Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File:                     4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier:          VhBRNS1Ys+uoesl3ObVXfPAJc+VY0i8d6+bDZa5Q0Lc=
Subject key identifier:   D1:8C:F5:30:4C:FC:1B:40:62:8D:F5:C0:CD:4E:30:E7:0F:D8:F6:36
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer:       /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial:       01901D0EF3E561EECDBFAF16F4C779C91CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 18:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:37 +0000
Files and hashes:         1: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: PAW1GOrHEKBOw0WZi/q96MhW28e/ux5b09R4UfsE3DA=)
                          2: 8ILfYpD01k2SWXPtedrh0QU6ft0.roa (hash: +6CO7uoct66zzIzNhMedHPAWpMyvy0KRAuwNdGM/XaQ=)
                          3: TGK-y5pn75ezz81k2D5A8MYlv9c.roa (hash: k4+Jc05sDycolT25+KcoQBL9JGiTsNi7DkvV1yfgk4Y=)
                          4: vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa (hash: TstkM8iWLe9RWMv0agD7BtjBad/RP9E8xb35rXfvPow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f3:e5:61:ee:cd:bf:af:16:f4:c7:79:c9:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
        Validity
            Not Before: Jun 15 18:00:37 2024 GMT
            Not After : Jun 16 18:00:37 2024 GMT
        Subject: CN=d18cf5304cfc1b40628df5c0cd4e30e70fd8f636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:f1:12:a9:f6:97:e5:54:2e:ba:04:a5:60:
                    18:67:ec:31:c6:8e:69:c7:7a:42:13:ae:75:5a:ae:
                    01:8c:24:3b:46:75:5e:7f:44:ad:63:4b:69:55:59:
                    ae:d6:77:d4:6c:5f:04:c5:48:ef:27:ba:50:96:45:
                    e2:c9:6a:6b:2e:b2:b3:27:42:4f:44:fc:7f:e5:a7:
                    71:4e:67:c0:0b:10:8e:ad:d6:35:43:6d:88:6e:54:
                    b4:cb:5b:90:bc:76:31:f6:bb:81:16:40:ab:27:2b:
                    1b:46:ff:e9:eb:98:f6:ec:32:6f:41:24:c8:ac:38:
                    59:03:df:67:67:70:f3:a1:a3:42:92:ff:db:b9:8b:
                    54:51:d2:80:49:71:f8:e5:9e:37:7f:b7:62:c9:66:
                    ec:42:08:ab:4d:6f:68:eb:82:b8:9c:56:7e:8e:46:
                    f2:04:6b:79:c8:4c:43:a8:be:fc:f5:cf:1e:e3:1e:
                    53:10:7c:95:2f:3a:a8:22:67:71:d2:ba:16:44:f4:
                    f9:d4:3e:9e:54:5a:5b:59:e9:57:f4:2f:57:c5:c8:
                    25:56:90:b9:be:db:83:63:fb:60:12:37:ad:fb:bb:
                    f6:e3:0a:8e:fa:e1:eb:74:bd:b9:d7:a5:a2:c9:1c:
                    bb:08:c0:39:57:5b:19:4c:a2:43:29:73:dc:e4:30:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:F5:30:4C:FC:1B:40:62:8D:F5:C0:CD:4E:30:E7:0F:D8:F6:36
            X509v3 Authority Key Identifier:
                keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:1b:3d:15:0f:30:8d:71:e9:3b:19:b9:de:60:46:02:b3:
         b3:f4:c2:79:e9:3e:f6:7e:f5:47:05:9c:35:81:91:1a:07:56:
         38:f2:f3:bc:c3:a9:4a:8e:39:7a:a3:f3:1c:1e:b6:8d:f1:2c:
         e5:91:ef:60:ab:4b:81:db:d4:47:83:67:5e:cb:3a:64:fb:0b:
         0f:12:b9:ae:f2:cd:eb:9a:51:85:19:72:14:ce:79:87:43:ee:
         6b:66:c5:4a:52:2c:43:d5:52:ec:9b:c7:c1:c1:86:61:1b:0b:
         1b:b1:49:f8:e4:f3:dd:98:8c:4b:be:16:33:20:82:0e:cc:d4:
         85:b1:f6:d6:7c:ab:d3:b5:b6:48:1e:38:b5:18:2f:e7:07:be:
         08:4a:97:8c:74:02:7e:7c:fa:68:fb:2b:c4:02:be:d0:96:7c:
         5a:7f:fd:8f:09:50:12:13:aa:23:9f:e9:01:19:84:b2:9c:c8:
         39:9f:c0:54:de:68:d2:a9:1e:6a:97:bb:74:77:23:4e:01:33:
         56:26:22:c8:c2:8b:61:a7:f2:ed:a4:a6:83:79:94:3d:1e:73:
         6a:93:1d:12:37:1d:89:d7:03:d9:62:a8:7d:12:10:12:e6:db:
         94:bd:2c:16:dd:5f:3c:4a:d8:52:76:1f:90:6e:a7:43:9b:ef:
         03:d8:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:41:12 2024 by rpki-client on console-fra.rpki-client.org