Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File:                     4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier:          XaAfYmG18tv4OYaqfeDpKLGxsNCjgOMCqI4mmudt2b4=
Subject key identifier:   41:C9:4A:1C:05:3C:B4:29:0E:F2:0E:28:93:B4:27:2E:8B:D6:E2:E4
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer:       /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial:       018F8936C56DC41001EC473DF52B0165AD06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number:          01DF
Signing time:             Sat 18 May 2024 01:00:19 +0000
Manifest this update:     Sat 18 May 2024 01:00:19 +0000
Manifest next update:     Sun 19 May 2024 01:00:19 +0000
Files and hashes:         1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 7EAR8AkxLuo996/BrVX89MY2jAGHepMZVfUteCDFHs4=)
                          2: 6DwsoFTqdBgQCVJfCy7j5jtCPb0.roa (hash: 8f9H61aoApKOrC29U6VWHvDnnVl0mB77PJn+P6RxZj4=)
                          3: IK2T8fURoTCV_8Px_7zakdOI0Nw.roa (hash: FCR4P+tDox+P4Fve5crGlzvKDQV1RXxelz7fLORgzTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:c5:6d:c4:10:01:ec:47:3d:f5:2b:01:65:ad:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
        Validity
            Not Before: May 18 01:00:19 2024 GMT
            Not After : May 19 01:00:19 2024 GMT
        Subject: CN=41c94a1c053cb4290ef20e2893b4272e8bd6e2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:a1:e4:f0:a8:be:b0:b5:7a:f4:e8:25:91:
                    7a:18:cc:d9:e5:9e:e9:1c:a0:e5:93:78:96:b8:80:
                    6a:98:82:c5:c1:4b:c5:dc:41:77:82:3b:84:90:d8:
                    e9:55:13:bb:4b:fd:90:34:ea:ad:ae:3b:48:7b:bb:
                    8c:f8:a5:ff:11:47:cc:62:66:4b:14:be:83:b7:98:
                    2c:4a:bb:d2:9b:95:c1:64:11:8c:5d:e2:ce:38:9b:
                    4b:6e:2a:6b:87:d2:b2:42:15:a8:b9:28:6e:94:f2:
                    89:f6:5c:85:21:39:6a:a1:65:ad:2f:f7:9c:e9:dc:
                    a9:ce:24:7c:4d:47:90:29:6c:45:23:d7:1d:b5:e3:
                    96:53:00:31:8b:b6:74:58:74:ba:86:c6:9e:58:7c:
                    de:c7:df:55:4f:ca:bc:81:39:3a:26:cf:1c:f3:33:
                    c0:45:45:0a:78:60:36:fd:96:ff:c0:57:6c:64:42:
                    91:e9:8e:90:de:0c:92:1c:04:a9:4c:4e:d6:a5:38:
                    3e:87:07:53:2e:e3:4e:80:e6:12:cf:a2:12:64:d8:
                    e1:55:cd:33:5d:66:1f:3a:7e:89:be:37:99:7c:bd:
                    0e:66:de:69:ee:d4:2f:49:d2:0f:0f:8b:11:6c:37:
                    33:f4:15:fd:4d:89:da:53:a8:2a:3c:b9:aa:c7:56:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:4A:1C:05:3C:B4:29:0E:F2:0E:28:93:B4:27:2E:8B:D6:E2:E4
            X509v3 Authority Key Identifier:
                keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:bf:f6:bf:25:1e:5a:fc:01:07:de:5e:4c:bb:4a:2d:14:
         f7:7a:59:89:c4:e9:4b:e7:92:f1:37:ff:39:1c:b8:0d:b9:e0:
         8c:0a:1b:2f:3f:13:a2:1e:4e:0e:71:f4:83:f1:dd:7a:07:ba:
         f7:a0:4b:70:99:9a:fc:16:ed:14:62:81:cc:78:6d:92:fb:69:
         0d:10:2a:b8:d7:41:bb:ef:52:e0:3a:3d:fb:bb:93:56:67:a5:
         20:3c:4f:52:52:9d:a6:9b:45:64:e6:f1:2c:56:39:17:50:35:
         98:e4:98:10:21:a9:0c:54:7e:24:c0:df:97:03:9b:ed:2c:a7:
         d0:95:16:e7:36:7c:f3:2b:5a:d7:33:03:80:70:a1:b7:28:83:
         09:71:b8:75:e8:dc:2c:bc:29:4e:ab:31:e4:ba:9d:4a:c4:b0:
         30:49:a3:18:d6:ed:a7:71:9e:74:57:dc:9c:22:74:58:11:54:
         24:d4:28:fd:29:6e:a1:2d:a7:37:f4:b5:52:17:78:1c:bd:89:
         06:33:ef:b5:0d:d0:e7:06:33:52:3e:d7:eb:25:86:ca:ef:39:
         df:c9:99:16:03:ba:ed:85:8f:ae:a8:d9:d3:b3:b8:4e:4b:94:
         e4:13:4b:7e:00:e9:f8:76:32:29:5f:e7:de:98:af:47:7c:2e:
         d6:60:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:04 2024 by rpki-client on console-fra.rpki-client.org