Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File:                     73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier:          zARGaZnUzbTrktS/23C7txJ9dVmg+7qN25Dfr9rY3PY=
Subject key identifier:   05:CE:30:2E:1E:F5:E7:D3:5A:2B:72:46:63:44:3A:79:EC:D1:79:2C
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer:       /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial:       018F4DFE716586471BFD2D9CDC95C3CCEEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 13:01:11 +0000
Manifest this update:     Mon 06 May 2024 13:01:11 +0000
Manifest next update:     Tue 07 May 2024 13:01:11 +0000
Files and hashes:         1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: Rjzw9QfemaR/L0wUnqPyyDyOVOeWK1tw6NHJ+dqLO38=)
                          2: P-tT5oqjxboOzkKoyNJ1oR_qWoQ.roa (hash: Ad/29VORhIrbEjl0pLfvRbt1qL128YsmDwI3BwPQdEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:71:65:86:47:1b:fd:2d:9c:dc:95:c3:cc:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
        Validity
            Not Before: May  6 13:01:11 2024 GMT
            Not After : May  7 13:01:11 2024 GMT
        Subject: CN=05ce302e1ef5e7d35a2b724663443a79ecd1792c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:44:00:54:25:ef:38:48:9f:8c:d4:de:4f:
                    ed:5f:92:0c:dc:12:c5:8c:f3:b6:a8:58:da:13:88:
                    68:bf:66:3a:8f:66:46:ea:5b:61:f2:bf:fa:b6:fb:
                    2e:c6:81:94:0f:c9:c7:ec:a1:3d:40:c5:50:9c:59:
                    74:dc:e0:be:8f:1f:4f:a4:f4:0e:2e:e3:ab:f1:c3:
                    af:22:7e:b1:8d:ef:82:88:c3:86:71:87:06:3a:4b:
                    2c:0e:5f:8a:7d:6f:50:a2:8b:fa:76:05:ae:e7:49:
                    38:0d:ec:47:fa:be:33:23:67:8d:57:fe:6e:9c:b3:
                    b3:ff:d0:df:76:82:5a:82:4e:5c:4b:25:fb:01:eb:
                    70:d5:c9:50:ae:d0:12:e6:e7:e1:fd:43:f3:34:d9:
                    f5:81:18:d1:ec:ab:85:a8:79:ee:5c:18:52:36:91:
                    c5:9f:b7:f9:c7:f1:76:6b:07:ad:71:49:dd:4f:f8:
                    e8:32:71:8f:a1:bb:ba:82:2b:94:14:c4:91:07:df:
                    54:7d:47:92:aa:95:e5:67:36:d7:19:0f:df:43:52:
                    4c:50:c0:55:d0:ed:07:28:0f:09:a7:fe:f2:e3:bf:
                    1b:ee:70:a8:cb:22:b5:1d:cf:b5:1c:0c:4a:7f:96:
                    59:99:01:7a:b4:87:b7:62:76:97:8f:02:6f:67:3b:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CE:30:2E:1E:F5:E7:D3:5A:2B:72:46:63:44:3A:79:EC:D1:79:2C
            X509v3 Authority Key Identifier:
                keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:78:d2:bb:2b:30:a4:3f:f5:c6:d9:81:ff:de:93:64:46:22:
         68:19:73:94:ad:41:af:01:28:05:fe:9f:3b:b7:6c:e2:60:df:
         52:aa:a8:d5:07:df:89:5c:d6:29:c6:07:2f:97:03:70:b0:57:
         e2:e9:b2:ed:3a:11:44:dc:ea:59:1f:1e:bf:f7:6d:2a:76:a9:
         b0:f9:41:47:8f:96:03:e1:66:e4:d7:22:54:dd:89:98:93:7f:
         35:41:cd:f4:e8:4a:72:87:32:b5:db:88:fa:24:0f:21:5b:24:
         32:ed:a2:e9:e7:65:29:60:2b:34:5d:3d:27:38:8f:6b:74:86:
         a6:75:61:dd:d5:25:a3:fa:45:32:1d:6f:32:0d:5c:b3:e0:7e:
         f8:01:82:d8:98:c1:a6:fe:d9:e0:cd:ce:04:38:d7:6f:ca:9b:
         e1:e8:a3:f0:40:0e:fd:7d:31:ea:b0:61:92:20:d7:a7:75:b8:
         74:1c:a4:6f:05:2d:1a:44:9a:a5:8c:79:84:f0:3f:8f:15:00:
         7f:fc:5a:00:7f:ff:6b:85:7a:6a:f7:d6:e9:78:96:5d:45:d6:
         47:53:e9:40:89:79:45:e4:8b:d9:c4:2a:3e:ac:db:b7:da:cc:
         51:45:66:e1:4b:73:1b:e4:c3:15:32:ef:be:ba:c3:96:c1:e5:
         ec:9b:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:07:01 2024 by rpki-client on console-ams.rpki-client.org