Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File:                     rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier:          gxW0UNGR8/yVKcQ7xekuH211fWdDjN6Dk/vU4k1GP9o=
Subject key identifier:   27:52:B2:0A:AA:BB:46:E9:5F:45:CC:5E:D7:7C:93:2C:AF:A9:9B:7A
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer:       /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial:       01901D45E7FA6B79DC69EC71D161D38AAB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number:          1078
Signing time:             Sat 15 Jun 2024 19:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:38 +0000
Files and hashes:         1: Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa (hash: YYOW51psv9z2duIB0YIOvR80+uurU5WQmBABlXVDV2c=)
                          2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: PZO+H5RwSdjJLw2ljJMRxMPsd0VQXSP5N3rDi1A+YiA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e7:fa:6b:79:dc:69:ec:71:d1:61:d3:8a:ab:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
        Validity
            Not Before: Jun 15 19:00:38 2024 GMT
            Not After : Jun 16 19:00:38 2024 GMT
        Subject: CN=2752b20aaabb46e95f45cc5ed77c932cafa99b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:ce:68:d3:11:f8:d7:16:5e:a3:fc:c0:ab:
                    ef:5a:f9:1b:34:26:5c:67:73:8b:1f:3d:ca:04:1d:
                    7a:9d:e7:05:86:48:42:fa:25:e3:d9:85:cc:16:a3:
                    48:5a:2e:fc:7f:c1:d9:e6:34:cf:09:31:ab:9a:0f:
                    41:0f:4c:07:b1:c4:7f:b4:4d:4d:84:82:cb:64:ed:
                    5e:11:3c:7a:1a:fa:40:5d:c5:b7:b4:93:bf:10:e8:
                    82:35:65:e9:9f:4a:5c:a3:f6:33:ad:16:36:2a:ea:
                    e3:bf:f9:ba:4b:59:19:3c:56:4a:ab:aa:f2:07:96:
                    d0:8a:aa:b3:a3:87:5e:2b:e3:16:78:58:32:fc:27:
                    64:75:a9:90:82:63:c3:cd:83:42:be:2c:bd:05:f7:
                    0c:4b:16:98:48:5a:71:64:b0:39:20:ca:26:fc:3f:
                    bc:4f:c4:1f:4a:b2:0b:cb:ce:f4:6f:a1:1f:35:ec:
                    c6:c7:ff:64:3d:d0:36:a5:7f:d2:c9:33:94:7f:53:
                    c1:dd:08:96:69:fe:bc:48:f5:86:a1:2e:6a:b3:c1:
                    5c:1e:da:a3:32:75:24:58:55:14:36:6b:36:98:44:
                    6c:0c:c0:c7:a4:5e:a5:80:37:c4:4a:db:5f:e3:9a:
                    91:37:a2:c8:6b:58:25:d5:a0:b1:8b:a2:22:e3:e8:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:B2:0A:AA:BB:46:E9:5F:45:CC:5E:D7:7C:93:2C:AF:A9:9B:7A
            X509v3 Authority Key Identifier:
                keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a3:29:9a:ea:32:02:7f:67:3e:68:32:ab:50:37:a1:f4:e1:
         32:14:ae:22:c4:7b:f8:5c:36:88:29:1c:64:6f:59:b3:08:10:
         74:f8:bc:2a:fd:9e:19:46:b9:8e:56:64:19:9d:29:c4:82:c4:
         ee:99:e7:ab:be:22:9e:3a:d4:3e:ea:cc:31:bb:d6:cf:f2:c2:
         68:92:39:b9:dc:3c:79:4d:6d:a4:f2:80:89:31:f4:a4:22:8e:
         d7:ce:3b:3e:12:33:92:ed:81:9c:c3:dd:87:b7:d5:90:75:bd:
         fa:69:1a:9d:82:25:eb:dd:23:c7:33:bc:ce:b8:d7:81:6e:e5:
         e4:b6:b5:25:b0:6b:1a:9f:1b:b4:88:e8:ea:c8:ba:1d:25:29:
         b0:41:7c:26:aa:f6:dc:b4:ac:46:13:55:b1:1c:28:36:91:7c:
         f2:7d:28:27:ee:bd:ef:c2:9b:15:3b:9f:f9:fd:f2:31:6b:24:
         4a:65:71:9f:a2:ca:47:76:62:e9:c2:9e:d0:d2:e5:12:e9:4b:
         a8:12:bd:c2:60:b3:d3:9e:3b:df:85:66:16:5c:92:03:e2:23:
         a2:28:07:18:69:40:4f:8c:ba:60:dc:a0:52:64:dc:e1:38:4d:
         12:02:2c:b2:2c:ec:54:57:6c:43:91:fc:b1:28:c2:c8:79:e3:
         60:37:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:01 2024 by rpki-client on console-ams.rpki-client.org