Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
File:                     IzTauoEYy0Grds1CEQT8xnTDgbE.mft (raw, json)
Hash identifier:          AM64SO8W0AY5Cjt4Ws4UwNiHrAXXrNtEiVtrumlb43s=
Subject key identifier:   BF:F4:29:28:B1:6C:5A:7E:60:38:90:06:60:E1:41:F0:0A:7B:7D:3A
Authority key identifier: 23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
Certificate issuer:       /CN=2334daba8118cb41ab76cd421104fcc674c381b1
Certificate serial:       018F87ED4F90253B83A500425ECC77EE923C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
Manifest number:          04EB
Signing time:             Fri 17 May 2024 19:00:27 +0000
Manifest this update:     Fri 17 May 2024 19:00:27 +0000
Manifest next update:     Sat 18 May 2024 19:00:27 +0000
Files and hashes:         1: 5KOIvhdqw5ETuBCCUERuZc3T2gU.roa (hash: 0U0w/wn1lQM87EMWkPCor/Ji14lJR44HskeG+F0e+GU=)
                          2: IzTauoEYy0Grds1CEQT8xnTDgbE.crl (hash: 84EL4B8+L08lKSrC8U8KQS/ZAFxk0DHQj+QBXxV/3ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4f:90:25:3b:83:a5:00:42:5e:cc:77:ee:92:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2334daba8118cb41ab76cd421104fcc674c381b1
        Validity
            Not Before: May 17 19:00:27 2024 GMT
            Not After : May 18 19:00:27 2024 GMT
        Subject: CN=bff42928b16c5a7e6038900660e141f00a7b7d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:ca:3f:a5:91:87:6b:18:aa:ca:1b:01:0f:
                    0e:e1:c8:ad:2c:fc:ba:93:05:49:b2:c4:ab:f0:19:
                    84:9b:fd:f3:d9:95:45:a5:4f:4a:0e:b9:8d:79:65:
                    ab:0d:1a:a2:19:68:37:81:71:51:b8:c1:a7:eb:35:
                    42:e4:5d:94:81:20:51:03:42:61:40:c7:9b:83:34:
                    61:ff:2e:23:ec:ea:8c:15:4f:68:fc:b1:8a:b8:d8:
                    c8:df:28:ce:5f:aa:4c:23:c3:a8:d3:01:f1:91:bd:
                    52:66:9c:c3:22:41:40:e6:02:bf:85:e3:c1:07:ec:
                    f8:1a:13:8e:b2:04:0e:d0:25:b6:1e:0a:c0:2e:9b:
                    6e:87:b4:f0:03:db:96:1f:1e:8f:88:a8:26:ad:b3:
                    6d:09:09:49:d1:bb:7b:d7:aa:74:7d:7f:67:9b:ef:
                    c7:2b:ac:53:18:b8:4f:d8:c6:27:5a:cc:0c:ac:df:
                    0c:db:44:e9:83:56:85:de:45:0b:d5:1a:71:2c:0e:
                    08:3e:eb:e1:11:8e:ee:c1:0c:8e:3c:09:59:05:24:
                    c6:c1:61:ce:03:87:9c:81:58:c4:04:c8:74:42:ed:
                    18:92:a3:4d:46:49:56:8f:ac:25:41:eb:8e:b9:78:
                    bf:2e:94:63:53:c1:35:d5:29:d7:aa:f8:93:a5:ae:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:29:28:B1:6C:5A:7E:60:38:90:06:60:E1:41:F0:0A:7B:7D:3A
            X509v3 Authority Key Identifier:
                keyid:23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:94:a0:53:7d:19:02:a8:ec:b3:bb:a3:c5:da:cd:65:e8:67:
         54:2c:04:43:ec:7c:51:61:64:1f:e4:c8:51:46:4f:0b:82:79:
         9b:e0:01:7d:6c:28:fc:3f:11:70:fa:b8:e2:f8:d5:1a:4d:3e:
         50:50:70:e2:73:2d:ad:7a:4e:86:b8:1c:fa:62:f2:64:85:16:
         0b:c8:87:6e:93:38:1c:c3:af:ce:50:e3:9e:0e:ee:72:bd:30:
         d8:4d:a8:35:d0:6a:b8:0b:06:24:8e:30:13:ca:ca:f7:bb:16:
         6e:10:5a:bd:09:71:28:d5:0f:b3:02:47:a7:41:79:30:9d:dc:
         33:7e:d5:07:96:96:37:a9:65:b4:28:b1:86:0b:f1:f6:a6:cc:
         7d:73:09:ab:f8:b5:29:1e:74:1b:65:5c:b8:7f:32:1b:03:bd:
         a6:60:dd:3b:46:5c:f1:02:33:2e:81:e9:22:7e:23:bf:1c:2d:
         7b:c1:30:8a:08:fa:55:8c:9e:3c:71:fa:bd:e3:11:ba:55:30:
         8e:0c:c8:bd:d3:37:31:01:4d:6a:18:a6:27:37:55:85:4a:76:
         82:af:a0:e2:1a:36:b0:55:a5:7e:f4:41:90:a2:37:df:f0:96:
         07:f3:d5:69:b9:07:83:bd:a9:29:e0:3f:63:a8:ed:01:61:29:
         ad:6c:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:18 2024 by rpki-client on console-fra.rpki-client.org