Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File:                     AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier:          dMlFzgNqX98+PBntiVpn/KUncFVBgub1CXCcm4TBJfM=
Subject key identifier:   E5:0C:9A:7B:53:5E:81:9F:BC:3B:D4:8E:22:69:FA:12:C5:CE:3B:44
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       018F87ED139DCAF96D5A479FE070746D26E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number:          02D9
Signing time:             Fri 17 May 2024 19:00:12 +0000
Manifest this update:     Fri 17 May 2024 19:00:12 +0000
Manifest next update:     Sat 18 May 2024 19:00:12 +0000
Files and hashes:         1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: wvtmj4UFtbTk2Oy3Bn30ujgEb6dpmBcDtzFKj/FiXX0=)
                          2: LHLhuB1jA3TF6cWsZckVPihnVic.roa (hash: fdyyh423dvJ+ex2deMJr6i8cBtO9tYxRR4cwuXvJ/Fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:13:9d:ca:f9:6d:5a:47:9f:e0:70:74:6d:26:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: May 17 19:00:12 2024 GMT
            Not After : May 18 19:00:12 2024 GMT
        Subject: CN=e50c9a7b535e819fbc3bd48e2269fa12c5ce3b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:ea:34:82:1d:3c:c2:bc:59:9f:32:52:38:
                    5c:2b:a9:db:de:57:76:12:a9:2c:a5:4b:4a:50:56:
                    15:2a:31:40:c0:0c:41:68:d6:d8:f3:11:c1:96:86:
                    70:b9:5f:85:8e:42:78:88:98:38:83:4f:89:0e:3d:
                    57:af:46:77:de:54:ce:90:01:ba:6e:af:05:81:02:
                    9a:7c:a4:93:23:20:8f:ab:71:e1:f7:1d:87:55:1c:
                    69:ab:ef:9a:86:d7:2a:cb:9b:aa:50:d7:ba:00:e9:
                    8f:ec:92:09:99:d9:9e:8b:fc:d4:f1:a1:ad:62:05:
                    24:07:28:8f:53:13:89:3d:72:03:a5:85:21:a8:9d:
                    f6:25:b1:c6:98:58:10:0b:41:54:4e:26:d1:88:36:
                    73:d8:1f:16:ba:a0:7a:b3:7e:fe:e1:b2:1b:0c:9b:
                    cf:f1:2f:a6:b4:b1:0f:e4:11:32:91:31:a6:a4:67:
                    d8:2f:aa:9d:bd:f3:5f:a5:b8:4f:2e:85:a7:9a:53:
                    7f:be:6c:9e:73:ac:d3:1a:82:d1:ed:32:ee:03:6b:
                    01:a5:c0:7c:94:99:87:d2:f7:3d:e0:4b:51:be:10:
                    1f:95:89:cf:bc:5f:2f:f7:c6:85:c6:24:a3:72:04:
                    91:f6:94:3c:e2:45:98:91:85:66:41:5a:c8:72:36:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:9A:7B:53:5E:81:9F:BC:3B:D4:8E:22:69:FA:12:C5:CE:3B:44
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:c0:48:f6:3f:c4:5a:8e:9f:32:6f:c8:58:56:ee:7c:25:
         d3:64:13:ef:37:02:a2:e6:aa:f4:54:6d:cf:9a:8f:0f:d9:a8:
         fd:33:7e:e8:eb:22:2a:35:40:7e:cc:35:2e:90:4f:5c:29:aa:
         09:b7:40:fc:fd:5b:36:a6:c9:c6:a9:70:65:4a:ce:49:f1:98:
         01:12:08:2d:cd:1c:18:88:ca:8b:1c:0c:1b:d1:34:3c:67:cf:
         b7:3e:58:df:ab:29:e0:2a:10:50:08:75:52:c8:1a:60:75:51:
         6b:18:17:5a:6e:06:8b:b7:7d:36:f9:49:56:4c:87:8a:39:83:
         2d:c9:45:6f:fb:a1:22:52:62:fc:5e:46:75:04:51:29:4a:45:
         37:02:88:b1:64:81:bc:39:97:96:ed:7c:be:26:60:de:10:01:
         77:96:51:b8:b8:f1:01:da:6d:79:39:ef:30:97:77:ab:07:90:
         64:70:bf:45:31:9e:ca:f6:75:24:82:bc:43:ba:ee:8c:4e:ba:
         3d:2d:c0:77:4f:3f:bf:18:73:8c:d2:ed:d5:3d:92:9e:71:46:
         83:95:5a:bb:4d:26:d6:cb:9d:0c:44:82:69:86:40:3b:fc:42:
         b4:fa:2f:3b:a2:7a:88:4a:3b:ce:f7:a6:5c:2a:86:19:25:b8:
         c9:8d:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:24 2024 by rpki-client on console-fra.rpki-client.org