Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File:                     7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier:          HpNAVYVdJ0cxt3mnAPKGhlTxCP83lUH9DDyi6HOzMRo=
Subject key identifier:   5F:D7:AE:15:58:A7:03:E8:86:30:CF:8A:D2:5C:3D:C9:DB:EB:21:EE
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer:       /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial:       018F5138389326EF24B7C58E0A8ACE5CCBEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 04:03:10 +0000
Manifest this update:     Tue 07 May 2024 04:03:10 +0000
Manifest next update:     Wed 08 May 2024 04:03:10 +0000
Files and hashes:         1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: TC3EqetVJMKHm1EcHGMeF00fpCqkvmEpQVaKksPqtbg=)
                          2: CBusiP3PtqT2_XgtRL8pQhgL16g.roa (hash: zp9mVSLbq7jODlF14Iiq3xn6Z8iBHJSqgaL6D2PvAEE=)
                          3: b-uWQhdWurEWmOYjolCSLOXc0n0.roa (hash: idWHNBaO1yy9ybN/SYJlzaR/HJQ2KlhCC1OQCs0Fp7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:38:93:26:ef:24:b7:c5:8e:0a:8a:ce:5c:cb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
        Validity
            Not Before: May  7 04:03:10 2024 GMT
            Not After : May  8 04:03:10 2024 GMT
        Subject: CN=5fd7ae1558a703e88630cf8ad25c3dc9dbeb21ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:a3:68:dd:12:9c:03:87:11:a9:a1:ba:97:
                    96:8f:2a:4f:69:e7:7a:3a:fb:96:4f:20:72:54:b4:
                    86:ec:0e:d7:87:56:0f:a8:ac:7c:c0:84:ce:51:46:
                    72:bb:9f:10:35:8f:ef:ec:1c:e1:07:80:cb:10:cd:
                    bd:b5:bb:a5:17:61:3f:ce:cd:f2:19:53:c8:c6:5d:
                    c6:a5:f9:9d:a5:22:8b:ba:a8:c0:0b:6c:a1:f6:31:
                    78:e6:ce:16:26:94:a0:cf:8d:30:a0:4e:ff:1f:05:
                    10:f7:b9:f2:90:23:12:04:fe:09:a4:ca:39:d8:85:
                    fd:26:56:a4:7c:81:3b:e2:ac:ac:7a:d2:21:94:07:
                    68:1f:e7:6d:a5:78:9b:e9:6d:40:78:e2:41:6c:dd:
                    80:2b:f0:b2:42:e5:1b:70:7a:7a:39:b3:a0:64:db:
                    a1:c3:62:39:72:16:8b:de:0f:89:4a:b8:9d:d0:55:
                    33:1a:7b:90:66:d2:c2:3a:c3:9e:bf:45:28:88:c7:
                    e5:e7:60:b1:00:b3:62:58:52:6e:64:d8:fb:7a:26:
                    90:0f:8e:b5:42:c7:5a:43:11:b7:ef:b9:35:32:2c:
                    83:f8:e4:12:00:b8:90:45:3f:d9:06:18:d9:d1:b4:
                    7a:e9:3f:ea:ad:50:86:da:f1:96:2f:65:af:45:f1:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D7:AE:15:58:A7:03:E8:86:30:CF:8A:D2:5C:3D:C9:DB:EB:21:EE
            X509v3 Authority Key Identifier:
                keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:54:9a:47:5c:ec:b3:ec:ea:c8:1f:c9:e5:a4:60:39:c6:
         b8:52:46:ca:5e:91:3f:74:e2:d8:58:63:57:fc:56:27:f2:cd:
         49:5b:51:80:f2:38:af:d8:82:50:4b:97:42:f8:41:bf:30:69:
         c5:04:16:1b:67:d9:1b:f1:65:e4:f3:d8:96:e7:95:d3:5d:7c:
         ab:41:ea:b2:fc:19:be:36:90:71:04:c6:a0:94:75:35:32:f8:
         09:5f:ec:4b:1f:10:ea:94:bb:7d:bb:a5:c1:f4:2e:34:b0:b2:
         f5:5d:f9:6e:8d:dd:ac:0b:7c:97:e4:91:d1:ba:c4:60:9c:f3:
         73:c8:17:51:80:71:77:81:fd:1d:46:b2:d1:2c:25:63:18:0d:
         3f:fe:59:fc:7a:ec:0d:ce:5e:52:0f:f0:db:8c:67:fd:f8:1f:
         23:98:9d:5e:dd:c8:bc:b3:70:63:5e:65:c6:ef:d0:b7:46:0e:
         ec:f2:c0:64:e6:bc:dc:b8:bf:ec:b4:2a:b3:2c:e3:bc:ab:76:
         4d:1f:c7:ca:87:48:59:f7:8a:d8:ea:58:c5:b4:a7:be:b5:03:
         b4:06:00:36:75:7e:74:73:e2:78:2d:89:65:03:fd:4d:ae:95:
         8e:4a:86:41:c3:7c:27:4d:c2:e0:bb:37:8c:2d:d8:af:3e:ea:
         3a:1b:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:50:08 2024 by rpki-client on console-fra.rpki-client.org