Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          QD13Zy8VhiMoQHtWGRZLeg5RFnFwJWFycHeQ/18IKvo=
Subject key identifier:   8C:AA:BF:74:FC:C8:B5:EE:66:CD:61:4F:D6:0D:83:F1:10:64:87:71
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       019048692BF293DC029C7BDB2224E90B8427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0B03
Signing time:             Mon 24 Jun 2024 04:02:50 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:50 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:50 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: B/2W7W1YX2TVT1yvP1+tJFcUmt6Xq+B2Y59FNWb55eA=)
                          2: wQ8lKiM-P3Cl5D066iucEUjsiQk.roa (hash: swJBKwGrDpp+RPL+AhUpmfuC+tf/QNWqv2Lroz0GeOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:2b:f2:93:dc:02:9c:7b:db:22:24:e9:0b:84:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: Jun 24 04:02:50 2024 GMT
            Not After : Jun 25 04:02:50 2024 GMT
        Subject: CN=8caabf74fcc8b5ee66cd614fd60d83f110648771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:d1:f6:f2:9a:e9:01:ad:59:fe:b3:48:e3:
                    b7:4b:17:86:cc:c7:f9:cd:10:1f:91:9d:61:cd:8d:
                    43:18:87:4c:36:c6:d2:e5:ce:d3:09:ea:c3:c8:48:
                    29:06:55:5e:f5:5a:2e:63:77:bc:30:33:40:f9:d6:
                    1c:93:db:dd:88:de:5c:b8:c4:01:01:37:10:8e:15:
                    02:50:e3:74:13:13:2d:aa:42:bb:ba:9d:ed:e1:4c:
                    21:b1:ab:f6:dd:d3:9b:be:db:ed:79:60:c6:54:3b:
                    0f:a2:94:a1:b4:be:17:dc:52:a0:5b:77:61:fd:43:
                    c8:8c:4b:ad:e8:0e:a6:36:fb:26:a4:4e:5a:19:7b:
                    72:d5:a5:9b:9b:86:46:de:ec:a3:6e:b1:76:30:d3:
                    a5:aa:1d:9c:66:2c:17:52:f6:14:f7:04:bf:3e:38:
                    34:cc:d9:94:f4:5d:c8:9c:14:68:e9:5f:84:9e:d8:
                    08:f0:2c:f1:af:08:1d:09:30:87:36:66:7f:d7:36:
                    19:0d:fe:13:c1:f1:df:89:de:18:f4:92:23:3c:24:
                    8e:f4:4f:3f:2d:92:26:d0:ed:b0:60:0f:4e:ee:1f:
                    aa:9d:fe:bf:9f:c9:73:d5:5a:c2:29:36:7a:f8:39:
                    b2:a8:8f:28:74:c1:4b:f4:6d:4f:52:de:58:1a:98:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:BF:74:FC:C8:B5:EE:66:CD:61:4F:D6:0D:83:F1:10:64:87:71
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:a5:6e:48:86:b0:0c:b5:57:60:93:47:aa:ed:99:76:98:
         a8:e0:66:e2:ec:f0:d7:8b:50:12:e0:4d:34:43:c4:98:6c:b3:
         63:73:bc:9b:c7:2f:e4:51:42:d0:a9:ef:b3:16:ae:18:ed:a4:
         b7:ac:04:98:24:9c:ef:60:93:a1:0f:9a:2c:6b:b0:66:f5:f9:
         b5:4b:06:7e:00:b6:b4:53:fe:55:8d:bc:c9:dd:46:f7:54:e0:
         01:65:2b:97:ff:4c:8d:a3:ec:d4:05:bd:da:ae:8d:f2:51:4f:
         f6:4d:f5:4f:3b:01:e4:c2:92:c3:24:31:74:9d:5a:7a:2a:8e:
         8e:2b:72:9c:6f:8a:71:5f:2b:cb:bb:0e:69:1c:33:2f:88:e7:
         3f:89:ed:8c:d9:a0:a9:a0:f8:6f:77:6d:7d:ba:ac:f5:3c:f7:
         5a:14:2b:40:4c:36:22:69:a1:4e:aa:62:ad:c2:98:ff:39:2b:
         fb:b3:6e:97:60:fa:77:15:d9:08:00:16:38:5e:38:ec:26:8f:
         9c:b6:38:bf:ef:0e:11:17:31:a5:32:b0:b0:bf:37:20:01:d2:
         b2:b4:65:67:67:e0:d8:7b:39:40:fa:1d:fc:7b:18:be:1c:18:
         fd:ab:dd:c1:c7:b3:d6:11:bf:f1:ec:d7:30:33:b2:f0:89:36:
         55:98:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:02:45 2024 by rpki-client on console-ams.rpki-client.org