Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          zGNYGdEdrjEJMZOFpSgfvbx2XaALQr5aEg/zI72HJJc=
Subject key identifier:   42:18:3B:8C:02:77:04:C1:64:07:5C:4B:FC:7D:08:80:33:4E:E1:CC
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       018F87B6868A830BA521763EF5873F04BF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          0904
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: 9iOvMT2NarTh5qwHQchlZfKw9kGve97EZ4MLesfpuDQ=)
                          2: zH2Q7cyAUKm-TAaAFlLIMbuCnvo.roa (hash: YJUyK1s4n47dl/J1sHUOBX39kSgAUMIQkd83AKk2utU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:86:8a:83:0b:a5:21:76:3e:f5:87:3f:04:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=42183b8c027704c164075c4bfc7d0880334ee1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:17:98:6b:71:5a:68:f3:66:8e:81:2c:eb:
                    33:e2:47:17:ea:33:69:8a:40:7e:43:d4:41:1a:fa:
                    f3:4e:83:aa:4d:f5:a4:d5:c3:8f:f9:52:6a:ab:66:
                    f0:3a:f3:b2:db:db:6c:c8:21:07:93:ea:b3:7a:2f:
                    ee:b0:06:08:ea:fc:14:f7:0c:9e:e0:17:04:45:fb:
                    2f:8f:29:21:9f:fe:ec:29:c6:7e:15:4e:01:d5:3f:
                    e0:fa:af:37:6c:33:16:bf:7d:1e:38:c8:ee:69:0c:
                    fb:47:9d:1d:a1:33:8c:7a:96:58:01:07:99:70:a9:
                    5c:ad:e1:33:b9:a8:29:7b:b1:a6:0a:ae:3b:72:6a:
                    3f:e5:f0:6a:81:44:e2:20:6d:44:71:b9:5c:3e:12:
                    16:ac:c5:a5:37:0d:67:3f:aa:ff:a7:20:22:92:de:
                    69:af:b9:f5:3c:06:ad:56:9f:6f:bd:c5:17:5c:5e:
                    94:d7:6e:2b:ed:3e:66:7f:e2:69:aa:61:62:39:dd:
                    ee:21:ba:46:fd:ca:39:d0:fc:c4:a2:ff:0a:2f:8c:
                    58:05:32:27:a2:4a:1d:2b:37:f9:71:ae:d1:22:e4:
                    12:d3:16:a3:63:ec:af:29:0b:52:dc:af:a3:a0:e1:
                    5c:f0:8b:f1:25:81:ff:77:4f:92:53:fb:ce:0a:93:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:18:3B:8C:02:77:04:C1:64:07:5C:4B:FC:7D:08:80:33:4E:E1:CC
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:85:35:2b:74:9c:0b:ff:1f:0b:56:1c:36:14:30:a5:8d:
         df:47:4b:51:6b:81:db:6e:0a:6e:f2:2c:b7:43:c7:39:c1:0e:
         49:d7:2a:94:d4:72:ae:41:1b:d5:bb:03:39:24:d4:52:57:63:
         58:62:af:54:21:9f:2e:93:fe:ea:a7:21:45:b2:81:fe:5a:ce:
         7c:d9:49:aa:ac:39:c7:93:49:be:34:78:a9:b9:fa:ad:0e:0e:
         9e:15:56:64:ea:24:41:4c:4f:bc:28:93:d2:df:af:7a:d7:08:
         6b:ee:3c:b6:dc:32:8e:b3:58:cc:8a:84:03:b3:56:7c:9e:30:
         c5:e7:a6:fa:17:c8:15:e3:fd:25:0b:27:3f:2c:59:1d:44:04:
         14:45:6b:83:24:95:2a:50:40:27:c5:7e:46:fa:63:8f:f1:eb:
         a2:59:63:25:da:3b:5a:90:52:66:84:50:34:33:80:19:d0:26:
         9d:94:11:f6:c6:9d:50:74:77:89:f2:33:46:bd:48:aa:e2:76:
         a9:de:19:01:1e:c2:25:79:b3:db:00:79:09:c7:d7:ba:57:9d:
         db:a4:71:12:61:c3:b5:b0:33:69:6b:da:1a:6a:69:d1:b8:a0:
         31:97:c7:5c:30:fe:88:a4:50:76:dd:e7:23:2c:dc:d4:ec:a0:
         32:3c:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:11 2024 by rpki-client on console-ams.rpki-client.org