Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File:                     7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier:          mCzALZ9y2pkQhmpHD2g5hrmCjXaY78lDMWuxmAXYyEs=
Subject key identifier:   BD:18:DE:BD:32:42:B1:61:AF:53:EA:C8:FA:34:16:19:62:DD:BC:82
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer:       /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial:       018F54375D706F53A89D5EDEDD0A37DD2CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number:          0EA0
Signing time:             Tue 07 May 2024 18:01:05 +0000
Manifest this update:     Tue 07 May 2024 18:01:05 +0000
Manifest next update:     Wed 08 May 2024 18:01:05 +0000
Files and hashes:         1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: fN6njqx6pwIypFIflgbzd+B2zKAodvQefkX8w8eZTYc=)
                          2: ZGZOvUtmiMzalAFsproNAidbDLc.roa (hash: zLTX+cW9o9vHdgqseHbmJ2ruTMCm+uH3zGYYCpA3KiA=)
                          3: dtvptpDCOpV-jND-4qEjIuCDBrc.roa (hash: EWqwGk5Kknk/kp8QcH5BlPEYyTah2RvsxsGEznSR3Aw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:5d:70:6f:53:a8:9d:5e:de:dd:0a:37:dd:2c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
        Validity
            Not Before: May  7 18:01:05 2024 GMT
            Not After : May  8 18:01:05 2024 GMT
        Subject: CN=bd18debd3242b161af53eac8fa34161962ddbc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:ef:2f:1c:d2:fd:c2:35:14:e2:09:2b:c2:
                    c3:da:45:c4:69:2f:8c:e5:9a:17:59:95:65:06:b4:
                    59:e9:5f:48:5c:07:f0:86:3c:c1:73:ed:d3:54:cd:
                    f2:99:b9:cb:1e:80:e2:fa:a1:55:75:2d:34:34:ab:
                    39:6d:2d:10:61:a3:85:92:2b:2e:f8:d8:e9:86:c9:
                    fd:72:42:e1:b9:09:78:fb:45:ba:0c:b9:34:14:97:
                    7c:08:c5:37:ce:88:82:c1:bf:9d:70:af:38:80:10:
                    12:d7:87:d9:86:b3:76:e7:15:40:43:d3:a4:39:b4:
                    cc:77:fa:54:a9:7b:61:43:0f:c2:2b:6c:7f:8d:7b:
                    4e:17:a1:6b:4a:43:98:5f:87:dd:8b:e5:51:12:fc:
                    54:41:e5:c9:4d:68:fd:89:52:fa:25:75:47:4e:39:
                    42:e3:59:9c:13:2b:e2:0c:27:b7:71:bc:2b:50:50:
                    f9:cb:75:92:fd:97:3a:b7:b6:25:f1:05:02:e8:8a:
                    2a:8d:a3:2d:e0:05:87:0e:56:78:5c:01:3f:5c:4f:
                    23:09:67:59:62:a9:3b:68:59:28:db:7f:e0:6a:bb:
                    ae:a5:c0:e3:db:62:69:e4:86:54:f2:eb:aa:fa:bb:
                    69:bb:1d:7c:53:32:2e:dd:85:e9:ac:4a:69:08:af:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:18:DE:BD:32:42:B1:61:AF:53:EA:C8:FA:34:16:19:62:DD:BC:82
            X509v3 Authority Key Identifier:
                keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:52:78:4c:24:14:18:13:65:8a:22:6e:7a:d5:c9:06:a8:48:
         1f:cd:cd:b6:ac:ce:aa:1c:e2:65:2d:e1:74:ef:bf:a6:21:8c:
         3c:ed:5c:f7:73:6b:57:b7:8f:1f:2e:b3:1d:1f:f1:23:dc:6c:
         03:26:d3:e8:eb:0a:e0:2a:c3:d0:76:f0:a9:d2:da:f0:2a:5e:
         d0:58:0a:86:5d:29:c8:bc:1f:ab:a9:3b:88:58:1d:15:9c:ab:
         f8:ef:51:92:9a:82:40:a0:9c:e9:f4:05:2b:15:9d:fb:2d:04:
         b9:b2:48:59:d4:84:d0:c1:e5:7e:cb:9b:a0:b2:99:e7:38:a4:
         64:bb:4e:e3:e9:57:6d:2f:3b:ac:ef:3f:ca:08:13:a1:dc:6c:
         e9:62:f1:14:cf:22:a2:ef:2a:de:d6:aa:1c:96:f7:2f:be:4b:
         42:c0:9d:13:87:6b:7a:6e:8a:e4:af:98:9f:c1:d3:32:6c:4a:
         d8:9e:06:22:f8:4d:ce:59:40:97:85:5a:dc:90:0c:a0:b8:e8:
         2e:25:fa:17:3d:36:b7:b2:ad:30:c5:c5:1a:8f:d6:80:54:4b:
         58:f9:32:55:d5:c0:98:8e:9e:74:0e:b1:3d:f6:05:cb:34:f6:
         ca:0e:7f:be:0f:a5:76:35:51:0b:84:e6:55:58:81:4d:b3:8b:
         33:05:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:52:49 2024 by rpki-client on console-fra.rpki-client.org