Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
File:                     6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft (raw, json)
Hash identifier:          gb0leMoEblOg3TKvD2TQ41o4y9CQGkLETZ01k07C+io=
Subject key identifier:   58:EE:41:D8:7F:A0:1B:7F:80:46:78:1B:6D:65:20:F1:36:30:CD:DE
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       019239269AD0241D231D83CB591D443AB12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
Manifest number:          0A71
Signing time:             Sat 28 Sep 2024 15:01:24 +0000
Manifest this update:     Sat 28 Sep 2024 15:01:24 +0000
Manifest next update:     Sun 29 Sep 2024 15:01:24 +0000
Files and hashes:         1: 4toPOX1OEUGdtE_kM-UB48fhE7U.roa (hash: tr7akRSA7iZ6+ntuIRw9ltthDbTkPTraOvorVI6aJuI=)
                          2: 6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl (hash: G5LIF//xpAjRDnSDaRE21B4WsSdje5VRQ8cS16IL5Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:9a:d0:24:1d:23:1d:83:cb:59:1d:44:3a:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Sep 28 15:01:24 2024 GMT
            Not After : Sep 29 15:01:24 2024 GMT
        Subject: CN=58ee41d87fa01b7f8046781b6d6520f13630cdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:e7:ef:79:08:90:03:ae:c0:ab:b9:45:1a:
                    51:bf:42:86:dc:54:e7:00:7e:a7:db:fd:b2:85:c4:
                    d5:32:cc:40:12:a2:3e:57:2c:b2:29:00:13:3d:3b:
                    e8:1f:62:c7:c8:dc:12:86:7f:07:f0:90:08:05:bf:
                    1a:da:77:30:87:2a:47:68:ed:d4:37:95:b3:9c:af:
                    84:55:5b:1e:d0:45:ae:6b:d4:8c:cb:18:cd:53:76:
                    2e:74:86:05:20:00:d8:f0:22:1e:f1:67:a3:ca:70:
                    3d:4f:7f:6c:9d:c9:3d:4b:30:b4:66:1b:75:a0:cd:
                    32:85:5f:9b:60:27:66:31:04:8e:59:2b:bd:bf:d5:
                    a1:7b:46:cf:7a:a2:05:00:4a:cd:04:81:02:25:dd:
                    4c:fb:28:01:98:61:3b:c3:a8:ef:2b:88:59:8c:77:
                    24:5c:6b:b2:63:49:99:15:02:d1:26:68:70:32:f2:
                    32:52:74:28:53:20:ff:e2:aa:f4:05:83:27:b4:23:
                    0d:f1:9b:95:2c:8a:7f:46:dc:9f:02:99:5b:ee:31:
                    55:a9:89:05:12:7b:ff:16:ad:e7:e8:00:db:1a:84:
                    9b:5d:54:97:77:62:43:c4:ad:44:01:b1:ce:0e:fe:
                    50:54:8e:be:82:1e:29:ac:1e:3f:1f:13:75:66:37:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EE:41:D8:7F:A0:1B:7F:80:46:78:1B:6D:65:20:F1:36:30:CD:DE
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:bc:2d:2e:aa:d9:44:8d:73:d3:bb:73:c4:45:2b:31:c8:
         f4:c6:d3:6a:9b:40:04:ae:17:e4:d4:6a:8c:7e:29:a9:0f:32:
         98:53:4c:85:c3:59:05:cb:01:c8:5c:89:07:4d:d1:d4:6a:74:
         58:51:7e:b6:3a:c1:4e:64:99:90:68:e0:9a:df:ba:84:95:65:
         14:8d:52:0b:d8:ac:e8:b7:10:6d:57:0d:2a:02:42:97:a9:22:
         c0:19:b5:fb:d5:e0:f2:2d:e1:5f:17:60:b5:7a:07:c6:56:6f:
         d2:02:c3:26:8b:ee:1c:3d:1e:02:4c:5d:18:ef:05:12:d8:dc:
         43:14:8e:5b:52:d3:ea:57:dc:3f:60:b8:b6:3a:9d:e8:50:a1:
         87:18:c7:88:4e:e7:43:28:80:2a:4d:f2:fe:c0:a0:d4:13:65:
         fc:1f:49:a7:c2:1c:cb:07:a3:ee:30:e9:65:8b:d6:ad:88:35:
         8d:e3:19:a1:b9:82:bb:09:a0:e3:0b:04:d3:c8:27:ac:b4:eb:
         08:c5:64:f5:16:94:60:5f:42:50:ce:4b:52:5c:71:9c:8e:c0:
         ff:ef:52:07:cc:35:66:60:8f:a0:f6:54:da:46:fe:c3:a2:e6:
         2f:7d:45:ee:73:97:80:e5:0d:0b:1d:46:21:1f:7c:43:bf:47:
         b2:87:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:28 2024 by rpki-client on console-fra.rpki-client.org