Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File:                     RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier:          pHlK1zjImdioDTCwPAndWwi8l8Ubm1bC3B45xFDQsKc=
Subject key identifier:   AC:42:EB:8E:EE:29:01:AF:0E:33:15:1A:C9:5B:B3:5E:CB:B2:12:9F
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer:       /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial:       019074D3074FD14916ACFD3615C28B80604D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number:          1017
Signing time:             Tue 02 Jul 2024 19:01:45 +0000
Manifest this update:     Tue 02 Jul 2024 19:01:45 +0000
Manifest next update:     Wed 03 Jul 2024 19:01:45 +0000
Files and hashes:         1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: Yo8aeYPq8KBPCtSXMEuaqVdMrhH74yNx9rWmEKbNOdQ=)
                          2: hkvuRxITtSfcoeXVCdRV1ptLqek.roa (hash: uu+Pv6AlyCiMV5aqT+LwRlXvleWGIEXyAeIHRcwKPgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d3:07:4f:d1:49:16:ac:fd:36:15:c2:8b:80:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
        Validity
            Not Before: Jul  2 19:01:45 2024 GMT
            Not After : Jul  3 19:01:45 2024 GMT
        Subject: CN=ac42eb8eee2901af0e33151ac95bb35ecbb2129f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:9b:65:99:9b:ef:cd:14:3a:cf:85:36:67:
                    c8:23:1b:72:3c:ad:80:93:bb:7e:01:56:19:73:cc:
                    4d:21:62:87:aa:74:83:5c:fd:52:aa:83:e7:5e:58:
                    89:55:4f:ae:3d:6f:1c:54:c4:f2:a4:21:47:48:9b:
                    f6:d8:c5:df:c3:47:32:e5:7f:19:c7:e0:1d:88:17:
                    06:a2:7f:78:8f:61:3f:88:6b:43:33:6b:7a:9d:37:
                    c0:9e:35:60:91:cb:6d:52:8a:3c:82:28:5b:38:52:
                    50:e2:09:07:31:a9:4a:9d:7f:aa:6d:de:d6:f1:10:
                    4f:41:10:df:ee:11:40:e7:df:5e:ef:42:5e:90:5a:
                    5e:65:f8:ff:fe:c6:b6:41:a3:b4:02:de:be:f2:77:
                    58:11:c3:74:c9:bb:b6:d3:4b:f8:fd:65:ca:95:8d:
                    f7:68:39:9b:fa:30:42:50:95:ce:83:60:cc:ff:49:
                    07:49:9c:61:17:32:fd:15:e5:a2:1b:6e:9f:85:62:
                    84:e7:e3:64:16:02:02:40:ad:4c:3c:64:21:2f:e6:
                    85:fe:cd:4c:00:40:7f:f8:4d:f7:38:14:35:1e:a7:
                    89:bc:d7:7b:a6:99:9f:3c:f3:dc:df:1d:9d:7a:d8:
                    ea:1e:7e:71:ed:0e:bb:87:4c:a9:82:df:94:83:1f:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:EB:8E:EE:29:01:AF:0E:33:15:1A:C9:5B:B3:5E:CB:B2:12:9F
            X509v3 Authority Key Identifier:
                keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:bf:f0:45:49:52:f1:87:f7:ce:e2:1f:5b:f5:11:24:63:
         7e:f9:51:c4:20:73:3a:1c:23:66:9c:b7:d4:c2:57:6c:00:b2:
         d7:76:4f:c3:57:b2:f5:6f:c1:9f:10:65:11:af:62:3f:e5:c7:
         91:51:f6:bb:08:95:9c:a9:05:d1:7f:eb:4d:87:eb:8b:de:91:
         a7:ba:1d:ab:73:1b:a2:3a:81:b9:1b:5f:41:e2:c8:c0:b8:66:
         f3:1d:58:05:a1:b9:14:5f:b2:6b:a0:a2:d9:94:fa:db:1b:90:
         c9:b2:7a:60:4a:73:e2:66:b3:eb:6d:14:36:7c:7f:22:36:89:
         b2:29:f0:86:8f:ed:6e:cc:20:e6:1a:26:18:b7:eb:39:15:b2:
         83:7c:f9:63:45:2c:30:ad:0b:92:c2:c6:71:42:34:8b:91:80:
         3f:7d:0a:34:bc:68:5e:9e:d3:b3:c2:b9:38:f8:c1:36:06:10:
         ff:b1:ac:71:11:c8:07:63:47:81:bf:7b:8a:ad:70:80:b0:da:
         a4:aa:be:42:e3:e3:64:3f:72:c3:9f:04:a9:22:82:a2:9e:c7:
         5b:44:94:2c:43:fa:51:28:72:f4:0c:ce:f8:2f:7b:20:17:7a:
         84:dd:57:76:bc:84:c5:c7:9e:4d:d0:f1:0a:86:e9:0d:d6:3a:
         cb:2d:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 19:58:42 2024 by rpki-client on console-fra.rpki-client.org