Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          dwAxlc/97PSGnJmx4H2SntC9AyOJrLN65rce2u4scWg=
Subject key identifier:   DC:EA:D7:ED:C1:E3:03:8E:D3:93:6A:99:1C:30:6E:5A:17:9F:71:A8
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       01904868883DDD58DF42194BA59446E01931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          DE
Signing time:             Mon 24 Jun 2024 04:02:08 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:08 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:08 +0000
Files and hashes:         1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: Uvv2EBD1JmLgBF9rvKIzUg3R4hBnRN7DP5hkWzdDBPc=)
                          2: wSlwUb5GO5ZtBuqccRIThVO6NgI.roa (hash: 5ywOsPIhppIq1zmUtkLPubAwy2lR9esYtf8OnPdWzjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:88:3d:dd:58:df:42:19:4b:a5:94:46:e0:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Jun 24 04:02:08 2024 GMT
            Not After : Jun 25 04:02:08 2024 GMT
        Subject: CN=dcead7edc1e3038ed3936a991c306e5a179f71a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:34:fd:26:b9:21:1b:24:50:34:91:9b:eb:
                    d5:e7:22:dc:37:43:df:d9:7b:02:05:80:b7:fc:48:
                    b6:5b:43:fa:b5:26:76:1a:8c:15:f8:22:1e:35:8c:
                    a0:15:2d:94:f4:6b:49:7e:4f:ca:e3:f5:b9:98:22:
                    84:b2:66:c7:ff:22:12:a8:f5:3a:05:0b:c4:00:1b:
                    47:57:d2:ae:0a:cc:af:ca:9a:b7:d0:ad:62:a6:b0:
                    b4:06:65:29:4f:17:9d:27:45:8e:f6:90:28:5a:9e:
                    1b:aa:20:0b:14:87:00:af:e3:11:64:c1:c8:0a:b5:
                    62:36:5e:42:5a:62:2e:0e:d5:d5:87:95:41:59:e5:
                    00:c5:98:be:52:e2:21:6a:f1:70:3e:57:09:76:08:
                    48:68:31:b6:41:e4:fb:eb:d7:a5:c6:da:10:aa:3b:
                    86:3f:a3:07:6c:a8:27:66:95:ee:97:fd:87:2b:02:
                    0a:29:69:a9:1c:4e:12:02:f5:b5:1d:7b:38:fc:fe:
                    fb:2b:14:00:82:b4:f7:fd:ee:fc:bf:f9:ac:b7:5f:
                    78:91:23:ba:58:1f:e1:0f:e1:b6:da:01:3d:6d:2d:
                    52:a8:19:5f:0c:4d:15:e0:05:9d:8d:6b:3e:2c:7a:
                    e1:63:90:f3:36:79:92:34:2e:63:ab:f4:5c:e6:54:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:D7:ED:C1:E3:03:8E:D3:93:6A:99:1C:30:6E:5A:17:9F:71:A8
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:2c:63:b1:b1:67:8c:d2:67:50:71:9e:68:5f:a5:24:b1:
         f8:f2:15:9b:61:90:4b:a7:05:83:f3:4f:ff:2e:00:c2:e3:8a:
         d4:10:e6:27:96:d7:f7:92:cb:98:eb:f7:83:96:65:cc:cb:3a:
         af:dd:ad:e5:e3:cf:3a:be:b1:34:c0:1f:e3:5b:48:30:21:ab:
         86:92:dc:dc:65:94:f1:df:ef:34:05:0b:a0:a3:66:20:78:33:
         d2:ed:cc:a2:6c:b9:0a:d1:04:10:cb:0c:db:74:7e:94:92:99:
         0d:a0:e1:81:62:e8:aa:60:db:01:5f:83:1a:53:48:39:9a:03:
         e1:fd:38:1d:0c:49:31:a2:6d:4a:fa:36:d2:83:9f:74:15:7a:
         88:c9:a0:e7:e8:ea:cc:93:ea:1a:e2:ce:f0:6e:46:30:bc:8d:
         09:49:b4:81:be:3e:51:83:f4:ec:4a:44:c8:2b:44:00:2c:dc:
         8f:c1:62:33:be:0e:68:ae:11:79:d9:8b:0b:2c:59:cf:36:8f:
         89:38:79:34:e3:0b:db:2b:62:2e:13:8b:a6:e1:7b:c3:b3:34:
         9a:4c:90:e5:01:45:8e:68:e1:5e:e0:8e:60:d3:44:33:73:4c:
         2c:d6:09:9a:ac:40:53:30:84:1a:31:f8:eb:eb:dd:08:f7:7b:
         b0:5e:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:23:07 2024 by rpki-client on console-fra.rpki-client.org