Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File:                     Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier:          MoNsk+ivVOp3AwFbOtkudjfJmYJzPmm2p9Yrft3j7Ok=
Subject key identifier:   91:A1:A4:76:84:44:86:A6:50:03:1D:88:C0:E7:B3:B4:79:0A:7D:B5
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer:       /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial:       018F16A19CDFFD9FD7E871629B0BD762DF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number:          0C51
Signing time:             Thu 25 Apr 2024 19:00:41 +0000
Manifest this update:     Thu 25 Apr 2024 19:00:41 +0000
Manifest next update:     Fri 26 Apr 2024 19:00:41 +0000
Files and hashes:         1: 5E1IOLYNA-Qx-ydFrVHARURfrAo.roa (hash: /kPMpmjM8p4bAUJOfWYDxX6UcbzFONqIW41aIZFelqU=)
                          2: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: DCVhdsh439HexCpn8TIW0WSTpMM+II9SViE9u+MJggU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:16:a1:9c:df:fd:9f:d7:e8:71:62:9b:0b:d7:62:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
        Validity
            Not Before: Apr 25 19:00:41 2024 GMT
            Not After : Apr 26 19:00:41 2024 GMT
        Subject: CN=91a1a476844486a650031d88c0e7b3b4790a7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:1a:d8:a4:9b:4c:94:68:6d:ec:66:36:d0:
                    43:7c:40:93:55:e2:73:3b:05:e7:81:58:22:b5:c8:
                    f2:d5:7f:b4:91:16:65:c6:ce:f3:03:a3:2a:b7:64:
                    a8:d9:87:ed:56:5a:fc:be:78:4c:53:e3:b5:65:d5:
                    a1:e6:2a:50:2a:a0:2d:bc:8f:7b:e4:ff:9c:57:7a:
                    5d:7c:b5:03:7a:b8:50:4f:6f:10:69:4f:8b:08:35:
                    4e:d4:14:39:e7:98:57:7c:bf:cf:ff:47:fc:d3:b3:
                    96:9a:15:b5:82:6d:63:7b:33:b8:92:d2:c8:45:d0:
                    cc:26:e0:6c:0f:86:97:90:b1:3a:a8:b7:9d:14:81:
                    b8:fc:55:3e:af:01:a2:74:31:28:89:f5:bf:e6:72:
                    d0:9f:27:a7:bf:89:55:fb:a3:44:2e:d6:e3:e3:89:
                    8c:73:45:c3:c6:54:e8:39:92:53:c4:eb:b4:8b:a2:
                    12:59:b2:a7:ad:d3:da:a5:eb:fb:dd:85:a3:63:b2:
                    a3:86:fc:24:58:88:77:06:b0:ec:cf:de:dd:61:f8:
                    27:7c:33:bd:a5:84:44:c5:61:1e:d5:f2:d5:55:30:
                    e1:dd:4b:9e:95:09:02:c7:cd:8d:f8:46:5f:9c:eb:
                    32:10:13:1e:ef:a4:06:ba:3b:2f:ae:44:8b:35:03:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A1:A4:76:84:44:86:A6:50:03:1D:88:C0:E7:B3:B4:79:0A:7D:B5
            X509v3 Authority Key Identifier:
                keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:ad:14:c2:39:96:ea:59:87:4f:87:fd:4e:1d:62:ed:8b:
         0d:82:f1:85:d2:47:64:23:e5:75:0a:80:a5:2c:f4:28:ae:c7:
         93:97:e5:48:57:f3:c5:9c:cb:5b:c2:8f:f5:20:ea:75:d8:d5:
         e9:ab:8f:81:43:f6:f4:c1:de:27:75:4d:44:0f:3e:38:bf:bd:
         5b:07:3a:29:65:fc:dd:40:ed:8e:9c:f4:09:01:65:45:6b:08:
         d3:7b:7a:93:9b:72:f9:c2:63:b1:66:df:27:af:e3:32:5c:0c:
         99:d0:00:78:97:29:11:6d:31:c2:f2:c0:c3:d3:16:ea:78:fc:
         e5:cd:a6:d7:77:81:07:f5:0a:c6:8f:91:8f:5c:c5:68:b9:e8:
         ac:9c:53:cb:46:7d:a4:c7:ac:2b:6b:99:5b:b3:43:95:9b:a2:
         b5:63:0c:6a:0f:53:48:f3:42:b5:f8:96:ed:8f:a9:b1:71:12:
         31:f0:4e:67:23:73:5b:2c:2c:62:64:3b:1b:af:d6:ab:22:c3:
         36:c3:b0:35:8a:2c:82:46:e1:20:2d:a6:e9:55:75:fb:aa:ad:
         b6:41:9d:dc:7c:1c:2b:29:f4:eb:9a:65:d4:b9:f8:e5:39:84:
         d1:bb:27:7f:b0:2c:32:e1:6c:ec:a1:17:60:55:36:00:c2:f3:
         5c:cb:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:56:10 2024 by rpki-client on console-ams.rpki-client.org