Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File:                     F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier:          4vzPP6Nbz0u/3foODFyKYZUeHuTyepMRbmQkk8dBFwM=
Subject key identifier:   AE:9E:E1:EC:EC:74:B0:FE:97:BA:A1:42:9A:C8:A6:4C:14:77:E2:56
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer:       /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial:       018F43B32E4CFAF7BE4D99C6FEFB65789200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number:          0D61
Signing time:             Sat 04 May 2024 13:02:47 +0000
Manifest this update:     Sat 04 May 2024 13:02:47 +0000
Manifest next update:     Sun 05 May 2024 13:02:47 +0000
Files and hashes:         1: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: Nr/k6N3td+SjPQw7XpIjk0uW2qJP53lyfJd9bYKn2Vc=)
                          2: N9qcHPlXTkCMGqtTFOubU0Xp8j0.roa (hash: fNsczq3ZgVMC4rixHV+8oKyYG7xNs9jElM0ZLCQUsx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:2e:4c:fa:f7:be:4d:99:c6:fe:fb:65:78:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
        Validity
            Not Before: May  4 13:02:47 2024 GMT
            Not After : May  5 13:02:47 2024 GMT
        Subject: CN=ae9ee1ecec74b0fe97baa1429ac8a64c1477e256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:cf:85:f6:8e:77:28:57:32:d6:58:70:47:
                    8c:9d:20:f3:66:4c:b1:b7:57:d0:11:f2:6e:dd:b2:
                    99:f2:c0:91:74:18:98:a1:e8:25:16:d2:74:99:52:
                    b1:3a:a4:f6:06:ab:78:5e:51:1d:40:71:3d:4e:65:
                    85:85:91:4a:b9:be:af:0b:93:39:5b:b0:8d:fb:99:
                    c4:58:69:b2:68:c3:ba:a4:4a:37:4a:1c:80:ca:d0:
                    9d:32:00:6c:d1:9f:4b:54:f0:8a:b3:64:81:b1:f6:
                    76:f7:0e:d8:41:e7:91:4c:9b:0a:fc:c8:f7:cc:71:
                    57:57:15:47:77:2f:25:61:94:84:5b:c7:b4:8d:a2:
                    e8:ca:62:c9:11:63:35:d4:df:85:74:bf:ae:68:07:
                    bf:31:bc:d9:d5:b5:40:3d:fa:02:3b:c2:05:53:f6:
                    0e:e5:8a:bf:02:8d:bd:48:fe:0c:fb:33:1c:0a:4d:
                    49:7a:bd:f6:cb:ff:3d:5b:78:6d:74:99:10:c3:09:
                    c9:51:bb:6a:bf:9a:47:83:4e:b2:4b:80:4f:1f:15:
                    0f:96:ef:bd:98:4e:38:0f:cd:70:53:06:e6:bf:ed:
                    9f:59:65:aa:80:00:1d:0b:47:a9:04:ed:49:52:7a:
                    8b:00:a9:82:4a:d8:fc:e1:f7:a8:d1:e8:cd:73:c4:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:E1:EC:EC:74:B0:FE:97:BA:A1:42:9A:C8:A6:4C:14:77:E2:56
            X509v3 Authority Key Identifier:
                keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:87:eb:e6:ee:1d:47:6a:72:dc:96:83:ff:3e:73:58:ae:
         ce:bd:91:e4:23:b4:98:f9:d4:1c:06:83:e8:f5:d1:62:fb:cd:
         39:c0:c5:3c:6f:04:b8:f4:ad:7a:ea:59:23:a2:f0:94:ff:f9:
         9d:89:3a:da:69:3f:dd:ff:73:2e:aa:22:a7:92:d0:37:bf:49:
         38:53:fd:7f:b1:50:11:c9:bb:8e:dd:2a:d7:6e:d3:20:69:15:
         ec:ae:92:7c:30:33:58:ab:0e:7c:b9:85:fc:04:52:7b:78:32:
         5f:65:85:f6:a7:6c:73:eb:44:72:a1:05:b8:7b:cd:86:bb:56:
         9d:21:0b:62:69:1b:3f:37:cc:12:60:57:2e:22:9f:62:46:2f:
         c1:00:5b:ba:a8:78:06:2e:ff:e5:49:55:07:38:fc:54:34:3a:
         15:e5:1c:f6:ea:b4:ca:28:ea:70:3b:f7:53:e6:c6:4d:5a:02:
         a9:07:08:f5:73:80:9d:2e:e7:d9:a7:40:5a:b8:f1:9d:66:5f:
         e3:d2:57:98:54:e4:98:29:ea:69:05:ff:c5:4d:f9:26:4e:0c:
         e3:b0:7e:48:ce:8e:98:1e:25:39:b5:0b:b2:b0:f2:fe:e1:17:
         03:72:14:ee:28:c8:35:6d:0a:09:04:bf:d3:86:a0:69:60:31:
         4b:8b:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:23:55 2024 by rpki-client on console-fra.rpki-client.org