Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          YcqeCFNDIUwBtZLEzhvgjblKsv0CSh0F99/i10RBDAI=
Subject key identifier:   F4:4D:A8:C4:A0:61:08:38:92:9E:0B:D6:20:5F:B6:EC:72:53:97:AF
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       018F3A7834AFB1813E9E2F75633976429ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          08E2
Signing time:             Thu 02 May 2024 18:01:47 +0000
Manifest this update:     Thu 02 May 2024 18:01:47 +0000
Manifest next update:     Fri 03 May 2024 18:01:47 +0000
Files and hashes:         1: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: 2D80/IKUOm6GvQqKgY/fejNZ45oomKc9ldeKnHwioTE=)
                          2: aG4mP6U0zIcJHtB1fyacKSJPtfg.roa (hash: 9W7FX+ymN0EOdBTGXU8AfRbc/P8pPVuwDhlV8ig62ao=)
                          3: rr2tSpga1SsUR9tvASbwO3cEj5A.roa (hash: CoP8A8C0XHyyQKd+MN7TKRkA1n0TQaC6b4s982sLtME=)
                          4: s0B0ymurnPOmBK3gvwnIrbVXrjY.roa (hash: pjLsdfdtTAdq1E4TxCZ/whvkQKjiGztAbPkyCI3miM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:78:34:af:b1:81:3e:9e:2f:75:63:39:76:42:9a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: May  2 18:01:47 2024 GMT
            Not After : May  3 18:01:47 2024 GMT
        Subject: CN=f44da8c4a0610838929e0bd6205fb6ec725397af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:42:3c:09:9b:04:18:59:48:dc:98:31:33:
                    d8:50:ea:f3:34:2c:be:aa:c6:d6:b8:49:b0:ae:ec:
                    31:8c:6f:ff:67:bc:00:c2:01:4c:81:97:71:67:c5:
                    d5:47:bf:50:04:c6:70:63:f9:d9:c4:38:ab:2f:2c:
                    20:72:d6:36:af:01:da:00:af:e8:57:78:49:fe:2a:
                    e2:fb:1a:fd:ed:48:b8:f3:0b:18:c8:83:9a:08:fb:
                    a9:25:ed:32:96:34:e1:85:d4:25:8e:1a:12:b3:c9:
                    6e:d9:90:33:43:de:45:a4:d9:6f:bc:48:7f:0b:38:
                    e5:4b:b1:96:d7:b4:34:34:08:61:b0:0a:08:8c:6b:
                    33:61:21:6b:52:7c:0e:06:e0:05:47:ec:b4:df:f9:
                    84:55:82:a2:22:e9:e4:1a:c7:27:b4:a5:27:7d:11:
                    1b:99:77:30:88:ca:4d:5d:f1:3e:db:44:90:0c:44:
                    5c:b2:c1:ee:f5:69:e1:61:f6:d9:d5:28:43:9e:e0:
                    00:e0:fb:ea:99:d4:e8:ea:12:fa:36:70:ff:39:ee:
                    2b:e8:ba:19:ab:22:13:dd:a9:9d:36:13:ce:1f:db:
                    ba:00:31:0d:ba:0d:60:e3:cf:48:07:55:2c:44:30:
                    82:aa:af:3a:62:5c:21:e4:9a:8c:56:b8:af:18:7b:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4D:A8:C4:A0:61:08:38:92:9E:0B:D6:20:5F:B6:EC:72:53:97:AF
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:11:41:cc:c0:6e:50:4f:51:7f:28:27:b5:d2:41:b8:32:
         43:07:c3:f2:9c:d4:b6:ea:e9:5d:4f:97:64:d9:a5:d1:18:d2:
         56:67:20:54:ef:2e:ae:57:34:cb:8a:b1:c4:09:12:de:7a:73:
         bb:7c:ee:95:32:f6:57:bd:d7:61:86:e4:00:64:86:4a:51:1b:
         73:8d:34:90:7e:23:1a:09:23:ff:ae:40:6e:5e:3a:f0:83:74:
         39:7b:8a:cc:b1:96:11:9a:0d:23:04:b8:85:3b:cb:0e:67:e1:
         42:25:1e:74:68:d5:60:ae:38:ce:5c:2f:a4:79:2a:10:9c:11:
         63:6d:f8:a0:6b:6f:84:c4:a6:bc:c7:28:03:8c:cd:48:72:97:
         9c:fc:99:13:3c:22:2a:99:d7:e9:a0:ab:38:95:71:45:71:ec:
         57:95:61:0c:36:58:31:a6:4e:fb:2b:0f:e2:da:56:7b:f2:ff:
         b8:05:bd:2c:47:d5:b8:4e:86:80:ad:86:d2:d6:97:33:2b:49:
         56:ef:a9:f2:aa:a4:47:61:4a:a0:e0:1b:dd:a3:37:3c:97:57:
         76:9c:fb:3c:ec:98:f7:b1:46:ce:01:ec:3b:34:13:50:b9:de:
         59:d5:02:07:9b:5b:bc:9a:2c:8f:8d:2d:e3:02:8a:77:4b:23:
         61:8f:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:26:20 2024 by rpki-client on console-fra.rpki-client.org