Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          NO7FWQG30hTj6MMmrkhoxBfawoo1LMA7SUzAhXBzG7Y=
Subject key identifier:   36:0D:AC:4A:5E:1E:64:11:8B:E5:07:EA:BE:84:93:D6:62:69:6A:6D
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       018F399BC400746B916F8F3168EB76CC15BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          0CCD
Signing time:             Thu 02 May 2024 14:01:00 +0000
Manifest this update:     Thu 02 May 2024 14:01:00 +0000
Manifest next update:     Fri 03 May 2024 14:01:00 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: +1PgJU60J8Nmj9yp2COq2F9cnHjrPrnDBLvYUfET2+0=)
                          2: HVFukbDrhHFYDEUH8ZVFmAqdQEk.roa (hash: mkL/5YbX62qLF+xtQQL1gOTHtX5zU6LG02CdBxrukWA=)
                          3: kjpiu_3L7j5zidYb8FibX6kf2xc.roa (hash: AjqJ3TsXr7HLcBVflpbl50HvNG0AXSTm8YF5G340rWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:9b:c4:00:74:6b:91:6f:8f:31:68:eb:76:cc:15:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: May  2 14:01:00 2024 GMT
            Not After : May  3 14:01:00 2024 GMT
        Subject: CN=360dac4a5e1e64118be507eabe8493d662696a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:39:ae:5b:b4:b7:78:fb:6e:e8:29:f6:96:
                    4b:35:b3:85:a5:70:c2:f3:4f:1b:e7:28:ab:3c:16:
                    83:0e:a0:92:73:2c:b0:99:35:6f:73:af:16:b2:0e:
                    07:ef:47:d3:e7:2e:27:54:ad:fe:1b:f8:1c:78:7b:
                    1a:e0:51:c5:38:f3:dc:62:2e:4f:16:7f:48:1b:61:
                    84:45:ec:07:58:14:d6:5f:24:21:65:14:0f:3b:0d:
                    79:a3:32:da:a2:e3:c4:99:2f:c5:b2:e1:8a:c5:f5:
                    4b:54:f7:73:b0:18:69:61:cd:da:0c:be:20:b7:21:
                    6c:45:51:70:6e:dd:9c:df:07:3f:aa:86:b2:1a:f0:
                    06:80:6b:05:28:a4:07:98:a0:34:66:be:30:0e:dc:
                    12:09:8b:88:2b:87:4f:99:45:fd:06:5c:ff:bf:39:
                    1e:90:90:3e:6a:c9:19:24:76:cf:06:f8:27:c5:ed:
                    13:bb:cc:48:d7:8d:f7:0e:4a:e1:cc:e0:ae:16:f3:
                    76:e7:09:e1:72:73:b0:01:ec:60:47:ac:27:0f:12:
                    fe:69:3b:89:13:5d:4f:57:8b:a9:5d:19:2a:d9:42:
                    94:cc:3e:3b:50:46:60:15:a7:3c:d6:7e:43:59:94:
                    da:34:9c:d5:66:88:0b:ae:a6:b5:fa:d1:8e:85:cf:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0D:AC:4A:5E:1E:64:11:8B:E5:07:EA:BE:84:93:D6:62:69:6A:6D
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:3b:f5:93:d6:25:5a:14:25:18:bb:dc:fd:1e:17:74:67:
         c6:85:c1:e8:e8:3a:c6:31:83:34:ca:61:34:3a:b1:d0:e5:72:
         51:d2:00:41:78:dd:ec:3b:36:c1:ff:27:2c:34:5f:25:c7:db:
         bf:be:4d:dd:63:ba:1b:14:8d:6c:76:f5:9b:04:7d:5e:f9:6c:
         64:64:e1:d0:11:d9:77:87:21:0f:e2:84:09:82:da:38:46:52:
         dd:c7:a3:59:0a:57:25:a6:9b:dd:a8:03:ad:ab:01:63:7b:27:
         c5:98:67:53:bd:5a:9d:55:10:36:be:37:0e:c0:c6:73:a3:a8:
         df:04:69:09:21:3d:5f:7c:c4:70:8e:0d:46:1b:26:e8:66:81:
         2f:3f:01:35:20:f5:d1:de:c6:89:6b:c6:53:d1:f0:07:a1:91:
         40:02:dd:50:54:90:af:e5:ba:e6:80:8f:b4:22:47:06:4d:d8:
         38:5e:bf:80:d0:d3:21:74:dc:46:19:96:8c:fa:6f:21:a8:8a:
         7a:fe:20:6e:3c:62:f3:79:c5:b8:8b:44:d8:60:87:16:1f:55:
         d7:64:f5:92:aa:bd:52:e3:36:90:37:d5:b8:38:4b:64:91:d0:
         d8:28:7b:d2:5e:a6:c7:70:3f:25:ea:be:c2:62:de:fc:b1:7a:
         ff:32:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:17:13 2024 by rpki-client on console-fra.rpki-client.org