Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File:                     GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier:          I259As1Yv4UY3NL+g+HMA80egt/H+pVOt5TU1IZpa3U=
Subject key identifier:   44:AA:E7:AA:3B:FE:DA:7C:BF:D1:F1:78:4F:AC:CC:04:7D:42:A3:74
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer:       /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial:       018F58EFE559F6113DFA9EDBFF72362ADF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number:          0EAA
Signing time:             Wed 08 May 2024 16:01:07 +0000
Manifest this update:     Wed 08 May 2024 16:01:07 +0000
Manifest next update:     Thu 09 May 2024 16:01:07 +0000
Files and hashes:         1: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 2/3NkLV6oou1ABXtZoq6ECKinFtmNuQl6PjXtEmsvy0=)
                          2: Kw0QO3i_AjVoOtD5dVZ4SApTA2Q.roa (hash: D1U3+WX2h0Q+KuohyLreK5APe6//x2uP7qGiKpQfn28=)
                          3: UDDIj4jK3Eev7dkzg5PAj5lzjnk.roa (hash: n0/zd9CbtRflNkHeIp7YE++xnlex4D33T4dd0l4ZZS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:ef:e5:59:f6:11:3d:fa:9e:db:ff:72:36:2a:df:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
        Validity
            Not Before: May  8 16:01:07 2024 GMT
            Not After : May  9 16:01:07 2024 GMT
        Subject: CN=44aae7aa3bfeda7cbfd1f1784faccc047d42a374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:20:84:c3:cd:1f:a3:3b:b2:f8:b9:e5:d8:
                    8d:76:f0:0b:f5:a2:71:64:88:22:b7:47:1a:f7:6b:
                    46:70:5c:ff:46:d5:03:f5:2e:a1:ca:50:c7:ac:0c:
                    51:00:0a:a2:6b:f8:d0:0d:38:88:fb:25:c7:68:a6:
                    c9:b5:ff:7a:b2:a9:a3:f3:9b:39:2c:45:a0:26:b4:
                    3f:a7:7b:61:fa:05:24:79:c1:8d:cb:45:ed:c7:d2:
                    70:44:04:95:7c:43:04:68:48:06:d7:a4:91:16:76:
                    2e:91:da:2f:10:64:3c:a8:a9:75:6c:a0:e0:da:e0:
                    ef:ec:b0:3c:e5:58:1d:2a:91:d3:22:f3:ca:75:50:
                    0b:48:f7:bd:7d:71:7d:33:12:ab:42:4a:88:ee:20:
                    c6:ac:33:31:fe:6f:9b:56:f1:8f:61:60:66:37:4e:
                    3f:7e:78:75:e1:ae:e8:fa:29:7c:98:40:8d:ba:7b:
                    0e:8a:a3:ea:61:46:12:ce:31:1a:06:b1:18:74:45:
                    8f:da:f9:f1:82:d6:f2:9f:23:30:87:ad:e0:7b:50:
                    36:17:a9:52:7f:00:02:0c:3d:84:ea:93:68:3c:ab:
                    64:38:cd:9e:70:29:18:fe:15:05:16:b4:3d:56:79:
                    f9:d7:b8:9e:3e:27:f2:77:3e:db:63:6f:81:ef:e4:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:E7:AA:3B:FE:DA:7C:BF:D1:F1:78:4F:AC:CC:04:7D:42:A3:74
            X509v3 Authority Key Identifier:
                keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:83:40:c7:64:f7:83:40:a5:69:16:a8:4f:8b:b5:f4:5d:
         f6:ca:cd:47:00:87:af:af:93:95:2e:66:74:a4:07:a6:ff:f8:
         23:cf:5d:8c:18:5f:b6:bc:a9:a8:7b:a1:e4:dd:d2:c7:09:fd:
         6a:f2:c6:3d:50:fe:e6:5c:26:f7:69:f3:1e:24:a7:22:c1:d4:
         e3:97:12:87:ca:20:b9:07:35:e8:3f:3e:22:3a:f7:2b:e8:40:
         fc:6a:03:53:cd:03:56:ed:31:19:5a:7e:e8:8b:e0:b4:bf:ea:
         57:03:bc:46:9b:18:de:b0:29:26:18:81:4b:f3:01:3d:11:01:
         5a:61:74:8b:7e:46:5e:9c:4e:91:40:16:f7:99:b6:a7:c8:21:
         84:15:11:ac:1f:8a:6d:be:e9:a9:d1:13:e2:f2:a8:05:c5:d9:
         e0:07:e8:57:4e:6f:e7:79:9d:de:9e:4b:19:2f:93:04:70:17:
         dd:23:2a:b1:18:31:05:a3:4d:c0:09:6a:f0:de:d5:27:99:20:
         e3:a9:d9:28:96:cf:a5:e8:87:75:ee:a9:f9:d0:f6:cd:39:13:
         74:db:c9:fb:f6:1f:01:41:26:e4:22:9f:c4:b4:3d:29:8f:76:
         de:19:c9:f3:3f:c1:03:5c:23:1b:d1:f0:14:1d:c2:e3:21:06:
         13:38:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:57:07 2024 by rpki-client on console-fra.rpki-client.org