Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File:                     9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier:          5VfBXSnUhxnRsiC34wmB7P2V/cwIcCkMXmF+lO7sSEI=
Subject key identifier:   1C:D3:21:7C:3B:88:6F:53:1C:A0:4C:7D:43:4E:52:72:60:2D:E3:33
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer:       /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial:       018F51393125DA7A2A83DDA72E84CF11726A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 04:04:13 +0000
Manifest this update:     Tue 07 May 2024 04:04:13 +0000
Manifest next update:     Wed 08 May 2024 04:04:13 +0000
Files and hashes:         1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: jT4C/WcR9+vXh9x5550TDbBs4roD7/wJ+49eDnSTEng=)
                          2: C-2P4mlb6Lp-SCXJAYKZ6UABX4Q.roa (hash: 4iPLomuHfONXmyxICP4tAR27QB1ThUgqwGHDLgK/BEE=)
                          3: k7s_kVQKvIDwWcaX25JVrYcJI6M.roa (hash: ukh6f72gAiAttM9pQxfc4ySjCuQ9Pa3tcSpxisUb5E4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:31:25:da:7a:2a:83:dd:a7:2e:84:cf:11:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
        Validity
            Not Before: May  7 04:04:13 2024 GMT
            Not After : May  8 04:04:13 2024 GMT
        Subject: CN=1cd3217c3b886f531ca04c7d434e5272602de333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:ad:be:c7:fd:55:1f:a0:0b:62:6b:c4:f7:
                    43:8f:39:4d:c9:14:c8:5a:e6:32:16:e9:91:ee:58:
                    ab:51:27:41:73:f6:9e:5a:53:aa:ef:27:c5:15:e5:
                    24:ae:01:d6:fa:aa:78:ed:2f:0d:6c:e6:54:86:34:
                    19:89:f4:63:0b:a3:f1:0b:27:1a:f7:19:d5:c3:f1:
                    07:47:59:2f:04:ef:4a:ad:8f:c7:5a:10:50:e7:e4:
                    c8:aa:2a:91:ad:87:88:29:3f:d8:26:14:6e:0b:0c:
                    98:0b:57:51:7a:70:23:53:8a:b2:0a:8a:2b:1f:1f:
                    c4:94:8b:3b:f0:81:03:c5:c7:68:e7:e1:d3:cb:71:
                    56:da:bc:39:bc:1c:ce:6c:5f:17:d9:16:9f:63:66:
                    5d:ea:53:8c:15:e1:c8:0b:f8:f6:3c:42:d6:a0:76:
                    e3:2b:dc:ce:cf:6c:24:83:a1:25:7c:5d:44:78:9c:
                    7b:49:58:63:7b:13:77:32:8b:94:15:b1:90:54:fb:
                    27:cd:be:55:e8:3c:a9:6e:10:c8:7a:2a:68:ac:85:
                    80:e7:0d:c1:9b:d4:30:cb:17:b7:90:b7:d5:e9:11:
                    8f:a0:ce:be:12:cb:7d:6f:50:43:f9:1a:ae:f0:2f:
                    f0:25:57:12:f1:f3:50:a3:be:42:eb:fd:50:7f:33:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:21:7C:3B:88:6F:53:1C:A0:4C:7D:43:4E:52:72:60:2D:E3:33
            X509v3 Authority Key Identifier:
                keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:e6:e8:8d:67:48:3d:84:ac:c5:69:2f:1e:36:35:ca:0b:
         f3:48:84:fc:2f:3c:10:bc:cc:82:bd:1d:71:91:a9:1b:c5:f3:
         78:d1:51:89:ea:3b:ff:30:7a:60:9d:8a:15:c1:78:72:3c:90:
         7c:d7:63:6d:c0:0d:0f:75:01:1f:f5:19:2f:ee:42:e8:1d:48:
         39:c6:52:40:3b:da:bc:73:85:c8:ba:56:bb:14:08:3d:49:03:
         d1:e8:76:12:05:eb:16:3f:a8:70:5b:22:24:68:e5:b5:d9:da:
         f7:a0:42:b6:65:70:63:78:ce:0a:53:5d:8b:43:45:75:1f:b2:
         51:8b:66:57:88:f8:d6:54:15:9d:58:18:71:57:2f:f6:52:16:
         5c:61:2f:6c:21:cd:6a:96:83:3f:76:f9:fd:93:2c:20:13:a2:
         07:a4:33:e1:fb:9e:1a:9e:a5:d9:40:2f:23:b8:e4:f0:6e:bb:
         07:ad:e6:5f:ab:b7:18:29:f3:82:1e:02:c6:fb:3a:8c:1d:04:
         e5:62:ca:ed:8e:d2:1d:40:db:aa:f8:60:42:24:cb:65:5f:9a:
         81:ef:49:68:e9:ac:64:38:46:5e:6a:9d:88:ab:f3:df:a6:4c:
         07:70:06:a6:d5:82:76:ff:7e:34:66:25:93:17:89:aa:46:28:
         ff:b9:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:48:01 2024 by rpki-client on console-fra.rpki-client.org