Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
File:                     i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json)
Hash identifier:          VpsoGqIT3LGTVS+Lj69h0YLsOlrcUhJVA1/pVw6LZII=
Subject key identifier:   54:33:87:13:B6:E2:91:EC:AF:17:CE:BA:9E:30:DE:A2:A6:5F:FF:0E
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Certificate issuer:       /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial:       0190540040C1E446A446C19F1DFAFE600741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
Manifest number:          0234
Signing time:             Wed 26 Jun 2024 10:03:41 +0000
Manifest this update:     Wed 26 Jun 2024 10:03:41 +0000
Manifest next update:     Thu 27 Jun 2024 10:03:41 +0000
Files and hashes:         1: 2gJJbstmfj8-g989Ga54-w_YUgA.roa (hash: onmL2lmdSvCcrhC0BywzYwJwlvtg4I7noBNCa0l2nkc=)
                          2: C0cQUpZIxtE5w8kwehThBao1qFM.roa (hash: BPjmH1vZ5u15EvUcR9yaIp0l50Is84r/NN/b7zcVD6U=)
                          3: DpxUrEURrqQcJYJqYQwMKXx6s5o.roa (hash: +F/+5yKi9vPlHEN+869+7RE+f0gUuetkvUzgWhs+PCE=)
                          4: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: NZAiFkB0FSgjHNCoWsoDesowADzEn3jQp3XkU/E3vv0=)
                          5: o3EwsAthvZwRg0u_2Tp3dFi0A4Q.roa (hash: bHJs+NnG7+dE8RHAanHbHa0f0IC9DR1RfWI6QGs2ZPk=)
                          6: xsbYWPx4QJkcXy4IJhM5oL-g_nQ.roa (hash: FFWSxmsMm8Nt1LrA9Cthp81nExoxJikiWrh6TqVb2lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:54:00:40:c1:e4:46:a4:46:c1:9f:1d:fa:fe:60:07:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
        Validity
            Not Before: Jun 26 10:03:41 2024 GMT
            Not After : Jun 27 10:03:41 2024 GMT
        Subject: CN=54338713b6e291ecaf17ceba9e30dea2a65fff0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:29:df:bb:ca:5e:9c:23:7d:31:39:c6:a0:
                    49:97:a7:2d:3f:cc:52:f3:c5:be:a4:11:0b:eb:05:
                    73:09:7b:1f:e0:60:c7:8e:95:bc:88:79:2f:05:f4:
                    4b:23:e0:8c:11:93:81:fa:87:16:8d:f2:dc:9c:af:
                    13:be:08:32:f1:e9:14:0e:69:d5:6a:16:37:ae:99:
                    67:8a:61:3c:81:97:ea:8b:17:65:f0:05:ed:e9:78:
                    be:20:49:f2:b0:df:51:35:c6:59:78:85:08:02:85:
                    e6:ce:91:87:d3:74:1f:cc:de:c3:8f:3a:66:06:ce:
                    c8:da:74:f2:54:5b:15:a6:62:3f:2d:ff:28:95:dc:
                    4a:12:df:d0:d2:2d:4c:83:f0:d2:de:d8:ba:dc:07:
                    c0:39:53:1d:d2:e1:e4:c1:7c:1b:47:f8:18:d5:02:
                    e0:6d:8b:11:59:b2:8c:dc:ba:68:69:e5:e1:1a:d0:
                    51:20:43:61:4b:a9:da:da:4f:f7:a0:00:a9:1d:36:
                    af:98:a7:02:74:4f:4e:ae:e9:e3:d0:39:70:90:bd:
                    70:7e:9c:79:2b:4f:b1:56:ee:c5:72:ad:dc:f2:5b:
                    e5:d7:7f:ea:0d:59:36:8f:ab:69:12:5b:4b:a7:9d:
                    ee:00:bb:91:94:89:04:6e:4b:d7:1e:a1:1e:f5:84:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:87:13:B6:E2:91:EC:AF:17:CE:BA:9E:30:DE:A2:A6:5F:FF:0E
            X509v3 Authority Key Identifier:
                keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:58:22:9c:d4:19:1e:43:29:5a:1c:07:40:2f:06:38:6c:
         96:fd:6b:58:b3:d1:8e:cb:90:ee:0e:d7:8a:00:cd:af:88:f9:
         41:87:8c:13:94:7e:fa:49:2a:d2:28:25:98:76:ad:3c:e1:0d:
         e5:17:92:8d:85:07:6d:03:c3:8d:46:61:5c:8c:7d:1d:b3:fb:
         51:fa:bd:fa:a6:7a:be:36:b8:4c:15:4a:3a:50:28:0e:8a:46:
         61:d4:22:ed:93:66:47:61:13:d1:b1:b3:50:86:ef:0d:89:bb:
         f7:c8:56:71:7c:f2:6b:c2:63:81:90:3c:d8:d0:0d:c4:a8:c2:
         90:43:a8:c8:10:da:5d:73:bf:a3:de:fe:d3:3e:b1:ea:3d:3f:
         9f:72:78:49:39:bb:57:68:6e:54:fc:7b:52:0d:6e:75:84:53:
         01:3b:4f:0f:26:4d:d4:12:15:8a:66:4b:7a:51:89:06:b2:ca:
         e9:01:58:7f:94:6e:9b:38:a8:63:1a:7c:ca:0e:d5:fe:f3:2a:
         bb:30:96:77:53:db:db:81:09:57:3c:a5:28:f9:94:20:ab:ad:
         6a:04:ae:b2:11:f3:47:a5:ae:e2:82:26:2f:23:b9:09:75:64:
         d4:e3:c9:1b:30:29:fc:d5:f7:50:b1:6c:c1:fc:8e:49:ac:b7:
         d1:2b:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:28:00 2024 by rpki-client on console-fra.rpki-client.org