Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File:                     eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier:          odnC7p4qtEpGQmiTgfazL50VyCAxfquzXhUHe7+3VOQ=
Subject key identifier:   22:1A:DD:7D:EC:CF:CF:C2:C9:0B:49:67:7D:B3:1F:0B:02:18:CC:4D
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer:       /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial:       018F874ACFD300EB15DB9A721A6342D458F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number:          0DD5
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: PCahx4W8qaXaNhSQdT-aWlx6dnk.roa (hash: /20n1jrLeAXpuMHYsF4+WNLYTPs2JgEuRlMIej3Uigw=)
                          2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: sD2QAC683ofMWwHQTqwgevVBVovc1S05oQT7e1yHgC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cf:d3:00:eb:15:db:9a:72:1a:63:42:d4:58:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=221add7deccfcfc2c90b49677db31f0b0218cc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:d3:30:aa:15:8a:ed:a0:3a:1c:a3:2f:7b:
                    2e:0d:c5:06:d5:e7:8d:72:01:8a:67:9a:16:8a:43:
                    05:4d:c3:88:b3:13:0f:9e:90:35:83:99:3b:f5:1f:
                    f6:09:36:3f:1d:36:87:30:2a:39:3f:32:37:96:43:
                    78:b9:72:2b:db:d4:32:a9:9f:31:46:0d:2d:82:25:
                    f3:2c:82:81:62:bd:00:d8:d9:80:0c:55:74:3a:86:
                    3a:fd:ba:6a:8a:50:2d:dc:bf:1f:d2:86:36:7b:93:
                    08:d6:38:9b:c3:e7:4a:0d:8d:5c:21:cf:2e:97:c2:
                    99:d5:50:14:a9:95:96:13:c5:dd:03:83:42:bb:a3:
                    b8:10:31:1d:ef:ee:f3:21:a6:8d:de:12:89:d2:16:
                    5a:5c:38:1a:4b:47:11:2f:50:1e:52:1b:b2:49:d6:
                    86:ec:71:fb:11:fa:29:8d:da:5e:0a:6a:35:d7:c4:
                    9a:ee:10:f1:3d:64:53:8b:2a:42:87:54:c3:2b:35:
                    61:e3:bf:81:a2:04:7c:64:da:68:2c:c8:e0:cd:6d:
                    16:f5:e4:74:89:d6:41:87:4a:94:d7:43:a8:ed:f7:
                    fb:b1:ec:f5:59:7f:9c:4f:b0:53:98:57:2f:c4:4b:
                    c3:11:a3:89:8a:86:6b:7c:f0:b2:ef:46:b1:70:78:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:DD:7D:EC:CF:CF:C2:C9:0B:49:67:7D:B3:1F:0B:02:18:CC:4D
            X509v3 Authority Key Identifier:
                keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:98:62:48:31:66:4d:d6:c8:b3:db:01:f8:30:7d:15:a3:
         6d:48:6a:9f:a6:0b:75:e9:89:02:0e:31:d8:a0:2f:ad:e2:64:
         9a:29:e4:17:23:df:34:17:5b:74:7a:03:be:43:12:fa:e6:fa:
         5a:60:86:3b:a1:d4:bb:73:43:e3:07:a9:5a:0a:3f:3e:db:c8:
         e6:77:55:ac:20:e8:7a:68:d2:6c:ee:ce:b0:09:b2:3e:9c:11:
         6a:54:1b:48:d7:11:01:8f:4e:b2:1c:50:e9:26:56:9c:d1:7c:
         92:ec:5d:b4:5b:c9:03:b8:df:5a:88:a9:f6:dc:77:ba:a1:d2:
         95:20:bf:f2:fa:38:6f:d3:60:31:e9:29:c9:59:84:82:11:5f:
         16:11:fb:41:ab:2c:2f:1f:48:d7:f3:04:26:24:ed:8b:19:01:
         f6:c4:ec:ac:27:c9:b3:75:63:d7:54:e6:87:34:43:e9:ba:62:
         2f:f4:22:79:77:59:6a:d3:9d:81:aa:66:07:ca:38:b2:5e:a4:
         5d:5e:3a:3a:bc:c8:5d:09:12:37:af:4c:0f:ab:fb:74:27:7b:
         8d:9f:f9:f6:6d:af:36:d5:97:e2:be:90:b3:88:27:2a:7e:e2:
         36:8e:74:af:94:9c:f7:15:b4:5f:31:93:2d:1f:bf:9a:79:5a:
         f7:5b:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:09 2024 by rpki-client on console-ams.rpki-client.org