Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File:                     8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier:          LAzjtcz4OxsbBfAoYzXRsUZq2gVxwLOanSzYf2g0R8Y=
Subject key identifier:   2D:E8:22:CE:56:B8:80:B6:5B:E5:F9:5E:3C:7B:EA:3E:3C:70:48:36
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       018F343EB2A4D930BA2B3A46DFA9BC722EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number:          0D3E
Signing time:             Wed 01 May 2024 13:01:15 +0000
Manifest this update:     Wed 01 May 2024 13:01:15 +0000
Manifest next update:     Thu 02 May 2024 13:01:15 +0000
Files and hashes:         1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: xHgmim+F/IiojPAxf3ZiPRr1JCfDj/WvF285QQKJda8=)
                          2: szI0o-GpLvat3IbyBNzTVKRFPkc.roa (hash: iyit58pr3a3sNu9VA+DWGCi9xW3Cv7oPOCfLHJMYOEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3e:b2:a4:d9:30:ba:2b:3a:46:df:a9:bc:72:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: May  1 13:01:15 2024 GMT
            Not After : May  2 13:01:15 2024 GMT
        Subject: CN=2de822ce56b880b65be5f95e3c7bea3e3c704836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:2d:15:f9:2b:0c:b5:86:fe:4c:fd:26:0a:
                    b9:b3:0e:be:fb:26:f3:6a:b2:f1:ab:52:7f:dc:c2:
                    e0:66:b5:e2:7a:90:53:cb:51:b3:44:4a:69:4c:46:
                    45:1c:fd:fe:9d:71:13:b4:7a:bb:15:97:ea:ba:9b:
                    8b:ae:1f:86:fd:e5:b2:d6:cd:68:1a:6f:a9:12:4f:
                    96:56:0f:a8:fd:b2:1c:a8:a6:8e:5d:34:84:b7:46:
                    f1:06:3f:5f:03:2b:bb:51:3e:5d:3c:2d:11:e2:c3:
                    21:08:a4:86:87:cd:74:8d:a6:d8:47:fb:ce:7c:9e:
                    d6:b9:20:c9:ba:8a:47:28:6e:2d:c2:68:6f:c2:f7:
                    91:5a:41:33:fa:d4:fe:82:6a:ec:55:b1:3b:f2:61:
                    10:8c:b4:12:c0:23:62:27:4c:b3:a2:dd:f0:98:17:
                    66:ed:97:20:5f:2e:fd:af:26:20:c5:a8:8d:54:c8:
                    98:40:de:ab:af:b5:e6:e6:ff:e0:b9:51:34:05:be:
                    e6:76:eb:8f:00:da:36:08:4b:c7:48:a2:c8:9d:8c:
                    c2:01:e6:8c:91:49:da:c1:4a:2c:a6:d7:76:86:f1:
                    a3:12:37:93:95:b5:5c:a3:3a:27:ad:3c:15:a2:db:
                    0a:6d:bb:6f:dd:ce:a2:47:74:0a:d6:dc:a9:9d:5e:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:22:CE:56:B8:80:B6:5B:E5:F9:5E:3C:7B:EA:3E:3C:70:48:36
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:90:1f:7e:c0:ed:4a:2d:9c:c2:82:9a:3a:e6:a6:88:d5:1c:
         e9:6a:a1:f7:24:f8:6a:f1:b6:9c:95:98:51:e3:87:9f:15:e0:
         45:29:dc:2b:14:6f:d6:ce:98:d6:b5:b8:8c:90:7f:8d:0f:f4:
         9a:b4:26:91:44:16:cc:62:c3:b9:99:4f:79:0c:c0:e3:7a:1a:
         07:af:e7:1e:3c:2e:61:e4:94:c0:06:06:7b:62:78:16:01:29:
         a0:5a:bf:94:64:0a:5f:18:fa:30:4c:84:3f:16:1e:82:a1:3e:
         fc:31:ee:2e:cf:04:8c:dc:0a:3b:98:ce:21:91:1e:47:14:92:
         32:8f:42:2d:2b:6f:44:6d:17:3e:b9:a2:10:cb:64:d5:3b:43:
         87:db:18:55:8c:c2:95:1c:31:9b:8a:af:33:41:ce:49:ad:c5:
         61:df:22:61:d3:cd:fa:19:60:e2:63:c6:48:7f:8e:07:32:21:
         5b:d6:5d:9c:af:12:0c:7e:89:2b:49:15:e7:f4:f4:62:d8:b1:
         9f:33:e9:b5:3a:59:63:a0:e1:a6:65:f7:99:6e:7e:d0:f9:64:
         63:80:5d:83:51:3a:a3:51:a2:f6:7e:9a:a6:b1:f8:88:5d:b3:
         2a:a8:bc:f6:db:54:87:ed:ff:c3:f3:53:23:ed:34:b8:6d:b4:
         48:e7:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:12:24 2024 by rpki-client on console-fra.rpki-client.org