Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File:                     RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier:          BA9a2lTKMYOi3/aUieHHZCxVVQqRl2TXk2OVroQlFh4=
Subject key identifier:   69:9F:06:A5:F4:30:81:33:7C:02:6E:EB:5F:94:F9:78:FB:40:E7:0C
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer:       /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial:       018F87487785E6039EAAA3DD57148B3C3781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number:          093E
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: xY/HVAEPvC2mFPFKptIjLVOD8sw/90rrUxDsNEQlpfg=)
                          2: w4feffnYpdqXBlrFgpL9HcggfQ0.roa (hash: QQGk520hyAh7kFq4HgfL7o31R/B8K1rn8CDnByNRfQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:77:85:e6:03:9e:aa:a3:dd:57:14:8b:3c:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=699f06a5f43081337c026eeb5f94f978fb40e70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:ef:96:24:2f:8d:63:4d:be:8f:65:e6:3f:
                    7f:87:1f:2b:21:05:c8:8f:2b:fc:eb:85:bb:91:13:
                    b0:ed:b9:38:81:24:e8:38:b2:3c:69:25:cc:e9:8b:
                    30:55:2a:01:1f:1d:d1:d8:65:70:87:f6:cc:66:13:
                    94:70:38:8a:8f:f5:86:96:c3:b3:0a:73:e3:c7:c0:
                    73:1a:e6:bd:e4:60:23:85:f7:89:12:46:b6:12:2b:
                    b2:d4:cd:59:af:8a:5d:b2:2a:f6:27:c2:5d:8f:9a:
                    15:a3:54:93:a6:d9:f7:53:e6:46:06:c1:e5:62:d6:
                    40:98:6d:d9:c1:59:29:75:df:37:32:d1:bb:51:51:
                    a8:32:07:00:2d:0a:2a:52:4f:b4:9e:da:4b:5c:ae:
                    4e:32:4b:d7:4c:c9:31:ed:14:22:aa:ce:66:e9:33:
                    36:b8:04:0b:d6:4c:fe:60:15:22:c2:c9:63:36:a5:
                    20:46:ef:c1:56:1e:65:12:8f:fb:d2:c9:90:22:b2:
                    2a:99:25:53:ed:d5:08:f7:7e:24:d8:10:7b:ba:51:
                    24:2f:45:16:b5:1f:a4:91:6a:8c:bc:a5:66:5f:a0:
                    38:49:ff:6d:be:96:19:e3:0a:32:7a:fd:b1:24:1e:
                    25:d6:61:8d:a7:8f:ab:ee:90:48:1f:bf:21:25:17:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:06:A5:F4:30:81:33:7C:02:6E:EB:5F:94:F9:78:FB:40:E7:0C
            X509v3 Authority Key Identifier:
                keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:47:46:45:20:17:3e:35:9f:38:45:82:3e:ad:b8:59:18:87:
         33:c0:ee:9c:82:2c:ff:55:0b:36:20:e4:f0:b4:3f:8c:32:91:
         f9:75:96:da:71:50:69:28:16:4c:fe:d5:6a:46:b4:de:5f:2e:
         5d:3a:f2:05:80:77:b9:f7:06:e9:5e:08:c0:c6:e1:22:d5:84:
         fb:c1:7b:3f:1d:b9:ef:ff:68:e3:d5:9e:1b:78:65:e3:ce:b6:
         fe:7c:19:68:62:e0:eb:8f:c8:4e:1a:5d:26:28:c6:3f:1c:a5:
         c2:a3:de:3f:a5:61:f5:46:5c:52:02:86:68:4a:be:6d:0c:81:
         10:45:72:e5:b2:2e:59:3a:15:ea:de:f0:56:30:82:e9:d1:d9:
         ab:6e:fc:c9:04:aa:a0:b5:08:6b:d8:9d:bf:74:6a:28:1d:f1:
         db:9c:0a:58:e9:53:66:c6:57:d5:c7:9b:19:4b:ab:0b:39:dd:
         da:5f:2c:36:c3:94:c0:7d:2d:ce:b4:f0:4e:c5:8e:5a:a0:f4:
         ea:6e:81:34:d8:20:07:ef:cc:66:ba:6f:48:d3:d2:16:b1:f6:
         83:cd:2f:bb:3d:ec:b8:37:e8:dc:0a:51:b7:b3:ae:8a:30:c8:
         25:94:53:04:83:f2:47:ad:7d:e1:14:5d:dd:81:01:0f:f5:69:
         53:fe:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:15 2024 by rpki-client on console-ams.rpki-client.org