Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File:                     0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier:          scvb0zxZaGQ+Y6Oi8YKodF0zmpy06/pSxHNthKTszEE=
Subject key identifier:   E4:29:83:A7:DF:9A:53:04:72:EE:C9:84:FC:40:DD:A7:F5:FC:AF:8B
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer:       /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial:       01901E5923E14999B5CBA1FD00CA25E9A560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number:          0941
Signing time:             Sun 16 Jun 2024 00:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:16 +0000
Files and hashes:         1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: SJx9mMK7hWOntZH8Zqfouj6gMHGnRJKwyrNTpXGRt2g=)
                          2: i3oQKzukNLg6jSitsEuB-kXQErY.roa (hash: fNME+ktNDegyMwCN9dpi3uDKhBMY25hIpAMficqmzFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:23:e1:49:99:b5:cb:a1:fd:00:ca:25:e9:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
        Validity
            Not Before: Jun 16 00:01:16 2024 GMT
            Not After : Jun 17 00:01:16 2024 GMT
        Subject: CN=e42983a7df9a530472eec984fc40dda7f5fcaf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:65:fe:bf:85:98:24:25:c8:fd:87:c4:c0:
                    0e:fb:49:48:d3:c5:1b:7e:68:c7:f9:2d:09:58:ae:
                    90:35:4f:ea:c0:d4:d9:8f:2e:c8:20:5d:27:e7:b2:
                    d9:fa:68:c2:78:c2:3d:76:cf:82:84:8e:fa:0e:73:
                    76:a7:0d:66:a0:7c:31:99:77:40:9d:b8:9b:6d:ea:
                    aa:eb:e7:58:bb:09:4a:42:d7:0e:98:23:17:aa:47:
                    db:7b:3d:6b:c1:61:91:29:95:a2:55:a1:d0:ed:65:
                    76:75:3a:9e:f4:0e:2d:b0:04:91:4a:8d:4f:db:c0:
                    45:37:bf:00:ad:85:51:2e:30:13:e7:46:ab:36:7d:
                    ef:58:60:61:68:73:e0:82:a5:0b:c5:a3:05:3f:7b:
                    bd:64:bf:8c:fc:38:fa:cf:a4:cc:5a:2b:f9:d2:dc:
                    03:1c:0e:42:83:01:ad:71:a2:83:48:14:0f:df:4b:
                    d2:a5:65:84:d0:6f:b9:20:01:00:cf:bf:61:16:af:
                    c5:09:fd:41:19:08:a6:6b:a3:4d:d5:ce:95:81:aa:
                    fb:74:d1:46:02:57:fc:ab:35:5d:b6:40:86:ae:e4:
                    73:08:76:2b:69:93:eb:78:d2:e2:0d:3e:b1:7e:6b:
                    1f:36:97:33:02:da:b6:b5:29:ae:6e:a9:4b:8b:96:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:83:A7:DF:9A:53:04:72:EE:C9:84:FC:40:DD:A7:F5:FC:AF:8B
            X509v3 Authority Key Identifier:
                keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:ec:eb:8a:96:47:cf:b8:0d:73:29:6e:bc:db:a9:4c:8a:
         24:bc:ea:fd:08:03:be:25:ba:d1:57:b8:67:00:1d:47:1f:3c:
         0d:87:64:ff:c9:2a:0a:11:87:84:f0:80:1e:dd:b2:e5:1c:66:
         13:cb:d0:82:06:5f:91:8b:ec:b6:30:d5:6d:a6:e3:a1:b7:56:
         14:7a:77:e9:78:19:64:15:15:de:b5:1b:e4:27:0a:17:0e:73:
         ce:c6:f9:ac:f6:0e:0d:fe:86:11:d6:a3:41:e6:df:f0:82:25:
         9c:d5:82:86:83:c9:c6:92:bd:45:91:5d:95:37:0b:79:3e:01:
         c3:ea:b8:44:5e:58:6d:9d:d2:39:59:9b:4b:64:97:5b:e0:48:
         e8:e9:ec:42:23:69:ad:1f:19:d2:94:80:2f:72:58:73:7b:85:
         9f:e6:e2:90:2e:50:ec:fc:1a:38:76:7e:e6:bf:d0:34:93:75:
         67:8a:f1:97:67:a1:4f:d1:e2:1f:e8:7a:d2:8a:a4:c1:04:b6:
         23:af:9e:bb:25:eb:9a:3d:05:7f:00:a3:fe:b4:cb:97:a3:61:
         df:6b:e6:d4:98:e5:10:ad:fb:71:78:e9:07:c0:a8:aa:1d:92:
         e3:80:67:92:ea:b1:74:ca:d0:58:2b:5e:f8:c8:0f:38:11:4e:
         17:4c:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:03 2024 by rpki-client on console-ams.rpki-client.org