Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          fsMmc+ovHbjX3DgOYCvfU71dBdWB+HbeROGOzPuwLy8=
Subject key identifier:   A8:12:9A:66:46:B0:C0:F1:B8:39:E2:B9:11:1D:93:38:62:07:76:7E
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       018F460E0A7CB1C6133573BC730F2EF7BFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          0D20
Signing time:             Sun 05 May 2024 00:01:16 +0000
Manifest this update:     Sun 05 May 2024 00:01:16 +0000
Manifest next update:     Mon 06 May 2024 00:01:16 +0000
Files and hashes:         1: 3W-qvsVxEJQdvG4us0RBrPOtXWQ.roa (hash: t+CBGAnOpyWHeB4CewE+Bz1GbJ1fSAlBOosDVZG8c9o=)
                          2: 5rqBzJIpRo5cPDGFcsErAcqKSpQ.roa (hash: zxUa/sHXaTmymGKJChSZzWhfRwdQS4375t+Zf/Qhiyk=)
                          3: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: BIi2QstV3BRb6SJ0U3vUEcs2NE1/5ZaFC3EO2cQqOjk=)
                          4: tnwYezzwZ0rGYG5_9HikvICInNo.roa (hash: F7k5wbIpwjKtur0G0WOUIIZvIjMkAtbreB0XT46JyK0=)
                          5: xYcg4ixiEA5pQSPj8yMYmVdva38.roa (hash: JvvedfGueTNEnvQk5/rmBEvEwMG8HYv0X2PxwiM1vCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:0a:7c:b1:c6:13:35:73:bc:73:0f:2e:f7:bf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: May  5 00:01:16 2024 GMT
            Not After : May  6 00:01:16 2024 GMT
        Subject: CN=a8129a6646b0c0f1b839e2b9111d93386207767e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:5a:0c:c2:68:65:4f:ae:1f:e8:9e:e1:51:
                    e4:00:67:d1:fc:60:4b:a7:62:67:5c:62:50:dc:80:
                    ba:ba:5f:4e:54:4d:ee:ed:cd:75:51:95:9f:71:aa:
                    e0:bb:13:ab:ba:41:d7:08:5d:1c:90:26:08:50:b7:
                    4e:24:6c:85:0f:db:72:30:e9:c5:8b:99:53:21:74:
                    73:cd:b1:e1:2b:03:74:d6:66:1f:ef:c9:71:2e:28:
                    5e:9b:29:e8:61:d3:5d:30:2d:6e:4b:91:b5:5c:5e:
                    d9:75:e3:30:f9:a0:d2:0c:f0:9b:11:39:b7:88:50:
                    f5:d8:e1:32:db:a9:96:13:17:8a:1e:a1:12:20:32:
                    18:fa:05:cd:12:60:14:91:88:0e:11:7f:1b:87:05:
                    1a:5f:c6:fc:65:fc:3a:bc:26:62:99:59:e0:66:79:
                    37:b9:69:2f:84:58:b4:2b:76:07:68:fe:5f:0d:c1:
                    10:3e:5a:32:a0:4c:40:c3:09:f2:fa:58:a1:ec:f4:
                    b6:80:c6:90:8d:5f:a8:69:30:e1:38:56:d4:e9:89:
                    a6:e9:93:51:65:d5:3b:3c:f8:c2:a6:ef:72:45:87:
                    6b:91:11:77:39:a6:79:eb:45:ff:62:d3:2d:12:5a:
                    bd:83:96:73:03:f7:6d:b4:8b:5c:ed:b2:e1:13:a7:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:12:9A:66:46:B0:C0:F1:B8:39:E2:B9:11:1D:93:38:62:07:76:7E
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:f5:07:05:5a:b9:ff:6b:0e:b2:9b:3b:2a:fe:16:72:8c:
         43:ba:a5:0b:fa:21:9e:54:21:f6:0e:3c:af:11:79:de:d5:f8:
         71:a5:63:20:27:6e:ac:6d:cd:26:f3:fb:4b:b4:8a:ae:a0:a5:
         92:fb:24:30:cd:28:90:52:a7:bd:f8:42:fd:50:48:00:05:4c:
         1f:f4:b2:2d:52:ca:7c:af:ed:66:5a:a2:f6:08:af:bf:b2:d0:
         9a:b7:db:99:da:03:1a:d5:31:2a:66:2d:e9:72:cc:11:e9:87:
         98:8b:81:13:95:ff:64:ff:99:c9:9d:57:47:85:d5:6f:c1:1c:
         19:7b:78:62:8e:c8:c5:49:b7:14:f0:57:6e:bf:67:f5:72:e0:
         35:3b:01:81:c2:29:4f:a9:83:d8:1c:e1:dd:25:fb:b1:ee:b8:
         9e:59:df:b0:a9:fe:49:0d:7e:74:da:44:a3:91:4b:89:74:05:
         b7:14:34:1e:87:21:3b:cc:4e:b2:53:7f:b5:3b:dd:84:c0:ae:
         84:8e:81:61:48:8c:70:bf:2f:ad:78:74:dc:9b:0f:1f:a1:ea:
         e6:eb:19:d6:34:79:aa:40:1a:7f:d7:20:82:02:f1:86:e3:be:
         ac:34:fb:db:0c:f8:a3:cc:d2:09:e9:b0:86:d3:7c:51:76:f0:
         c0:e8:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:48:57 2024 by rpki-client on console-fra.rpki-client.org