Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          14aVSM3XCf46IcgYbBC+k8HuGipdFuDKS/r9WRHSIms=
Subject key identifier:   2B:95:DD:C3:73:76:26:2B:97:AF:81:5D:E3:48:8B:75:64:FB:72:C4
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       018F5212002A539F572DCF4E82B50E5F9783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 08:01:02 +0000
Manifest this update:     Tue 07 May 2024 08:01:02 +0000
Manifest next update:     Wed 08 May 2024 08:01:02 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: mek12C3d/1hZtSy5mDOONjNPBMFYfX6Kntic91v9DDM=)
                          2: 4Uq3VtO-mxySdJn2WGTOIsxqANQ.roa (hash: AKHnus5zRe6jC+0qwi6gd1X43zoWRPCQPnhLKHKGrKg=)
                          3: kP4OsfazqCpxlGhGM7JcOoPVga4.roa (hash: 9joO1mdXVHXu+GHhfK4hvWZlK9j2JWZwUuXDboRcGDY=)
                          4: rkp7hy4lJicxKke7XCDrE22CB-8.roa (hash: c0tRjcHlVMviFB9MhBShjOeAXnQtVj3T4yLoL4NVd8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:12:00:2a:53:9f:57:2d:cf:4e:82:b5:0e:5f:97:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: May  7 08:01:02 2024 GMT
            Not After : May  8 08:01:02 2024 GMT
        Subject: CN=2b95ddc37376262b97af815de3488b7564fb72c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:c4:af:30:b7:cc:bf:c8:8e:28:ef:c3:12:
                    2d:0f:98:c6:63:fa:14:2b:92:3d:7c:df:33:c3:ab:
                    7a:53:1c:15:9a:e1:d8:2d:69:63:72:73:ab:af:03:
                    27:a3:29:48:4a:50:31:34:6e:34:5c:35:79:43:b9:
                    84:f7:b0:5c:26:b9:92:60:c6:26:56:3e:e2:fe:72:
                    4f:65:2f:c9:38:a0:cc:52:84:18:26:96:c7:1a:09:
                    67:c3:1a:cf:63:ee:35:2f:c9:6e:e4:e6:25:d3:c3:
                    15:c5:b7:ec:f1:f5:2c:f3:ec:9e:44:48:60:a6:8c:
                    bc:d9:f3:c6:a0:e6:cc:b8:83:d6:d5:da:07:05:89:
                    b5:6f:2e:c9:e0:c5:97:cc:1a:f9:14:ad:69:9d:c9:
                    e2:36:cb:00:2e:8b:8e:71:f1:61:8d:ec:3a:f3:e2:
                    ea:7e:d2:e6:67:ce:58:b2:db:80:1d:b0:a8:3c:7b:
                    bb:20:48:af:6f:42:dc:46:81:06:d0:bd:9c:d8:b8:
                    b9:3f:72:52:d0:06:88:26:66:84:2d:0e:cb:17:ef:
                    79:ea:8e:67:6f:03:29:da:8e:db:ce:53:04:8e:a7:
                    3f:58:5f:b5:4c:7d:52:c5:45:c4:b4:fb:fe:70:e7:
                    49:5b:02:3e:d6:b4:56:60:e5:85:35:d9:98:7d:b0:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:DD:C3:73:76:26:2B:97:AF:81:5D:E3:48:8B:75:64:FB:72:C4
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:cb:e9:f0:8f:ef:5e:6e:9a:39:f5:f9:4e:dd:13:09:4b:
         1a:78:26:71:84:8a:3e:74:f6:d8:74:cf:53:35:92:29:c1:bd:
         06:ff:a4:c3:a1:c1:61:b8:21:a4:c6:6b:12:7d:89:88:45:c8:
         f0:1c:47:8a:95:2f:70:3d:d9:fc:23:7e:6f:2d:df:2d:65:52:
         d1:44:1a:fc:dd:a7:d0:66:63:51:7a:b8:9b:fe:94:77:87:71:
         e1:6f:d5:00:3f:7d:c5:2a:5a:54:c6:1c:65:40:c8:1c:78:f2:
         89:f0:ac:e7:e7:6f:3a:b0:ee:bd:df:73:79:c0:f4:5f:2e:63:
         d3:38:68:4c:9e:99:d1:8a:f8:30:0d:39:0a:ed:ac:41:ba:cd:
         3c:78:5b:ea:b2:03:85:af:89:78:e8:d2:46:34:54:00:a6:82:
         8e:63:7a:bc:99:88:f2:26:7e:37:5a:cc:91:79:2b:99:db:df:
         c5:65:89:d6:3c:38:9b:a4:0f:3c:04:0f:87:58:e7:57:ce:ae:
         df:2a:4a:de:61:21:32:54:ac:e6:69:da:ee:63:99:64:75:1d:
         58:37:e2:e6:e6:fb:60:8e:61:f4:6a:a0:4b:72:8a:13:3e:84:
         43:ba:90:23:fa:91:f2:2e:b4:8a:5c:14:75:c9:ea:f7:39:a5:
         73:40:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:05:40 2024 by rpki-client on console-ams.rpki-client.org