Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File:                     4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier:          kYwvq4WKfn99kV3gikoD81RqPNz8nKzlMOxKUFuvkDI=
Subject key identifier:   11:EB:F6:3D:8A:9E:D3:79:D9:39:F2:08:14:EC:EF:E2:8F:19:AF:D6
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer:       /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial:       018F3A0AC2C10661785D64118C848F65E9FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number:          0E24
Signing time:             Thu 02 May 2024 16:02:14 +0000
Manifest this update:     Thu 02 May 2024 16:02:14 +0000
Manifest next update:     Fri 03 May 2024 16:02:14 +0000
Files and hashes:         1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: gmmz6XtXxbAqPHRImFQ7UlLMldNqKCTA0uzDvb5d7JM=)
                          2: B1K1g5pBErsC3tVJWlKmSlRmWVw.roa (hash: jtPxtoM7gI7xp9dJ8hsKQMcFtxrc5m5n4RICC6uUCC8=)
                          3: V4Q0-mAeCdmZhyPckM6zbd3x9t4.roa (hash: d+ef4/4hg3+XvTKo/w01aRI9CVNZgnslJ0gMMjV9g/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:c2:c1:06:61:78:5d:64:11:8c:84:8f:65:e9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
        Validity
            Not Before: May  2 16:02:14 2024 GMT
            Not After : May  3 16:02:14 2024 GMT
        Subject: CN=11ebf63d8a9ed379d939f20814ecefe28f19afd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:73:d4:36:f5:51:37:d4:18:be:83:c8:2e:
                    59:d0:16:e3:b0:96:44:8b:7a:57:c4:cf:e5:dc:62:
                    f2:89:c8:a9:fa:81:b9:e4:d6:d2:67:f2:ad:55:8a:
                    e5:56:41:a9:88:70:82:9a:44:eb:ef:7e:2e:6e:d6:
                    22:51:6a:ae:77:34:0c:ac:87:cb:f2:2e:74:c7:7e:
                    f7:d4:ef:b8:2b:84:3a:92:ca:5b:46:94:22:3e:33:
                    1e:1d:b0:34:40:36:c8:af:8b:8d:5e:80:ae:4c:ba:
                    5a:98:81:75:61:e8:88:20:36:7a:a7:58:bf:eb:93:
                    0b:32:95:bb:83:cb:9a:33:99:70:66:2b:3e:63:88:
                    55:45:d4:f1:b8:65:58:3c:0b:74:be:2e:cb:2b:81:
                    01:c9:fa:d1:0b:55:da:ad:6d:fb:b5:43:ed:e2:83:
                    8f:53:59:55:00:bf:8d:96:84:6e:ea:e1:b3:d9:9d:
                    a2:84:76:38:9f:b5:65:51:7d:c2:32:d7:2d:51:bb:
                    7f:99:40:cf:d0:62:66:ee:7a:99:28:e5:65:f3:84:
                    d6:89:7b:52:c2:e0:0e:c9:1f:c5:17:58:54:d2:97:
                    a9:da:f9:29:76:8c:dc:af:50:ee:88:1a:f2:d5:30:
                    ae:27:30:ca:b2:cf:cb:71:6d:0c:33:99:35:b7:01:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EB:F6:3D:8A:9E:D3:79:D9:39:F2:08:14:EC:EF:E2:8F:19:AF:D6
            X509v3 Authority Key Identifier:
                keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:46:18:89:30:c4:30:e3:77:39:74:a9:8b:34:85:79:e9:68:
         72:f8:80:90:83:57:bb:2d:40:23:57:9b:e3:77:01:5f:85:fc:
         17:15:10:e3:34:ca:4e:16:6b:06:83:ca:20:29:21:de:c4:8d:
         79:8a:33:c3:a8:16:3b:90:6e:a7:34:7e:25:d5:dd:39:a9:f4:
         4c:6c:32:00:d8:67:10:cc:6f:9e:6c:53:6f:c4:89:21:97:13:
         54:79:4c:21:da:c7:b0:7b:b0:25:bb:ed:0e:48:ce:50:18:80:
         62:e3:16:dc:13:c5:65:98:63:78:80:e1:af:08:96:e4:69:54:
         a5:eb:97:03:36:d6:88:1c:1a:df:8f:2f:18:15:ef:f7:96:e3:
         72:6e:47:23:9d:c3:0b:79:7c:34:e6:36:69:cf:d0:dd:f7:d4:
         cd:8b:81:53:b3:5d:fa:03:28:c9:59:e7:53:12:dd:a6:22:b5:
         36:2c:45:26:1e:3a:19:62:5f:ad:bd:ec:5a:98:15:4a:e0:eb:
         68:33:ea:f1:0d:8d:f3:ed:b6:2b:47:7d:6d:ba:73:31:2b:bd:
         82:d2:78:c7:16:16:db:aa:5e:8f:7c:ae:d0:69:41:2a:6e:fd:
         ed:c5:63:75:d3:26:d0:9f:18:77:62:11:2e:fd:51:8a:97:f1:
         6b:93:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:38:29 2024 by rpki-client on console-fra.rpki-client.org