Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File:                     eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier:          aRP2nJC1Af6T66N5+SuqiuhMmnTzIAEvLXyToPc6s7A=
Subject key identifier:   7B:5E:1F:42:4B:C9:24:BA:D9:C2:23:65:1C:B6:C4:58:73:4A:2B:B9
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer:       /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial:       018F8635DDDF53FB3F9C77A89964C4A51A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number:          03D4
Signing time:             Fri 17 May 2024 11:00:28 +0000
Manifest this update:     Fri 17 May 2024 11:00:28 +0000
Manifest next update:     Sat 18 May 2024 11:00:28 +0000
Files and hashes:         1: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: iH6iud2k1yaPAgHYhzxv/E1IRJ5NDIYVJJvbG/i000M=)
                          2: nlF_47oeifIBwNaZyBMP1Q-VZic.roa (hash: u6h9AECEzaDjAmT9HZbfJOdXB4IK82og5BEfOmuMBIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:dd:df:53:fb:3f:9c:77:a8:99:64:c4:a5:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
        Validity
            Not Before: May 17 11:00:28 2024 GMT
            Not After : May 18 11:00:28 2024 GMT
        Subject: CN=7b5e1f424bc924bad9c223651cb6c458734a2bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:16:d9:45:d0:7f:8c:2b:88:7c:d9:60:78:
                    58:98:6b:6f:90:d4:4c:b9:84:bc:6e:67:56:f8:dd:
                    cb:50:b2:d5:60:9e:2e:66:7b:06:f9:35:17:1a:a3:
                    2d:9b:10:43:83:a1:d2:ee:8f:b9:3d:04:b5:75:dd:
                    75:92:67:05:5f:bf:de:25:73:54:32:ca:68:76:37:
                    bc:70:92:72:7c:2c:55:59:4e:06:62:f2:06:ba:11:
                    fc:34:0a:67:ba:91:ad:16:55:ab:f0:65:44:9e:75:
                    72:2b:a2:89:0f:aa:92:04:a5:4b:81:56:ca:65:76:
                    a7:83:59:17:76:83:c7:b8:b1:c7:f3:59:4a:93:31:
                    9a:53:72:fd:a9:03:de:47:3b:1c:52:05:6f:24:2e:
                    d1:c7:bd:f9:42:43:f6:11:d5:aa:48:a7:62:b5:ee:
                    cc:06:6a:1d:de:d0:d4:43:14:33:6d:33:18:91:78:
                    89:6d:80:18:37:bf:6d:5b:63:44:1c:81:e8:ee:f3:
                    85:14:a7:9c:fd:8f:2f:f1:81:81:64:ad:f9:c3:2d:
                    2a:2c:7c:a6:ba:8e:57:09:78:db:f2:ca:e0:03:87:
                    21:51:ef:ca:8c:a7:0b:6d:53:59:eb:d6:e2:fc:00:
                    83:48:5b:3c:e2:76:df:32:ea:78:c1:eb:eb:4b:aa:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5E:1F:42:4B:C9:24:BA:D9:C2:23:65:1C:B6:C4:58:73:4A:2B:B9
            X509v3 Authority Key Identifier:
                keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:78:56:99:74:b0:29:00:ea:ac:95:33:a4:19:25:7e:4a:a7:
         f3:e3:1c:13:1e:56:53:b7:c9:aa:41:b1:3f:05:44:cf:ce:65:
         6e:8a:4c:cf:fb:71:33:c1:57:d1:af:f3:58:23:32:89:e9:df:
         0d:a1:8d:44:84:21:2c:2e:de:2b:d4:17:0d:67:6a:a3:ee:be:
         a2:d2:b7:ec:d6:7b:44:ab:0c:55:7d:56:93:04:60:e2:b8:9c:
         de:39:0d:53:91:11:ee:a1:8d:5d:76:56:61:ac:63:d9:fb:bd:
         7b:4e:a8:a2:b4:e6:3a:91:62:71:03:bf:28:2b:1a:d7:bb:52:
         3f:3d:22:18:8a:87:4a:c8:ab:6d:ad:d4:1d:b9:04:8c:b8:86:
         67:dd:87:29:74:57:55:2d:84:85:e1:e5:e4:fa:64:ff:bb:de:
         21:f0:64:0b:2e:08:41:58:81:43:75:4d:b0:2c:38:aa:ae:bd:
         f7:c0:13:50:99:ca:4c:0b:94:51:0d:7f:c8:8c:e5:9d:03:f8:
         c2:83:28:56:9b:e4:70:63:1d:39:28:bf:a4:33:07:9d:6e:cf:
         65:5a:a9:7a:94:aa:c4:bb:e5:e2:eb:73:02:18:73:c2:96:b0:
         f4:9f:1c:74:16:68:40:9f:0b:82:42:ab:d4:33:c8:b8:23:81:
         ec:48:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:29 2024 by rpki-client on console-ams.rpki-client.org