Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File:                     RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier:          zBM/nplp8K2YoIYOtfPuoS65+AS2dxYJHICVnico8dI=
Subject key identifier:   30:A7:D9:5E:0F:EF:41:B6:E5:3C:D6:BD:83:1C:A0:BF:D1:6A:73:9F
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer:       /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial:       018F874AA7ABD8116E3FD252F881A04E1987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: lFQj/H1vJcMtXJGERtpD0JgKXLaN/4ZHpviT211RCUM=)
                          2: fMgjIhpOjdvucU7rFQGj4I9kV_s.roa (hash: 9HgqheM0VglcsLXELhogKmFZNSKCZk0h/61/a3sFmvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a7:ab:d8:11:6e:3f:d2:52:f8:81:a0:4e:19:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=30a7d95e0fef41b6e53cd6bd831ca0bfd16a739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:23:33:99:0d:8e:14:fe:dc:75:c7:db:1d:ce:
                    a9:09:09:1c:d8:79:52:6f:47:ec:bf:5a:02:19:31:
                    15:b8:9b:33:f6:0a:a9:36:64:d6:20:83:da:37:04:
                    05:c7:47:0f:b6:96:9b:20:73:d9:c4:69:f5:5a:6d:
                    06:e2:cf:09:65:e7:5a:cd:de:5a:a4:46:79:0e:7d:
                    c9:d4:a1:1e:28:c5:88:98:80:0a:fb:f1:ca:0f:bd:
                    e6:d6:27:36:62:d3:52:9a:6f:d0:f7:8c:fe:e1:7a:
                    5a:17:e9:c7:e4:82:af:80:04:87:1b:e4:f9:0f:dd:
                    74:b5:93:34:2a:86:0e:06:92:64:50:59:59:c6:68:
                    7d:04:47:40:bc:58:7f:0e:f1:fb:79:af:fa:0e:9d:
                    13:37:54:16:f6:7c:ef:7a:ca:0c:95:ef:51:b9:63:
                    22:ec:f1:85:b4:17:b2:09:cb:88:37:f8:8d:3e:f1:
                    f5:35:48:4c:d6:fb:be:09:32:72:28:2f:52:55:a2:
                    12:c5:7d:8c:c9:d1:c7:a8:6f:86:4f:98:cc:ed:40:
                    31:42:79:c0:bf:96:88:d3:48:6c:c5:9a:2a:28:b8:
                    c3:05:74:b6:33:12:7d:aa:a5:d3:09:12:b7:b7:11:
                    c4:9d:c2:f9:ad:a0:5d:e1:fd:e5:f7:8c:a8:87:d1:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:D9:5E:0F:EF:41:B6:E5:3C:D6:BD:83:1C:A0:BF:D1:6A:73:9F
            X509v3 Authority Key Identifier:
                keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:de:f5:b1:82:f9:ab:a4:f0:af:ec:6d:f3:87:b7:7d:3a:b6:
         0e:f9:a5:06:63:29:7f:f9:23:ba:1e:37:09:4c:9f:25:bb:9b:
         f6:d1:fc:30:27:3a:54:17:3b:ca:f2:5c:b7:0e:91:49:37:cc:
         44:fa:ac:3f:6c:8b:00:e7:3c:49:21:a2:ad:2c:7f:89:d9:cd:
         9f:35:9d:4a:84:a2:33:bd:db:38:d2:e8:ee:ee:65:dd:d7:1d:
         fa:a2:32:5c:e0:37:67:5e:73:12:0c:31:45:0c:5d:4a:38:d1:
         bd:80:37:ef:67:a8:8f:01:9f:69:d0:05:1f:4e:55:3e:0f:3e:
         33:3b:92:f6:e8:2b:8d:ba:bc:dd:00:ce:8d:fc:8e:06:75:88:
         37:00:47:75:96:6b:90:be:7e:e6:99:0a:ea:65:56:bf:a7:f5:
         cb:09:85:97:31:43:05:25:78:42:5e:ec:4b:1c:98:a6:b4:fd:
         82:6c:01:7e:52:8e:06:40:aa:fa:3b:02:15:de:70:b1:fe:e7:
         e3:eb:3c:5f:f6:99:da:44:8f:73:09:de:ad:7c:24:f7:5f:1f:
         e7:09:cd:0b:00:39:b7:53:18:b8:9b:fe:ca:71:34:5d:ff:c2:
         5c:63:5d:35:af:4a:27:e8:61:94:36:72:72:a6:83:8b:6e:cc:
         1c:d9:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:27 2024 by rpki-client on console-fra.rpki-client.org