Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          0YV1ubR5nZ8cjiEMykfYfg0/MuKcidL0A6xLs0rm2yo=
Subject key identifier:   CE:59:FD:3D:71:E1:BA:9D:FE:0A:14:A5:8E:48:20:AD:00:25:B0:AA
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       019025A58C62311C610D7BD43AC6BFABE689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0573
Signing time:             Mon 17 Jun 2024 10:02:04 +0000
Manifest this update:     Mon 17 Jun 2024 10:02:04 +0000
Manifest next update:     Tue 18 Jun 2024 10:02:04 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: nrd3kBhAVjig5C9reX85e11osphfKKGzbIdS3IVtNaw=)
                          2: SjpHcVasCrx_WiEIn_RC45lEh5I.roa (hash: F0HbPjlEqHzTfZIkI/cNNpl+hHmV1BsiyHcZGuWw5/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:25:a5:8c:62:31:1c:61:0d:7b:d4:3a:c6:bf:ab:e6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Jun 17 10:02:04 2024 GMT
            Not After : Jun 18 10:02:04 2024 GMT
        Subject: CN=ce59fd3d71e1ba9dfe0a14a58e4820ad0025b0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:0c:77:44:7b:af:92:86:53:18:8d:40:fb:
                    08:fb:e1:d5:20:e9:09:5c:42:65:8c:8e:6c:31:61:
                    98:3b:b0:31:f8:df:12:08:7b:16:83:e2:c0:de:4d:
                    c9:13:ad:06:57:7b:86:0f:02:83:42:88:cb:aa:d8:
                    25:a8:03:84:7c:2b:cd:d4:87:8e:25:f6:67:96:49:
                    23:32:e5:43:bd:21:8d:3b:4b:03:57:41:2f:ae:c7:
                    93:41:78:c4:1e:14:85:19:f9:ab:9c:bf:82:bb:c1:
                    52:c1:fc:3b:d9:5c:70:2f:05:91:40:ff:f9:5b:9f:
                    7e:e9:29:6d:02:1a:d1:1a:48:79:39:67:3e:96:b7:
                    c5:f1:73:cf:f6:a3:1c:21:b8:b6:87:b2:0c:2d:85:
                    1e:17:b0:03:70:f7:39:3a:ed:e4:2e:66:0d:5f:dc:
                    43:3d:86:af:dc:17:4e:a2:70:18:95:54:e7:8c:23:
                    bb:43:3a:05:1e:2c:f7:f0:ea:aa:54:bf:8a:63:aa:
                    98:59:f6:47:21:1a:57:6b:a6:70:21:89:44:20:da:
                    4f:ea:1e:3d:a7:e9:12:0c:18:b7:ff:cd:75:9b:5e:
                    c0:04:e1:4d:82:ce:2b:e6:62:59:86:4f:9c:9b:d7:
                    a9:66:cc:09:58:06:ff:b3:c5:b4:be:39:43:34:3b:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:FD:3D:71:E1:BA:9D:FE:0A:14:A5:8E:48:20:AD:00:25:B0:AA
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:79:bf:13:ff:1e:41:dc:9b:50:bc:89:d2:b8:fa:cb:69:48:
         e8:23:94:e7:78:ca:eb:15:02:26:6b:29:99:36:fe:c9:44:4c:
         e9:a2:a3:f3:9c:c2:7c:e0:92:d5:33:1b:fc:57:cc:53:47:04:
         4c:d0:cf:d6:eb:8f:14:d4:50:b7:13:d2:53:db:60:36:1b:fe:
         a2:a7:07:4c:f4:d0:a6:b6:97:8f:0f:d3:05:0b:de:0a:68:f0:
         06:65:b9:8d:f5:42:b1:c7:55:1f:75:a5:a6:4d:40:22:02:ea:
         65:6a:b4:ab:1c:e3:dd:2b:32:4a:c7:0f:2d:cf:e8:b8:6a:3a:
         45:13:18:ad:a5:d3:bb:5a:7d:8a:12:a1:0b:4a:a2:5e:a5:dc:
         bd:7c:fd:0b:d0:1d:f1:ce:b8:2b:21:aa:5b:c6:01:f7:df:83:
         a2:50:03:83:ed:5d:4c:1c:30:ce:ac:22:2c:b7:ad:da:8a:6f:
         1d:1d:eb:87:0d:5a:bd:31:e6:cb:f2:8c:f7:07:72:0a:71:5f:
         81:72:cb:59:bc:a5:7c:c4:ef:d2:f6:2d:ce:82:ea:0f:19:13:
         99:88:dd:ff:7b:67:0d:9f:3c:16:99:73:32:81:cd:95:88:0a:
         c0:fa:4d:f7:6c:0f:87:9a:0d:69:e1:8c:a4:3b:85:3a:3a:c4:
         7e:40:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:16:30 2024 by rpki-client on console-ams.rpki-client.org