2:18:3b:1c:c8:07:0a:16:34:37:8f:26:07:
         32:4d:a8:7c:af:fc:c9:27:46:b2:5d:a1:e7:b4:e4:47:dd:1f:
         04:2e:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:34:58 2024 by rpki-client on console-fra.rpki-client.org