Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File:                     DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier:          YQ0VaGqFMztTkErNMogUGrMQuvaiZgmWLvSpSAdZr3k=
Subject key identifier:   6F:05:0F:DF:8A:EF:44:55:6E:1A:EA:1A:65:8E:BF:4D:10:FA:A6:93
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer:       /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial:       018F448E05F04054D25CB5F5BEA5EE4B6E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number:          115C
Signing time:             Sat 04 May 2024 17:01:49 +0000
Manifest this update:     Sat 04 May 2024 17:01:49 +0000
Manifest next update:     Sun 05 May 2024 17:01:49 +0000
Files and hashes:         1: 1-LnSp8dm6xyM02jNIKboyKvNz_8.roa (hash: 8mC40dBmf7v+VH5OtgwvQwd3U7HTjfcMJQLp38VicUY=)
                          2: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 4Ji6mEcP1XJeysQD4nWApy6O1AIcFYnmZg/XX5kX3jo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8e:05:f0:40:54:d2:5c:b5:f5:be:a5:ee:4b:6e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
        Validity
            Not Before: May  4 17:01:49 2024 GMT
            Not After : May  5 17:01:49 2024 GMT
        Subject: CN=6f050fdf8aef44556e1aea1a658ebf4d10faa693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:27:1e:ab:e0:13:07:57:d0:c5:a4:0d:91:
                    ac:79:21:03:cd:07:91:4f:ed:c2:c8:d5:67:12:15:
                    c2:76:49:bc:e8:09:45:dc:4e:da:79:b6:f3:13:c3:
                    5c:a7:9e:9e:aa:1c:5a:6d:5c:c4:29:69:c7:c6:c6:
                    e8:de:f1:ed:20:0c:e5:d8:e5:6e:c3:17:7f:83:89:
                    ff:25:61:9e:14:e5:3c:fb:22:2b:a2:cc:ec:10:ce:
                    ce:b7:bd:1c:a8:6e:ec:90:8e:00:bd:3c:ec:02:0d:
                    00:3c:56:df:07:6e:f0:38:c5:7a:9f:ba:11:dc:b6:
                    c9:78:de:31:c7:32:10:b7:a4:b2:d6:7c:a5:ad:e7:
                    7b:98:b8:17:d0:c5:f1:11:4a:6c:94:b0:63:54:01:
                    71:46:d4:20:d2:33:06:78:41:14:83:61:d7:07:cf:
                    cd:8e:ae:29:88:31:3c:c5:c5:0e:88:f7:8e:6c:c2:
                    28:db:b6:6d:0a:5b:7a:26:18:1b:6f:7c:e9:01:54:
                    8f:42:92:59:fb:33:cc:23:61:bd:88:e6:6b:64:78:
                    91:b8:45:b5:0d:82:a4:f8:6f:bf:ea:7a:68:3c:ff:
                    aa:6c:f9:27:ff:ce:8a:1c:0d:60:4a:cf:26:b2:38:
                    21:82:0a:4a:1a:48:f4:fc:16:18:e7:1d:c0:cf:49:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:0F:DF:8A:EF:44:55:6E:1A:EA:1A:65:8E:BF:4D:10:FA:A6:93
            X509v3 Authority Key Identifier:
                keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:da:e1:93:d7:46:84:13:0e:e9:d9:1f:cb:df:c8:e4:07:
         ea:42:26:32:83:62:4b:7d:bb:ae:e3:a8:81:20:e2:47:42:9f:
         b3:9b:48:58:1e:44:2b:ad:23:f4:4c:48:55:3f:07:1d:17:46:
         c7:fd:6e:ec:cd:b7:99:f5:60:6c:ad:49:f2:71:96:7e:37:c4:
         e6:4f:b5:24:89:66:d7:e7:5e:3d:ec:43:10:14:07:23:4d:6f:
         db:07:4f:32:e0:1e:21:82:8a:e4:6c:96:49:be:2b:22:bf:3d:
         95:70:3d:3a:45:54:af:10:1d:ee:49:ee:9d:56:49:95:44:88:
         af:0a:bc:10:bb:60:ed:b9:c3:c0:77:eb:ce:cb:71:63:c8:e6:
         e3:ca:df:71:a8:46:34:ad:41:53:49:52:2d:c9:b8:8f:fb:c7:
         c2:bd:2a:de:f1:c0:8f:4e:56:53:63:88:83:26:84:10:dd:7b:
         29:9d:21:14:ae:68:66:b6:24:c2:b3:8f:a9:c2:4a:2c:12:06:
         38:19:e9:b6:85:58:37:f3:f0:51:3b:a2:16:4e:03:fd:c1:cf:
         83:bc:35:af:b5:85:3f:d5:02:68:a9:ff:36:3b:a4:fa:39:72:
         20:10:a5:5d:70:fa:87:1d:f1:1a:00:73:7b:50:c0:3f:48:71:
         03:e8:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:13:13 2024 by rpki-client on console-fra.rpki-client.org