Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File:                     EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier:          ISxTJ0Rc8zCCVP4CqxKpbrZkx3IsbJXDGTkbWzJpNw8=
Subject key identifier:   E3:C8:18:AA:FD:87:45:A4:ED:43:0D:76:9A:DC:BC:90:CF:A9:4E:CD
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer:       /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial:       0191F9A254CE5FEFAE02CE7900E12524240F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number:          0161
Signing time:             Mon 16 Sep 2024 07:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 07:00:50 +0000
Files and hashes:         1: DOM2Nbhh1e7_BJehCKvK264urY0.roa (hash: Jkk1Edl0lYxyNWMEECEjJTMla2LZPl0PshBouRWLTrs=)
                          2: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: VZpbKS1i0mf1dgt20fwpgsv83XOcsAVlMbdNpWIaMUQ=)
                          3: X0lKa5f42dWjDwavK7vz54Wp7Bk.roa (hash: iWa7ztbu9FWP57zNKMAsj/e1Lw9nCa+uPR3/8XnC+os=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:54:ce:5f:ef:ae:02:ce:79:00:e1:25:24:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
        Validity
            Not Before: Sep 16 07:00:50 2024 GMT
            Not After : Sep 17 07:00:50 2024 GMT
        Subject: CN=e3c818aafd8745a4ed430d769adcbc90cfa94ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:5b:19:3e:12:77:6b:31:f8:bf:a1:09:07:
                    94:74:f4:e9:58:ff:3a:35:f1:7b:18:c5:50:03:e8:
                    d1:d4:4a:c9:2c:cf:46:e7:30:2b:d9:00:0f:9d:93:
                    26:2a:8c:5a:af:8e:08:ab:97:95:f6:47:df:fe:c9:
                    cf:11:44:c6:2a:6a:dd:55:eb:f6:2c:f1:a1:6c:21:
                    96:06:82:c0:c9:a1:1b:5d:0a:7c:58:df:6a:3f:bc:
                    b7:fa:73:5c:bc:03:4a:c0:d8:f5:35:c5:a4:24:a4:
                    2c:3d:c1:87:bb:79:08:b4:8f:e3:43:04:ab:1d:a7:
                    ed:da:37:f1:1c:ec:6a:ae:a0:03:7b:52:a8:43:de:
                    7b:02:a9:2c:fa:9f:86:33:2e:89:3e:a7:af:7f:93:
                    0d:a9:b8:60:f3:10:df:2f:d0:21:65:89:1b:dc:e8:
                    0b:89:6d:2b:16:21:f1:85:6d:c9:cd:99:52:11:6e:
                    bf:31:bb:13:02:bd:5a:4b:e3:62:da:d5:2b:c6:e1:
                    21:5a:e5:3d:c9:2a:d5:4c:1a:03:4a:e9:df:cb:63:
                    d1:a9:93:d2:3a:d5:4e:7f:ba:27:74:27:3b:fd:57:
                    05:a9:e6:e9:9b:fe:61:90:34:10:6e:3e:a8:a0:af:
                    37:b2:90:15:73:6a:e7:a6:54:dd:cc:a9:f3:60:3d:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:18:AA:FD:87:45:A4:ED:43:0D:76:9A:DC:BC:90:CF:A9:4E:CD
            X509v3 Authority Key Identifier:
                keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:67:92:94:10:3d:1f:56:67:6a:a0:94:21:eb:99:41:77:
         0c:3b:25:b4:2f:e7:c1:cf:05:7e:c7:31:ca:00:fb:fc:6b:18:
         b1:04:ef:ad:bf:d2:b0:b4:03:47:5e:ef:e4:01:a2:51:79:46:
         08:fc:31:ac:91:ff:4a:3e:c5:a3:1d:37:d4:73:8f:f1:3d:94:
         20:d0:c9:7d:42:ca:ba:69:86:87:30:14:fa:86:89:0c:c4:14:
         0f:9b:e3:f6:14:29:b5:c7:57:d7:66:82:02:a8:ff:6f:29:dc:
         8b:a0:d6:52:69:d4:8a:05:c9:93:b1:3a:94:77:65:c6:fd:5a:
         0a:30:4a:09:85:68:ce:ac:56:aa:b7:d0:ee:3b:80:67:f6:e5:
         6d:7a:fd:6a:8d:6c:b6:c3:36:e6:a0:31:c8:5a:56:ad:b2:d0:
         50:47:45:34:c3:48:b8:3d:f0:44:29:d6:f4:8d:2c:06:38:98:
         21:86:08:ee:5c:4c:14:1f:58:1c:16:3e:fd:84:22:e6:6b:ea:
         34:fb:be:33:20:16:25:bc:9e:d8:c7:9e:4e:73:e1:18:da:05:
         60:9c:12:2c:c2:dc:b9:aa:bf:65:df:7f:1c:49:c6:80:d3:82:
         4f:90:94:20:89:ee:67:bf:3d:a0:11:5f:36:04:86:4a:68:33:
         46:17:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:18:08 2024 by rpki-client on console-ams.rpki-client.org