Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          I7YfF/SjcaTR3ZCmn1+ufix5QAWAl7bI7n8JTS9n5es=
Subject key identifier:   E3:4D:C7:A7:AA:9B:DB:A8:FE:8E:59:DD:F0:14:0B:31:30:A7:B6:E6
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       018F99BCD644098FAFD1AD875CB095DE8595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          6F
Signing time:             Tue 21 May 2024 06:00:40 +0000
Manifest this update:     Tue 21 May 2024 06:00:40 +0000
Manifest next update:     Wed 22 May 2024 06:00:40 +0000
Files and hashes:         1: DVyN9e6ORl2zOHceE77l_alvFzg.roa (hash: PQHphM6aTK0efjXdHxe5Us2RUeh6lovYx2piHqOR8lw=)
                          2: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 4rmVhj6DC27N/ggfpqGBhwAUJpSVfGGus+LXQTOr2fQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:bc:d6:44:09:8f:af:d1:ad:87:5c:b0:95:de:85:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: May 21 06:00:40 2024 GMT
            Not After : May 22 06:00:40 2024 GMT
        Subject: CN=e34dc7a7aa9bdba8fe8e59ddf0140b3130a7b6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:58:da:92:6b:13:83:2d:aa:71:85:86:2e:
                    52:23:d1:cb:08:46:e0:f0:69:ff:35:a2:39:60:c2:
                    7d:61:45:9f:f3:cf:4f:2b:0f:f6:8a:2a:15:bf:5c:
                    9d:e2:02:73:de:bf:bc:06:be:06:e8:97:6a:6f:d8:
                    31:12:74:9d:45:a1:f2:c5:bd:f4:26:dc:21:44:43:
                    28:4b:d0:b7:1e:b6:a6:ab:3f:6b:19:6a:ec:67:4b:
                    58:bc:c5:07:9c:de:39:d5:83:0c:c6:3f:8c:a8:65:
                    56:f1:19:a9:4a:ad:f2:3a:b6:18:89:9c:7a:6c:ff:
                    c9:6f:a9:d3:dd:00:51:31:38:09:65:2f:fb:60:c5:
                    2c:ac:8b:f2:da:98:5d:7d:18:70:59:f7:ab:aa:db:
                    8d:d5:c0:c6:0c:1d:ad:5b:9a:ca:1b:e5:ea:85:c7:
                    57:24:4f:53:5c:e6:3a:cf:5b:45:9f:a9:8b:96:30:
                    d8:92:a0:d3:9f:b2:cd:48:64:58:f5:7f:3c:0c:19:
                    de:5d:a9:f7:88:bf:3c:f6:67:64:6a:d6:95:88:58:
                    a6:bf:2a:b4:b9:33:d7:e9:73:4a:a5:4d:af:7e:e8:
                    64:79:32:40:d2:b6:7c:dd:58:85:3d:e4:6c:9b:4f:
                    22:cb:f3:9d:55:0d:b6:0c:9c:40:8f:f5:05:4e:36:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4D:C7:A7:AA:9B:DB:A8:FE:8E:59:DD:F0:14:0B:31:30:A7:B6:E6
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d1:a1:0f:01:11:4b:47:77:22:e5:4c:98:99:3d:bd:58:12:
         85:a3:ee:6b:41:43:23:d1:85:08:f5:07:3a:b2:3f:21:3c:a7:
         ca:34:db:f4:92:04:c2:77:40:86:a5:f2:fb:79:fb:d5:c9:f8:
         8a:24:3d:aa:99:7c:24:dc:d6:6a:3f:d8:ec:bf:3f:6d:ec:46:
         e2:bd:6e:be:79:c4:46:31:18:50:c8:4a:de:a8:30:4f:79:6f:
         6e:73:55:41:e5:27:d6:12:f8:20:a0:90:de:5d:e3:ca:9b:46:
         19:ae:41:9d:12:81:c8:04:78:a3:d5:91:48:ae:75:11:29:51:
         ba:57:d3:93:20:d2:24:dd:95:6a:87:aa:b5:34:47:8c:0b:4f:
         90:90:42:59:9d:90:51:ff:ec:6d:d3:bf:09:f8:b6:80:9c:7a:
         af:5e:24:38:c6:99:e7:6f:72:4d:6f:4b:a8:d7:b4:14:e5:40:
         cd:6e:c5:96:3c:c7:7f:ca:51:3a:b2:1f:06:b9:4a:02:dc:f1:
         89:ab:9b:92:c3:34:39:d8:34:91:1d:5b:ff:6f:65:46:29:a8:
         a4:53:24:8a:a1:05:a3:a3:ff:b6:46:91:b3:2d:f1:a0:98:a7:
         98:05:ed:7e:75:94:93:62:1f:90:57:e5:c2:02:7b:5d:2d:58:
         54:9e:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:43:57 2024 by rpki-client on console-ams.rpki-client.org