Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File:                     46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier:          0Lggs9mQ2VDnqt3OzGslBFHrQGA2sE6w8S5AV/Dmgek=
Subject key identifier:   68:8E:E9:8D:46:47:04:4F:68:A4:E0:9B:6D:F8:48:FD:D2:00:F2:73
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer:       /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial:       018F2D604661BA81A69E706E3446488D76F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number:          06A1
Signing time:             Tue 30 Apr 2024 05:00:35 +0000
Manifest this update:     Tue 30 Apr 2024 05:00:35 +0000
Manifest next update:     Wed 01 May 2024 05:00:35 +0000
Files and hashes:         1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: AGIxNkL1YXuMzgQ2wsRSdrBRuXhLk8sKJ3HyCs9SLf4=)
                          2: KvZ5C7GGXpsnDIXFK9w1aA1xkeQ.roa (hash: 2xkPC934TFyqLBsVBMeVEQzNzEo6Q8YWu+gSYwwm5GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:60:46:61:ba:81:a6:9e:70:6e:34:46:48:8d:76:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
        Validity
            Not Before: Apr 30 05:00:35 2024 GMT
            Not After : May  1 05:00:35 2024 GMT
        Subject: CN=688ee98d4647044f68a4e09b6df848fdd200f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:ae:ff:d8:0e:5a:31:3a:ce:d1:53:59:c5:
                    0a:62:a1:27:13:9a:be:0d:e3:e8:46:36:8f:48:b2:
                    14:e9:d2:af:a5:71:a2:62:74:f9:0f:ff:d8:d3:8e:
                    88:07:b2:b7:6c:30:af:95:c2:ff:2c:0b:93:2b:42:
                    d3:d6:b0:81:5a:30:3c:9a:08:90:1a:f7:8a:6a:f5:
                    44:f3:7a:e6:eb:ca:37:ad:9f:50:22:c5:13:c2:fc:
                    61:b3:49:8d:69:a4:81:7a:0e:c9:30:da:d7:c4:f3:
                    41:a3:19:7b:f5:4b:dc:b9:35:8d:3c:0f:b9:97:7e:
                    90:b1:95:02:25:48:c7:dd:5d:06:7d:3b:39:99:c1:
                    17:aa:25:ed:45:70:c3:3d:4e:79:30:4e:00:b6:cb:
                    14:1c:0f:14:70:ff:bd:fb:95:8f:c1:9c:7d:c5:3c:
                    b6:a4:00:21:f5:d3:de:4c:97:10:69:b7:28:df:73:
                    dc:d1:3b:03:da:31:69:2d:16:6d:f1:3a:61:f4:d1:
                    e0:7f:97:bb:b7:48:f1:44:d1:92:d2:d5:e4:5e:ad:
                    e9:a1:d9:2a:37:1d:50:b3:6a:5d:ff:1c:a2:c8:21:
                    65:d2:56:e7:6c:7f:44:4e:da:f5:30:6a:29:d0:49:
                    ea:ad:0e:54:71:3b:64:72:a7:ac:c1:c9:98:14:a7:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:E9:8D:46:47:04:4F:68:A4:E0:9B:6D:F8:48:FD:D2:00:F2:73
            X509v3 Authority Key Identifier:
                keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:75:42:b4:a3:2e:75:2f:c5:87:5d:8d:d7:51:fe:3e:b2:b2:
         70:2a:24:d1:be:ea:97:c3:5d:88:18:a8:71:df:96:62:c1:6f:
         cb:c8:b8:fc:74:27:67:50:8c:a6:98:1c:2a:0b:7d:27:22:3f:
         6e:b2:76:e5:83:dd:4f:f3:73:0f:50:22:5e:93:b8:6e:28:d6:
         19:92:e6:a8:ae:b4:25:a0:e8:de:71:74:0f:9e:ab:46:b6:94:
         2d:26:1a:b4:56:ed:6e:9a:0c:15:53:c1:cc:ce:89:86:18:75:
         11:25:bd:ce:50:72:b0:dc:c1:5e:7e:ac:37:48:99:a0:45:47:
         81:81:67:ec:c2:f9:cb:73:54:2b:b7:62:0e:99:b1:58:8e:bd:
         b6:e4:da:6e:07:48:4d:51:12:d5:e1:8f:29:c8:af:5e:5f:30:
         d4:85:aa:21:d4:45:66:16:7d:ff:a2:ea:67:91:93:81:88:50:
         08:68:42:e2:09:23:61:06:34:7b:00:5d:fd:a4:24:0d:2d:cb:
         f2:a3:f2:48:93:5c:fd:47:23:4c:76:30:d1:7f:96:e2:e8:f9:
         57:a9:81:74:22:ab:86:00:e6:a5:f6:57:41:9a:49:c1:40:8c:
         d6:11:bd:5c:46:20:c1:cf:68:f9:6d:34:5f:e5:bb:8c:66:d7:
         60:72:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:59:42 2024 by rpki-client on console-fra.rpki-client.org