Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.mft
File:                     s-mxeistvPcCrLZCIvegojDNKv0.mft (raw, json)
Hash identifier:          q84ezwvgU6FrOFcnMY0JwdoPnqQMBENnmbtZ/dZqYKo=
Subject key identifier:   62:B6:F7:CF:FE:99:73:0D:90:71:98:98:11:D5:D6:91:6F:B7:26:4E
Authority key identifier: B3:E9:B1:7A:2B:2D:BC:F7:02:AC:B6:42:22:F7:A0:A2:30:CD:2A:FD
Certificate issuer:       /CN=b3e9b17a2b2dbcf702acb64222f7a0a230cd2afd
Certificate serial:       018F8748A7A8E792F7A35DC21B07538D48A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-mxeistvPcCrLZCIvegojDNKv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.mft
Manifest number:          0444
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: s-mxeistvPcCrLZCIvegojDNKv0.crl (hash: yJp8aK8BsSr5C/hB5Moj04+P68xiY+fZfIjxNk6DQss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-mxeistvPcCrLZCIvegojDNKv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a7:a8:e7:92:f7:a3:5d:c2:1b:07:53:8d:48:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e9b17a2b2dbcf702acb64222f7a0a230cd2afd
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=62b6f7cffe99730d9071989811d5d6916fb7264e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ac:f7:28:e3:5a:89:3a:c3:71:a4:42:d2:13:
                    72:a0:ad:01:10:e5:95:0b:6f:cb:4e:2b:0c:02:ab:
                    eb:ad:b1:d9:d1:df:72:40:9a:9f:25:05:af:37:06:
                    60:88:66:dc:d6:68:29:a5:1d:59:66:1c:87:49:ad:
                    e1:25:97:76:93:56:af:9c:5b:69:bb:3c:87:8a:0f:
                    7d:da:fd:4a:48:19:4a:79:5f:c8:62:54:a1:a3:62:
                    6f:4c:77:fe:01:4c:1b:34:99:1c:b0:97:75:43:27:
                    8d:c8:9b:af:43:5d:a2:cb:14:00:22:4f:6c:6f:9a:
                    8e:c3:a3:4b:f8:fa:6a:c0:b6:b9:cd:92:b8:bb:a9:
                    f8:2d:36:d2:76:77:1b:1f:d5:a7:b7:b1:77:c4:71:
                    be:0f:39:9b:25:13:8d:23:ba:96:ab:cd:8e:f6:01:
                    c6:9c:cb:1e:f6:d6:34:ef:df:8b:c2:43:3f:c5:9c:
                    a7:af:84:4a:4c:dc:85:59:d8:4d:23:69:c1:81:b5:
                    a5:0b:60:2e:b7:4b:df:cf:25:e3:b7:f8:69:b6:93:
                    ae:65:f5:e0:54:07:2a:e8:b1:5a:cb:88:f0:84:fe:
                    8d:48:8d:59:4d:dd:8d:f8:03:9a:a5:3a:c2:cd:d2:
                    57:d5:81:dc:5e:4e:75:89:cf:01:50:74:7f:39:2b:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:F7:CF:FE:99:73:0D:90:71:98:98:11:D5:D6:91:6F:B7:26:4E
            X509v3 Authority Key Identifier:
                keyid:B3:E9:B1:7A:2B:2D:BC:F7:02:AC:B6:42:22:F7:A0:A2:30:CD:2A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-mxeistvPcCrLZCIvegojDNKv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6d1814-2310-4062-a453-9a8dc309536f/1/s-mxeistvPcCrLZCIvegojDNKv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:fd:16:cc:d2:25:c0:27:8c:85:ae:6f:21:0f:14:5a:0d:
         ed:bf:16:36:08:68:b4:64:ff:9c:81:16:bd:ac:55:e0:68:85:
         81:64:df:89:3e:55:83:13:37:22:ed:13:89:53:9c:5c:77:04:
         bf:f7:39:7d:f9:4b:e1:93:3a:4e:bd:97:e0:09:4c:62:e1:fd:
         be:d1:ff:ab:ec:7b:ba:65:47:ce:df:71:df:6e:47:82:ed:70:
         e7:72:83:88:6f:aa:87:71:e6:28:da:33:d8:f3:1b:7a:56:e0:
         d9:d9:8c:61:20:85:d2:7a:53:f1:e8:95:7f:39:6d:11:f0:c9:
         71:26:48:70:0b:36:be:ee:0a:ba:3b:66:63:02:7f:d9:41:fd:
         5b:cd:25:06:bb:bc:da:90:41:6c:3f:1f:1a:bd:70:cb:66:35:
         79:83:a9:07:9f:67:ac:41:fd:07:8c:8b:67:c3:0f:d3:de:c2:
         c9:8d:3d:85:be:74:90:db:3d:36:40:2b:d0:31:fa:2c:e3:74:
         44:c7:cb:71:2d:53:bc:96:94:bb:8f:ca:46:70:6e:4e:02:63:
         34:d0:52:3f:e2:30:cb:3b:2c:59:90:fb:ff:9a:ed:96:28:da:
         b9:aa:82:0f:56:29:ba:fa:e5:9e:1b:90:ff:30:31:3a:d4:1b:
         72:30:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:38 2024 by rpki-client on console-fra.rpki-client.org