Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          K06zoHm9+xlsSkN0uguvlv6C6o1LBZPUwsxvUiA8ETw=
Subject key identifier:   BC:2E:77:69:B4:85:C9:EB:EE:D2:3D:A0:82:97:24:5E:5C:40:5F:B9
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       019053FDFE8EF36180D3EB2C1F6A61C5E125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          11E3
Signing time:             Wed 26 Jun 2024 10:01:13 +0000
Manifest this update:     Wed 26 Jun 2024 10:01:13 +0000
Manifest next update:     Thu 27 Jun 2024 10:01:13 +0000
Files and hashes:         1: 4cpzAXBJmCO0U7FnzUKgjyBcqWQ.roa (hash: IMA/QCa7fuyNN/VbgVUhrjfSdHLM02wA+hxpabXkuls=)
                          2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: UHe+2KVqge0eikZvzDf8gclMBiSjz7EH8aECui1uB8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:fd:fe:8e:f3:61:80:d3:eb:2c:1f:6a:61:c5:e1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: Jun 26 10:01:13 2024 GMT
            Not After : Jun 27 10:01:13 2024 GMT
        Subject: CN=bc2e7769b485c9ebeed23da08297245e5c405fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:33:b0:d9:fb:f0:0e:ab:50:2b:45:a1:e4:
                    71:5d:b9:39:ef:be:bd:83:a8:87:87:22:e9:8d:89:
                    10:d8:1b:2f:4c:1d:27:6c:c6:53:62:54:b7:c3:17:
                    84:d7:b4:59:e7:bf:d6:98:76:5f:b2:f9:b7:80:68:
                    f2:49:4a:67:88:51:ae:cf:20:16:92:cb:4d:68:35:
                    cb:96:b8:ac:f2:97:d3:6b:a4:bd:f2:87:b3:f9:d5:
                    4d:7c:5f:d4:91:96:1a:df:c0:4e:7a:8f:bd:6f:e6:
                    c2:38:f7:b1:93:32:9e:9d:cb:c6:a6:7c:cd:08:43:
                    4a:ac:ff:86:c7:35:ec:58:e2:7e:23:fe:52:00:c2:
                    7a:c5:60:dd:ac:74:3d:4b:27:17:59:8f:d3:25:02:
                    12:5b:d1:04:fa:a7:c4:e6:f1:e8:e6:dd:39:31:9d:
                    3f:94:9d:4a:0e:01:67:5e:b6:5d:b8:dd:f0:d3:6e:
                    13:9f:04:e8:c7:2d:08:68:bc:8b:f3:ba:8d:cb:45:
                    ee:f5:56:7a:1d:03:a8:65:15:28:bb:1e:41:08:89:
                    7e:2c:af:4e:fa:78:bc:a8:69:c9:7a:e7:e0:70:24:
                    e2:b7:b0:83:da:b6:9b:5c:16:dc:bf:0b:d6:c3:da:
                    0b:de:43:82:fe:30:50:25:79:81:54:7c:6c:3e:8a:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2E:77:69:B4:85:C9:EB:EE:D2:3D:A0:82:97:24:5E:5C:40:5F:B9
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:e1:ac:08:8f:56:68:f3:06:00:56:22:21:ff:c3:80:77:
         32:dc:c8:f5:ef:5a:3b:ce:4f:ea:f8:d9:59:02:7c:77:1a:22:
         ad:4b:93:ca:69:a2:ce:9b:d9:b8:ae:37:f5:54:f1:83:75:d4:
         49:d5:66:a3:91:fc:11:f6:7a:4c:e7:50:74:b2:b4:db:8f:b4:
         fb:66:1a:5a:fa:c3:70:36:0d:76:76:cb:be:d7:30:e3:e1:f4:
         04:73:1d:9e:44:d5:e9:d4:ad:a0:c9:3f:f7:0d:ac:5d:8c:80:
         2f:84:4a:ae:d7:f0:9b:8e:ed:77:98:e9:46:8a:6a:fe:54:cf:
         13:b6:41:d0:58:21:e4:ae:a0:56:06:2a:f0:13:03:91:cd:dd:
         af:e5:ca:78:f1:5e:04:c3:f9:3c:1c:89:66:af:a1:ad:a7:01:
         d8:f4:89:13:9b:a0:94:10:69:64:ee:78:41:d4:ea:26:d8:a5:
         7b:7b:4d:0a:6a:2e:a9:31:36:42:10:ad:be:34:17:de:98:49:
         95:88:9b:f1:23:ce:2a:4e:66:10:27:ca:ff:9b:69:32:09:f3:
         5b:c2:91:0f:2c:e2:6c:6c:d3:c0:0f:a1:00:5b:5d:13:09:4d:
         18:e3:34:ba:04:3b:60:1d:b1:1a:5b:0a:ff:b9:5d:f9:ea:49:
         58:ba:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:52:00 2024 by rpki-client on console-ams.rpki-client.org