Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          v9iJY45l0cxk5PEzDPahw4gin1/DE7WOKA+BiROEnNo=
Subject key identifier:   39:6F:E4:8C:FC:62:D6:69:2B:6D:63:6E:99:A9:9F:36:1D:41:4D:00
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       018F3F305697209B473037FB0294610E9204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          10E2
Signing time:             Fri 03 May 2024 16:01:23 +0000
Manifest this update:     Fri 03 May 2024 16:01:23 +0000
Manifest next update:     Sat 04 May 2024 16:01:23 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: DEVL1Hdsn92fPTo/dkqHN957tlmW0Th5elyQfm47pl4=)
                          2: i3AIln6TK2px3CtWquVCPLE9vsw.roa (hash: EfmPvglOrlYjL2q13qfwYDHyXK3ce1yjdtUFpE9UURY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:30:56:97:20:9b:47:30:37:fb:02:94:61:0e:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: May  3 16:01:23 2024 GMT
            Not After : May  4 16:01:23 2024 GMT
        Subject: CN=396fe48cfc62d6692b6d636e99a99f361d414d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:76:56:51:bb:b1:75:e0:60:f5:12:b5:26:
                    b4:5c:1f:30:29:f0:6a:6a:fe:9c:b7:e6:4d:34:f2:
                    57:35:20:f1:cc:b3:aa:34:0e:81:6c:7c:d4:cf:08:
                    b8:85:05:46:0e:4d:b1:d0:2d:a2:e4:ea:c4:fb:f8:
                    1f:cf:1c:29:3d:cf:87:59:c0:b6:43:64:f4:ee:95:
                    ca:e7:f9:cd:ed:1a:df:af:da:6e:95:64:02:d1:22:
                    bf:55:a0:e4:4a:b3:74:aa:c1:4c:f3:00:e9:d7:5f:
                    2b:8f:ae:09:3b:2b:c4:6c:da:fd:76:e5:6f:11:61:
                    33:dc:ea:66:32:b1:67:2d:d7:7c:d0:a4:13:db:9d:
                    d0:56:64:f5:3d:c7:4f:e8:60:3f:e6:e1:1a:d4:a4:
                    91:60:b5:a9:10:6b:27:7f:45:15:0b:4d:26:39:d3:
                    e3:03:0d:78:7a:75:2a:ff:e3:d1:2c:62:63:c7:ec:
                    cf:b0:a6:60:0c:02:a0:b1:ec:e7:36:3a:a9:f2:1c:
                    66:28:ae:f6:4c:7e:c1:95:81:dd:9f:e9:8e:e1:77:
                    de:84:a7:8a:5a:6c:24:aa:dd:b5:c3:bd:94:34:fd:
                    65:61:3c:b2:04:c5:cc:58:ee:fb:21:aa:17:76:5d:
                    63:64:8b:a2:f5:a7:d5:60:5f:b6:65:3a:e0:32:53:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:E4:8C:FC:62:D6:69:2B:6D:63:6E:99:A9:9F:36:1D:41:4D:00
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:24:b2:ef:9e:0f:db:11:fb:c4:08:eb:68:02:a7:2c:3a:52:
         54:fb:87:ce:a8:1f:f2:08:3c:00:b8:6f:3d:87:7f:ef:00:e2:
         8b:79:89:3c:70:9c:37:cc:a4:7d:b7:6e:3d:ce:17:1f:60:4b:
         11:8f:a8:05:fd:c2:03:b1:5f:6b:71:9f:28:ac:d7:cf:6c:c1:
         90:f2:ad:f2:15:4b:79:23:cf:24:b0:a7:40:1e:76:79:9b:f2:
         1a:be:49:6f:27:37:74:6a:9d:1b:40:ec:3d:1c:d8:fd:64:c0:
         64:61:b8:e5:b3:45:90:ec:da:ee:a7:46:cc:e0:5d:3c:e6:d0:
         dc:87:0d:af:8f:63:f7:23:63:10:b1:10:15:47:6c:63:57:58:
         c3:da:89:e6:a2:d4:52:7c:2e:6d:53:e8:67:cb:d6:79:0e:91:
         5b:e6:e4:94:08:14:8b:2b:f7:ac:43:61:99:d7:1a:37:09:eb:
         03:0c:25:57:fb:21:cc:2e:ae:5d:3a:4a:91:f7:c5:39:01:7f:
         56:8c:56:06:29:4f:0f:af:1e:fc:5b:7b:7e:fc:6c:85:0b:04:
         7a:19:00:62:f4:1a:40:52:55:00:f4:b3:ad:e5:d6:0f:ba:33:
         6f:62:44:6c:0b:30:3d:5d:c1:49:f5:4b:2d:a5:66:d6:e4:10:
         65:18:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:32:16 2024 by rpki-client on console-fra.rpki-client.org