Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File:                     dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier:          btYVr+m/jBL1L+uPYRiNJJseueRADNSKBISLn6b8xxY=
Subject key identifier:   23:55:85:56:FC:78:9C:76:C5:39:86:3E:1B:1D:99:2A:32:B2:5E:84
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer:       /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial:       019044F838C8E64246E2001857D21989CCD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number:          058E
Signing time:             Sun 23 Jun 2024 12:00:36 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:36 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:36 +0000
Files and hashes:         1: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: o3oL8+ZxayuFgxBLvb6HOnWDrB9Rs1bsxPMiT5MKdqo=)
                          2: gSA671L5vfYGvXVHzJ5BxXXnZPg.roa (hash: SRqmlcaegSEDrIAbMyMUN6jYZ/MeZcdsiKB/2mCyzUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:38:c8:e6:42:46:e2:00:18:57:d2:19:89:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
        Validity
            Not Before: Jun 23 12:00:36 2024 GMT
            Not After : Jun 24 12:00:36 2024 GMT
        Subject: CN=23558556fc789c76c539863e1b1d992a32b25e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:81:b2:6b:53:4c:77:98:33:12:2b:c5:f2:
                    b1:db:ef:c9:d5:4c:ec:7b:76:03:56:46:1e:e7:a3:
                    cf:63:7a:d9:19:db:26:cd:af:e2:b9:f1:ab:79:8f:
                    53:bd:d9:61:5a:55:e3:9e:15:1d:de:23:7d:35:d2:
                    46:ff:78:2c:25:17:e6:d9:d2:78:a2:58:82:ad:a7:
                    7d:1b:ec:21:bc:2e:8e:31:e1:4d:7c:dc:37:1f:e3:
                    1d:72:04:a6:ae:a8:98:d9:84:12:ee:ad:7f:3c:b4:
                    13:9a:2e:e9:c5:d7:92:2a:b0:ec:27:70:21:1a:7e:
                    73:d6:ef:52:87:fb:72:91:63:2b:29:a3:30:12:1c:
                    88:ba:f3:31:17:34:9a:4b:69:e1:13:f8:e5:03:2c:
                    b6:1e:39:5e:2f:14:6c:82:68:14:4b:a7:62:4f:a8:
                    44:de:6a:ca:02:cf:89:70:99:88:88:c2:b5:50:d6:
                    3f:48:d6:42:15:0e:ee:9b:0d:cd:01:56:e9:87:08:
                    f4:03:79:5e:ff:ad:98:17:1a:0a:0f:b3:a3:8f:3c:
                    f7:70:95:91:55:31:8f:9b:f2:54:71:eb:57:35:31:
                    4e:8e:24:08:87:d1:d1:9e:f7:26:03:ee:e4:4f:2c:
                    ea:46:8e:70:18:95:ca:b8:1f:15:df:9a:dd:67:8e:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:85:56:FC:78:9C:76:C5:39:86:3E:1B:1D:99:2A:32:B2:5E:84
            X509v3 Authority Key Identifier:
                keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:da:22:6e:35:33:3f:07:f2:62:d7:7e:03:d1:53:1b:5e:
         c3:18:ef:92:f6:72:a9:ef:0d:80:7e:29:be:4a:20:db:ce:e3:
         cf:9a:ba:e7:2a:eb:00:5d:28:c7:1b:58:2c:1e:14:3e:47:b0:
         15:00:68:4d:08:d2:5b:52:a5:17:28:6b:4b:f4:dd:35:10:fe:
         72:5d:76:e2:be:99:61:ff:ac:5c:d5:a1:78:a0:32:dd:aa:63:
         97:0d:a0:e5:13:fd:a9:4d:c6:2d:a1:e8:32:2b:dd:45:aa:b0:
         3a:90:50:69:68:2d:d5:33:b8:d8:68:78:8e:90:b7:8e:54:76:
         0a:d7:17:44:fb:84:52:02:1c:20:da:fa:df:9c:c2:92:71:5d:
         c3:bc:c5:1c:cd:c4:58:da:24:e7:c0:9b:c1:26:89:f1:9f:74:
         ec:db:b5:86:cc:a3:f9:d8:77:c6:34:e8:ff:6b:cb:a7:ad:86:
         35:3e:20:2c:6d:5b:b9:12:95:c9:74:c8:6f:6b:0a:2e:d8:0f:
         99:63:52:dc:64:36:5f:b5:ad:56:b0:ca:38:bf:a9:f6:a1:63:
         4b:b6:70:50:86:d1:9e:88:bd:68:f0:38:a8:8f:09:b6:b1:68:
         46:45:74:56:47:f5:dd:e2:e9:3c:15:50:e0:29:17:2d:b1:0b:
         f0:e0:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:40 2024 by rpki-client on console-ams.rpki-client.org