Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File:                     rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier:          8M5WplB7i4GfCR3BdnBa0tJBF74M5qeUR3tzZbmNk+A=
Subject key identifier:   33:42:08:68:05:14:C1:1C:D2:75:BF:AA:13:25:8F:3A:03:6A:D0:D9
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer:       /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial:       019071D0E612E6C9E3FB8AE86592BAC62E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number:          0BEB
Signing time:             Tue 02 Jul 2024 05:00:34 +0000
Manifest this update:     Tue 02 Jul 2024 05:00:34 +0000
Manifest next update:     Wed 03 Jul 2024 05:00:34 +0000
Files and hashes:         1: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: 356mutTo/Px3dzAAh4rb2k7zOabETMtYEKHovyRy+uI=)
                          2: xM7arG7PWSQijRXtLHgKrhJu0ko.roa (hash: KE7xCoy9QQI966VxACoYg15b0kJUPEmT1xMDsukNo5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:d0:e6:12:e6:c9:e3:fb:8a:e8:65:92:ba:c6:2e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
        Validity
            Not Before: Jul  2 05:00:34 2024 GMT
            Not After : Jul  3 05:00:34 2024 GMT
        Subject: CN=334208680514c11cd275bfaa13258f3a036ad0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:01:50:69:b2:2b:11:c2:40:e3:3f:48:41:
                    dc:ac:33:0e:30:33:a2:5b:34:b2:1f:ed:df:6a:7b:
                    b5:80:b8:3c:80:a9:a1:05:3d:f7:2a:ad:7a:59:bb:
                    60:69:48:79:f7:d7:d7:a4:04:96:d1:08:7f:6f:e3:
                    82:15:29:6f:6c:ed:f5:dc:70:2d:48:ee:d7:1d:06:
                    06:24:82:4a:26:8a:23:a1:ac:ba:3a:33:3c:df:d3:
                    d6:f3:6c:61:58:a0:91:e4:c2:89:c3:44:3b:81:82:
                    d3:9f:93:bf:1d:cf:56:43:3d:41:26:d2:71:49:3e:
                    22:68:0a:51:20:93:03:ef:f0:da:2b:80:ca:80:95:
                    80:2d:2a:77:ce:92:21:4a:a9:96:e6:a7:af:b2:3c:
                    56:3b:6f:30:d4:55:33:b0:76:e7:a6:63:cc:ce:59:
                    8b:ab:80:93:7d:7f:48:e0:b7:34:22:a6:17:b1:03:
                    12:77:35:e1:13:97:45:32:12:2c:4b:06:88:25:9a:
                    a3:0e:bc:f3:04:71:ba:3e:7b:32:8b:08:89:fd:00:
                    f3:b8:c4:a0:c3:2d:28:bd:c6:cd:38:31:18:c7:78:
                    0c:77:f3:db:c0:d2:59:6e:29:65:6d:50:35:d8:18:
                    f8:2c:d8:0d:09:a0:f9:2b:a2:a9:00:60:d6:16:37:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:08:68:05:14:C1:1C:D2:75:BF:AA:13:25:8F:3A:03:6A:D0:D9
            X509v3 Authority Key Identifier:
                keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:3c:58:f6:30:50:5e:cc:c2:1d:c8:fd:16:72:73:36:08:
         8e:17:a1:c9:58:35:74:44:3a:ad:fb:0f:5f:45:38:2a:d7:cc:
         05:74:6a:49:d5:23:37:36:01:87:0a:45:57:8b:49:97:76:e9:
         6d:57:45:61:37:23:ce:09:d3:63:bf:b8:c6:c5:ea:c3:d3:45:
         28:d3:a0:61:2b:38:63:f3:a8:3e:7c:60:5f:0c:4f:a2:82:9e:
         d3:70:0f:fa:d6:2f:c9:45:2b:ce:6c:ad:95:75:a0:ba:65:2d:
         cd:69:a7:23:8f:96:a0:c2:32:c2:ef:be:2a:a9:60:04:55:42:
         08:13:b1:bd:21:ba:1f:41:e8:4d:d9:85:1a:54:51:ce:9e:40:
         f0:44:34:ca:56:70:9b:89:e7:54:9f:9c:2a:98:51:d7:ff:13:
         e3:20:ff:f1:a4:65:6e:64:1a:9f:65:bb:fd:fc:5f:8d:57:ff:
         5b:85:2c:dd:c4:b3:fc:06:67:91:4d:5d:6a:ec:db:88:11:ed:
         f2:ef:d2:7b:6e:e0:fc:bd:fc:c2:76:e8:ed:0c:a6:6a:e2:ac:
         bc:e3:1f:45:88:b5:8d:e6:4a:51:0a:38:27:ba:74:64:24:e9:
         34:56:3e:d0:b1:58:97:6c:65:e7:6f:11:3e:45:41:b0:2f:0d:
         51:03:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:24:20 2024 by rpki-client on console-fra.rpki-client.org