Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File:                     aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier:          NM4uG+lxftea9aKtP+zMFBcDAKJ1pddW0Xx5XhXu2ig=
Subject key identifier:   A8:B8:CA:DA:05:A9:4C:0D:59:26:D9:10:73:A1:6B:28:40:34:D1:8A
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer:       /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial:       018F885B2C29F8E61406DB352988549D9619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number:          0E0F
Signing time:             Fri 17 May 2024 21:00:27 +0000
Manifest this update:     Fri 17 May 2024 21:00:27 +0000
Manifest next update:     Sat 18 May 2024 21:00:27 +0000
Files and hashes:         1: Fa3HJJDfdnc8faDppzRi83EqkJs.roa (hash: 4xuoePUZ2yICv3CI1pJ8rXTFvx97OtvO/TmpjOMVX4c=)
                          2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: M/qs7RciOOYoV4wcXwGJwI+YJw0DGhduRxQiWWKttIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2c:29:f8:e6:14:06:db:35:29:88:54:9d:96:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
        Validity
            Not Before: May 17 21:00:27 2024 GMT
            Not After : May 18 21:00:27 2024 GMT
        Subject: CN=a8b8cada05a94c0d5926d91073a16b284034d18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:e1:87:9c:b3:e3:a4:9d:ab:dd:3f:c6:06:
                    43:6f:c0:0a:d6:20:69:78:42:d0:84:ed:cb:9d:45:
                    f1:49:7c:cf:ec:46:4e:f9:a6:5a:c4:a5:0a:c2:b0:
                    b2:b2:44:bf:54:0c:e3:17:39:38:87:52:5e:99:ab:
                    ad:93:ed:75:a7:0d:f7:b9:11:74:06:f7:a4:91:72:
                    a4:85:6a:b7:67:5a:65:15:0b:50:a0:b4:9a:e5:5e:
                    90:50:99:89:5c:4e:0e:f9:8d:e9:32:63:b6:2a:45:
                    d2:5c:4a:f7:23:e9:dc:08:7e:bc:c9:a3:b4:30:be:
                    d9:bc:0f:76:0a:06:47:f6:72:eb:11:97:81:08:f0:
                    cf:a1:6d:6a:da:5c:f8:81:ed:9e:85:cf:e7:b3:40:
                    46:27:51:c2:3b:73:11:62:7b:b5:c5:7f:c4:86:53:
                    18:c0:b4:2b:58:0c:90:18:02:33:42:ec:df:ff:3a:
                    87:f5:7f:ac:23:03:57:04:4e:bd:c8:de:ec:ec:20:
                    69:8a:7f:56:0c:98:56:ef:8a:79:ce:02:12:fa:aa:
                    f0:82:eb:2d:22:11:5d:5e:92:6a:e5:43:0f:26:ed:
                    7e:50:fb:a4:74:6d:66:eb:c8:d5:3a:87:54:0f:dc:
                    95:eb:cb:f6:ac:60:00:af:d2:83:6a:71:f2:70:da:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B8:CA:DA:05:A9:4C:0D:59:26:D9:10:73:A1:6B:28:40:34:D1:8A
            X509v3 Authority Key Identifier:
                keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:58:39:83:9a:66:64:4e:8c:58:1a:4c:0b:ac:9d:47:6f:
         46:33:3b:93:9e:b0:b5:aa:78:33:80:60:03:40:8d:ac:e2:8a:
         bb:27:a5:b5:d5:ec:3b:44:93:1b:95:43:cf:92:d4:3c:4f:db:
         bc:ab:13:8a:13:da:2d:c4:5b:38:8d:da:38:05:eb:ee:3d:3c:
         05:e6:9d:38:c1:29:30:4f:87:f9:a1:88:e1:92:93:6f:03:06:
         2a:df:21:f2:6b:6d:7c:fa:bd:58:2e:90:1d:66:2e:dc:1a:8b:
         bc:ae:1b:83:8d:c9:4f:db:86:e8:21:3c:b1:54:92:51:f1:3a:
         37:d5:03:17:10:2f:da:f2:2c:ec:46:4b:0c:c8:ca:6e:5e:77:
         6e:6e:10:8d:ff:57:a4:10:54:71:08:20:1e:06:c3:47:a8:fa:
         1d:05:83:03:d8:16:c2:4d:0e:ab:d0:20:db:42:cd:cc:d9:52:
         ab:e2:83:09:9c:15:49:7c:43:c2:0f:19:6d:e5:f7:af:1b:ca:
         56:b6:bc:12:01:32:2a:08:2d:42:73:7f:aa:32:d1:89:ef:59:
         14:48:d3:06:35:3c:d9:b3:cd:1a:90:c8:8b:e7:ae:ff:b1:86:
         e3:d9:5e:de:d3:52:17:22:4f:21:e1:eb:a6:18:8a:a8:b6:5c:
         b3:57:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:35:00 2024 by rpki-client on console-fra.rpki-client.org