Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File:                     EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier:          DQG1aMIvWiADbab7evSH/LIfOPxxY0akuvGECG8iHJg=
Subject key identifier:   77:8D:03:7C:98:7B:F5:C1:3A:64:7A:62:B9:F2:03:0B:24:10:77:5B
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       018F4C7DB2D48367D4A4C15689CD13C38C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number:          0E94
Signing time:             Mon 06 May 2024 06:00:57 +0000
Manifest this update:     Mon 06 May 2024 06:00:57 +0000
Manifest next update:     Tue 07 May 2024 06:00:57 +0000
Files and hashes:         1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: u2LU8P0+/+sL/cFsE1/8PCrJx4YYppihxgDbjsVZRJA=)
                          2: aAR8LBeel36AvKyXAX2cZd_1KBc.roa (hash: ciZkfh9cEMkSxhr4al1V4wlKznpshyJBuktiqkhhCKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7d:b2:d4:83:67:d4:a4:c1:56:89:cd:13:c3:8c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: May  6 06:00:57 2024 GMT
            Not After : May  7 06:00:57 2024 GMT
        Subject: CN=778d037c987bf5c13a647a62b9f2030b2410775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:a8:9d:6a:81:3b:9a:a7:a5:0e:74:bf:b5:
                    ed:0d:70:43:17:5c:5d:95:e1:9d:9f:3d:58:66:c5:
                    81:ee:99:1f:d0:40:80:d7:13:5f:a0:98:94:06:f3:
                    3b:a6:33:0a:0f:42:13:e1:0d:67:21:4f:cc:42:fb:
                    78:dc:8d:bb:72:a0:85:ce:7e:8f:ff:3c:48:80:ee:
                    e3:6d:a8:2f:d1:6e:24:eb:d2:b6:c3:b6:8d:e1:d1:
                    fc:da:1a:e7:ba:e8:6e:cd:4c:a5:be:6a:4e:b8:79:
                    47:29:4d:36:01:66:fb:0d:39:2c:c5:ad:4d:5c:05:
                    79:03:cf:70:16:9e:30:6b:22:bf:3c:39:fe:bc:d5:
                    2c:26:4e:13:9a:22:02:2d:9a:97:24:44:f1:71:67:
                    8e:b7:ba:2f:e4:13:fb:ab:b4:30:7d:cb:b5:1a:e7:
                    24:e5:c5:95:00:35:7a:e4:af:95:69:30:9c:0c:d3:
                    78:c7:88:c4:36:34:57:27:3b:53:07:2c:38:b2:5c:
                    47:39:0d:3d:00:84:88:89:cc:70:d1:57:7f:bb:4e:
                    ab:31:50:1b:13:ab:97:6b:89:a9:93:b4:70:21:b1:
                    34:97:86:fe:69:3d:57:6a:3c:58:f5:26:90:8b:cb:
                    d5:70:24:c6:4a:89:a4:77:5f:31:71:a8:ce:3d:e8:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:03:7C:98:7B:F5:C1:3A:64:7A:62:B9:F2:03:0B:24:10:77:5B
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:31:b6:62:b7:27:c5:5a:45:64:6c:80:21:08:84:7c:04:53:
         04:1d:2c:25:4e:22:23:2b:1a:50:8f:db:4a:f5:99:09:a6:ba:
         dd:87:31:f8:51:3c:bc:04:9c:d1:b9:ca:3e:bb:44:95:f1:05:
         e2:4d:21:be:ad:b6:b3:74:bf:f8:1f:18:36:a4:32:48:f9:91:
         5f:23:7b:72:47:f3:41:2d:d9:90:8d:be:3f:bf:9d:11:92:e4:
         3a:c6:74:72:4a:c8:87:59:e3:7d:12:4e:e1:c0:20:17:9a:ac:
         57:9c:33:9f:5e:f4:fc:cc:c2:0a:27:9e:61:29:f8:b5:b3:7f:
         e7:79:d3:93:19:8d:b8:e1:9a:49:b8:ba:c1:50:57:28:c0:9f:
         9d:0f:d9:2f:a3:33:a5:5b:25:17:c0:4f:f0:bf:97:1e:52:d9:
         23:28:42:06:5f:d8:7a:ac:16:9c:78:7c:3d:84:e2:09:d7:3f:
         4a:77:6d:be:23:47:89:0f:e1:93:b7:83:5a:c5:02:98:ff:82:
         db:f2:0f:a9:58:e4:d2:5b:98:8f:bc:b7:d3:c2:c5:55:2c:6b:
         8e:f5:42:2f:40:6a:46:c9:13:b1:c2:59:64:2d:4f:1e:ae:a0:
         04:ca:f7:e6:52:eb:1f:09:b7:8c:a6:6c:75:ce:28:b4:3e:50:
         6d:c0:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:18:23 2024 by rpki-client on console-fra.rpki-client.org