Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File:                     43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier:          FP7tYfyO9u2iVnDo24CnEaqW1kQv2EYCLjolV9XFXu4=
Subject key identifier:   00:0C:31:82:23:91:3D:16:54:5F:29:F7:46:B3:F7:7E:99:73:2F:D9
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer:       /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial:       0190429E1FACA131110A797E337484180D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number:          0631
Signing time:             Sun 23 Jun 2024 01:02:57 +0000
Manifest this update:     Sun 23 Jun 2024 01:02:57 +0000
Manifest next update:     Mon 24 Jun 2024 01:02:57 +0000
Files and hashes:         1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: /rMFBfCytIRZz6SO7OL64NKX1eE3epharqJghgu2TU4=)
                          2: FaeR-Hv2Y_5UdbAqRqFB0nLvClI.roa (hash: KHv5liwt3bRMj3psjQsQ9zefHK59bNWALUAT3jZ4AuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:1f:ac:a1:31:11:0a:79:7e:33:74:84:18:0d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
        Validity
            Not Before: Jun 23 01:02:57 2024 GMT
            Not After : Jun 24 01:02:57 2024 GMT
        Subject: CN=000c318223913d16545f29f746b3f77e99732fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:c8:b1:0b:7f:3c:52:c4:49:bd:25:99:bc:
                    ec:51:95:b7:de:af:2d:fa:53:b0:ee:52:bc:95:04:
                    18:a2:7d:cd:91:90:a9:9b:fc:db:b9:38:f2:73:04:
                    de:9c:8e:b3:4b:51:cc:65:2b:5e:ec:a0:00:c6:fb:
                    d3:62:fd:7d:92:20:07:2b:ee:18:96:4f:6d:2a:2c:
                    7a:e2:95:e4:cf:57:a4:89:6b:c8:0d:63:ca:a7:ac:
                    7a:c7:72:55:cc:8d:88:69:5a:98:c1:17:be:8d:91:
                    df:04:82:84:45:e9:f5:cd:13:ba:84:33:ee:5b:4d:
                    0d:c6:1d:c0:fb:8a:0b:37:49:df:01:44:c2:dd:e9:
                    b8:d9:9a:db:3b:ca:89:24:f2:b0:aa:6d:63:a3:a7:
                    8a:59:c1:59:73:48:4e:26:53:1a:d2:97:a2:9a:ec:
                    ce:d3:05:7e:32:77:0b:6f:9e:a9:86:26:11:ef:da:
                    56:83:08:3d:3b:d2:04:9a:58:92:01:28:5d:54:90:
                    72:e9:67:32:da:ed:b9:59:47:a3:d4:f5:ff:7f:fa:
                    de:f0:60:91:ad:75:37:e6:17:5d:6d:87:45:9c:84:
                    4d:65:91:39:af:f5:0d:dc:b7:be:35:24:45:1c:ba:
                    2e:5c:fa:ec:10:47:70:2d:a4:ee:1c:2e:1c:26:46:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0C:31:82:23:91:3D:16:54:5F:29:F7:46:B3:F7:7E:99:73:2F:D9
            X509v3 Authority Key Identifier:
                keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:87:2e:91:1f:42:d4:43:de:5e:cc:85:ac:78:7c:e0:e0:
         d5:85:f3:f2:a1:b0:ad:b8:00:e2:d2:2a:1b:a9:f2:cf:b9:a2:
         99:cf:3b:42:e3:0e:d2:4a:5d:6d:82:0b:89:44:bf:2a:f6:2b:
         78:39:ec:1b:90:10:67:8d:14:49:6e:9b:10:f8:5a:0b:bc:71:
         14:40:43:86:80:b8:20:7e:cf:52:5c:f3:5f:e9:22:cb:b5:14:
         db:f4:66:48:7d:f8:45:28:2e:8c:3d:34:d4:ea:cf:1e:63:13:
         15:c7:72:2f:0f:10:35:b3:c3:f9:53:57:28:b0:82:cd:6a:a0:
         3d:9e:71:62:f7:44:02:09:4b:eb:77:4e:b2:b2:2f:4c:28:6a:
         f4:47:85:7b:36:24:98:cf:0e:48:fe:3d:d4:79:90:18:3e:23:
         30:9b:7c:13:8e:5f:5d:34:e5:b9:ff:47:c1:e3:58:a4:d1:1b:
         66:c3:0e:85:68:45:83:5b:dc:5c:d9:96:34:11:73:16:8b:15:
         85:a6:2f:a2:29:9b:56:e1:80:11:10:5b:a3:16:e1:1e:38:ca:
         5f:ba:e9:97:29:e4:3e:71:f2:4d:2e:b1:23:eb:9f:1e:72:48:
         53:a7:10:ad:88:15:38:eb:d1:9c:04:c8:e7:6e:c3:f9:c0:70:
         db:17:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:18:11 2024 by rpki-client on console-fra.rpki-client.org