Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          xOK90gJU/syDx9HStZzkbC6Zl9A8ynVzQKZQCS+FYAs=
Subject key identifier:   1E:0F:21:11:FA:D7:5F:42:15:7E:E8:CB:C3:BB:12:A9:EB:6A:54:57
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       018F94CDB9DA0FB954C4CFDBCFB93EB9B884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          10DC
Signing time:             Mon 20 May 2024 07:01:01 +0000
Manifest this update:     Mon 20 May 2024 07:01:01 +0000
Manifest next update:     Tue 21 May 2024 07:01:01 +0000
Files and hashes:         1: MsP8MexBYcgn1u018Uksudv-1DU.roa (hash: xqEvYloI/cmwfNekKX2MJfT3YeHGw13jqUmfZZ4US1M=)
                          2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: 0MGRX6ET0O4AG1hD/D/XySmr3VShn551hqQCvmBhc7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:b9:da:0f:b9:54:c4:cf:db:cf:b9:3e:b9:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: May 20 07:01:01 2024 GMT
            Not After : May 21 07:01:01 2024 GMT
        Subject: CN=1e0f2111fad75f42157ee8cbc3bb12a9eb6a5457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:51:6b:28:51:f8:cb:e7:c5:39:2c:ca:e0:
                    0f:ce:e7:49:85:d2:5f:d8:3d:23:db:84:58:60:7b:
                    4a:b3:87:79:6f:7d:48:c8:38:b2:ed:18:77:47:0a:
                    a2:cf:54:f1:96:87:2c:0a:e1:0d:6a:26:b7:ef:ff:
                    ae:b4:67:d6:b9:ee:bd:a5:ed:48:1f:4c:c9:bd:75:
                    07:86:d5:96:31:ce:fa:d1:69:00:c8:88:aa:9c:8a:
                    0a:17:12:c6:4e:f4:33:f0:40:e2:43:b3:42:fe:f0:
                    d4:35:ec:5e:61:60:8e:57:89:46:5d:eb:e7:1a:ca:
                    4c:b8:b4:73:b0:ce:d0:08:5a:25:68:4d:0f:55:17:
                    bc:87:db:b1:e6:be:78:9c:98:2d:77:32:eb:33:c1:
                    2b:fc:12:32:ca:cf:ca:24:de:ee:67:db:29:82:ef:
                    ab:0b:44:4d:21:54:b8:8c:0d:4f:5e:0d:ca:f2:f3:
                    bc:56:a3:b2:cd:36:90:bb:5e:5f:ed:f9:a4:86:50:
                    37:cd:33:a7:13:5c:65:28:7b:74:f0:04:fd:95:b5:
                    88:48:03:47:16:be:f1:a7:38:08:96:96:24:e1:c2:
                    2c:19:c5:d3:30:66:72:0a:3e:4c:2f:06:67:42:96:
                    76:7b:2f:c9:d7:26:da:48:60:4c:f0:b1:28:73:43:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:21:11:FA:D7:5F:42:15:7E:E8:CB:C3:BB:12:A9:EB:6A:54:57
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:0e:c8:04:06:6e:76:4b:30:54:c6:89:fa:9e:5c:f3:f8:
         20:da:2d:3d:e5:4e:09:46:8c:1b:9c:3d:20:56:c5:9f:6b:47:
         92:ee:eb:72:cf:96:db:94:3c:f2:b7:ed:ee:4a:7f:db:03:9e:
         22:3a:ec:a3:6d:34:4d:3b:8b:b9:6b:2f:34:bb:b0:ab:b6:75:
         41:38:48:c3:00:f7:3c:04:98:67:3a:90:60:03:9f:9d:5a:88:
         52:fb:0a:6e:93:be:20:1f:e2:8c:69:33:94:de:d5:b0:a8:b2:
         f2:66:68:40:44:3b:57:fd:4b:3c:1f:68:f6:fe:80:6a:31:63:
         fc:d1:24:4d:a6:8e:a7:ae:03:e0:bf:1b:43:a4:61:7c:e5:5d:
         4e:1f:59:9b:7b:72:69:06:f2:d2:94:71:88:f2:59:40:bb:ff:
         f6:44:3f:36:00:d5:01:af:41:18:ed:7f:12:06:6c:b3:de:4d:
         ae:ef:c5:75:dc:ee:ee:e1:48:e6:63:a7:f0:1e:1d:5d:34:31:
         25:67:e2:84:c6:18:c0:51:be:2e:b2:33:cf:e5:79:5d:ed:45:
         9a:c4:d6:e4:ee:c6:0c:36:8c:c2:3f:05:c8:16:4c:ec:bd:66:
         d1:28:53:e3:a0:24:75:a3:4a:96:de:99:74:3f:db:75:0b:15:
         b0:8d:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:54:36 2024 by rpki-client on console-ams.rpki-client.org