Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
File:                     ejClouMyTV5BJmf58pb1KvKXu00.mft (raw, json)
Hash identifier:          xj3QUIuQkJKlVfvMiwB7uU3xtf71VNlrPIDXId7oDfY=
Subject key identifier:   5D:D0:B9:AE:AD:68:56:BA:2A:19:0B:0A:C0:32:79:5A:8B:87:57:04
Authority key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
Certificate issuer:       /CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
Certificate serial:       0196556EA45E26044D8A9B8352636BFCF039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
Manifest number:          08F4
Signing time:             Sun 20 Apr 2025 23:00:36 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:36 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:36 +0000
Files and hashes:         1: 1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa (hash: 6Eeuw1USF7e5maHoVBqaoYLNV7brdUnH0K/WXFWdKYw=)
                          2: ejClouMyTV5BJmf58pb1KvKXu00.crl (hash: hINmshZgNqBVuskpuXA/Cq9pSOrIrfqSYBAOqshrgYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:a4:5e:26:04:4d:8a:9b:83:52:63:6b:fc:f0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
        Validity
            Not Before: Apr 20 23:00:36 2025 GMT
            Not After : Apr 21 23:00:36 2025 GMT
        Subject: CN=5dd0b9aead6856ba2a190b0ac032795a8b875704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:d6:f5:6b:6a:8e:cd:e3:be:dd:54:b0:d9:
                    ae:0f:fc:82:e9:54:c6:e5:7a:95:33:21:75:22:40:
                    a5:8d:ee:b5:47:b7:34:5f:10:d9:90:81:35:8e:d6:
                    ad:2a:44:e8:d4:59:57:f6:cb:ee:a8:1e:09:79:72:
                    1b:8d:2a:19:b6:37:a1:e5:80:28:84:bf:bb:03:a4:
                    ad:6f:af:06:b3:2c:14:0c:27:f2:34:73:0a:45:ad:
                    97:2b:56:9d:59:59:79:29:67:45:de:dc:04:da:43:
                    aa:32:10:da:7b:25:ab:0e:9c:f5:1b:ae:97:39:3b:
                    08:74:b9:e5:40:f3:15:c2:92:28:0b:0d:e9:4d:8c:
                    e9:d6:5a:57:3f:75:53:80:df:2c:67:d0:73:bc:32:
                    dc:97:c4:d5:af:dd:fe:25:d5:4f:80:23:fb:00:ae:
                    fe:16:3f:8f:3d:54:64:9a:a3:1d:7e:d9:f8:d7:c7:
                    83:41:49:52:a6:c6:42:5a:9b:f9:a4:68:b7:1a:30:
                    63:44:7a:22:48:13:49:14:1f:f2:f0:5d:78:d8:00:
                    b2:de:94:0a:33:2e:09:9c:3e:7a:9f:7d:b4:57:11:
                    8c:d2:a2:ef:ef:4e:47:6a:a0:8e:3e:bb:10:07:7b:
                    c6:e3:01:f3:c1:d0:ab:46:21:b8:b2:86:5d:aa:28:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:B9:AE:AD:68:56:BA:2A:19:0B:0A:C0:32:79:5A:8B:87:57:04
            X509v3 Authority Key Identifier:
                keyid:7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:27:5d:83:b4:b0:5f:24:61:07:fa:40:c0:ae:b2:0c:fd:
         36:db:73:c3:fc:c9:46:04:8f:3e:7e:2c:e2:2c:5f:7f:e1:bd:
         6a:c4:ca:30:ea:33:c3:b4:1a:60:81:6e:1f:09:23:02:c9:2c:
         50:ac:04:11:48:70:7c:8f:1f:99:8f:dd:68:c1:82:ef:f7:82:
         59:c9:71:7a:78:81:2e:b0:6f:98:d5:33:d9:36:c8:b9:55:d2:
         be:af:78:4d:63:77:34:17:8a:02:5b:aa:31:5a:d8:a0:5e:54:
         06:32:19:27:83:4d:49:1d:94:10:60:32:c4:31:cb:4a:a8:3b:
         97:60:dd:bf:1b:6f:71:f2:70:e4:7b:45:37:21:a2:7d:47:fd:
         0e:31:d5:1c:0b:08:0e:2f:af:73:17:d0:2d:fa:74:b0:92:a2:
         b1:71:2d:1c:a5:a1:2f:e6:94:68:ac:08:f4:f0:f7:6f:65:27:
         4c:e3:97:da:e2:d2:50:1f:db:92:07:41:64:b5:6d:04:59:83:
         e5:e0:92:bc:11:3c:c1:5d:0d:d5:f5:76:63:cf:a9:06:c5:0f:
         79:c6:ea:48:66:cf:ba:af:87:00:07:16:7a:d1:e4:bc:22:23:
         fc:bb:82:f6:67:20:db:ca:81:68:de:f7:63:5e:a1:27:a8:14:
         90:9c:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:45 2025 by rpki-client