Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File:                     Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier:          AfWmzwd0Nh6dbOctL5wrDycw949xNkikOdOc4l9YsbI=
Subject key identifier:   E6:4A:CA:EA:A8:2D:1B:ED:B4:B4:6F:26:84:89:CE:FA:B7:4E:46:94
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer:       /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial:       01901DECE79DFA8DFCCE0FF71AECAFCD041B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number:          03B6
Signing time:             Sat 15 Jun 2024 22:03:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:03 +0000
Files and hashes:         1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: rNqBbAQdTjSLHAtiqxBo9sZxbUGNocrIqqNB2pWgZFA=)
                          2: vkU3hJgBSLtVnTjvAcGXm6kFuRQ.roa (hash: eGEDJmT+XNMJcM9h6dbkCbObRW7oBBLsl4cSq4m0ono=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:e7:9d:fa:8d:fc:ce:0f:f7:1a:ec:af:cd:04:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
        Validity
            Not Before: Jun 15 22:03:03 2024 GMT
            Not After : Jun 16 22:03:03 2024 GMT
        Subject: CN=e64acaeaa82d1bedb4b46f268489cefab74e4694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:21:22:a3:38:23:b4:01:5c:4d:7b:15:ff:
                    0c:7d:36:09:a3:f3:14:d3:d6:9b:0a:72:0c:af:39:
                    1d:4a:f9:c0:d1:89:8f:67:1d:43:06:04:99:a0:bc:
                    d9:ef:b2:d6:b7:92:a5:81:fd:60:3f:6a:82:62:62:
                    9a:77:e9:61:5d:0b:ca:0d:2a:c0:bf:f1:1a:f4:d2:
                    3b:c8:b4:21:89:92:51:d2:66:87:8a:19:12:bb:94:
                    46:f6:bd:44:04:09:fb:48:2a:42:08:ed:8e:a6:ae:
                    ed:b6:dd:19:54:91:0f:0e:4e:bc:a1:6a:74:df:b6:
                    b3:6e:79:88:d2:69:92:7c:88:c4:2e:00:39:94:99:
                    b9:4a:37:60:49:d0:41:e4:2c:3f:92:ae:3d:36:58:
                    08:e1:ba:0a:88:8b:83:3c:3b:0f:f1:66:b3:18:81:
                    15:58:cd:02:a8:09:48:28:22:60:29:b8:de:45:58:
                    96:64:86:a7:50:fb:37:95:98:f3:a1:3c:f1:47:1c:
                    27:e7:21:55:cf:98:37:de:fd:be:d9:55:7e:e2:fb:
                    50:47:5c:9e:13:b9:0d:df:30:8c:81:eb:74:0f:a7:
                    00:c0:d5:c5:4d:a9:1a:89:bd:25:db:ae:04:84:f6:
                    c3:8c:3b:a8:4f:f6:e8:f2:11:ea:89:05:6f:de:b2:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4A:CA:EA:A8:2D:1B:ED:B4:B4:6F:26:84:89:CE:FA:B7:4E:46:94
            X509v3 Authority Key Identifier:
                keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:5e:aa:4f:2a:6a:eb:0d:8a:6f:d9:4e:f2:99:57:05:53:
         dd:52:9c:dd:09:4d:05:ea:3d:c0:e8:a8:b8:c2:02:dd:ba:fa:
         f5:eb:d3:5a:31:ad:5b:00:01:df:25:aa:b9:69:29:9d:50:b7:
         04:f3:d8:06:62:81:c5:c9:de:38:c9:b7:38:69:b7:63:65:ea:
         bd:78:d6:52:2b:f7:b2:4d:cc:6c:be:0b:a1:49:f4:e6:34:a1:
         01:98:bf:9f:ea:72:bd:29:c4:d2:41:a9:0a:9d:ba:7f:16:95:
         0e:24:6f:0b:52:5b:a7:e9:a3:fd:b5:5e:8e:27:ba:bc:58:86:
         a1:d4:4a:b1:0b:7c:37:f4:e7:dd:b6:54:f3:c2:91:51:92:7e:
         02:85:28:25:2e:93:68:34:65:5f:48:8d:c2:5e:63:5f:22:58:
         ae:cf:c2:92:8a:ed:60:d5:8b:e5:2d:ff:df:59:f2:2d:f0:bf:
         6c:8c:17:7b:63:af:77:9c:5d:a0:90:ce:ec:5c:c8:0a:a9:48:
         5d:bb:5e:1f:0d:42:95:52:86:a2:e2:50:40:41:63:d5:55:ce:
         2f:17:63:c7:57:55:64:9f:6d:bf:a1:bd:db:8d:a2:ab:d5:45:
         e0:2a:16:b7:0a:9b:db:e0:54:84:22:39:62:1c:e0:74:fe:53:
         79:41:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:05:43 2024 by rpki-client on console-ams.rpki-client.org