Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File:                     4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier:          lmz/ylYY3/qRQAqtO35Et7ErZfL67J5hJE9u4RKkQPQ=
Subject key identifier:   74:99:D9:34:F8:A9:68:DE:C4:32:49:D6:68:51:12:B5:DE:70:3A:5E
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer:       /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial:       018F43B268B4C0A90DF8D1F746A22FE403BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number:          0FD4
Signing time:             Sat 04 May 2024 13:01:56 +0000
Manifest this update:     Sat 04 May 2024 13:01:56 +0000
Manifest next update:     Sun 05 May 2024 13:01:56 +0000
Files and hashes:         1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: eJCU1UrqaU8HD4DUH9rKdcTopiSifTT1pQQMcjTBFTs=)
                          2: 7ZSOeFM8XcVfVl1R1R2r2tr6no8.roa (hash: 926EsQrKqFUvrO7BI1R+yos8YDi9Aw3qH/qWaRduyC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:68:b4:c0:a9:0d:f8:d1:f7:46:a2:2f:e4:03:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
        Validity
            Not Before: May  4 13:01:56 2024 GMT
            Not After : May  5 13:01:56 2024 GMT
        Subject: CN=7499d934f8a968dec43249d6685112b5de703a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:29:4e:2f:c4:3e:a7:c5:5d:08:39:38:67:
                    9b:d6:aa:51:b0:f3:cf:14:a8:2e:b2:c5:af:ce:79:
                    fc:7e:8a:89:bc:c0:2d:4e:de:84:46:61:e9:c8:1b:
                    0a:08:a0:0b:e1:28:0e:b6:e3:fd:fd:0a:86:77:29:
                    99:d9:b2:25:23:d5:08:51:3a:c4:cf:95:66:74:f6:
                    2d:2f:1e:63:93:b2:fc:79:c4:95:8c:2c:b9:4a:1b:
                    f9:a4:4e:a5:50:54:d0:6b:b4:8a:12:b6:55:27:24:
                    a0:3b:f4:0f:1f:aa:06:e4:85:80:75:7e:2b:62:1a:
                    09:f3:25:f3:b8:88:09:3b:9c:7b:e1:c7:a9:53:e8:
                    c5:12:b7:0a:1f:07:28:ff:e6:1e:10:23:36:d5:df:
                    10:94:6c:3f:30:7e:89:24:1b:78:33:1a:05:8f:81:
                    1a:e8:68:60:aa:62:71:39:02:8e:ef:51:b3:05:18:
                    d6:32:5b:c6:bd:c8:24:20:6b:e9:25:35:b3:92:2f:
                    0d:06:e4:f5:ff:c8:d5:9a:78:ff:17:b7:c9:a2:3e:
                    9a:06:b7:3a:d6:ba:a1:68:5b:c0:9c:7e:e6:0d:bd:
                    43:3a:a0:6c:96:aa:48:e6:64:22:a4:2c:ab:6e:ed:
                    ca:3a:f0:26:78:08:c0:4c:66:23:67:26:e0:b3:97:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:D9:34:F8:A9:68:DE:C4:32:49:D6:68:51:12:B5:DE:70:3A:5E
            X509v3 Authority Key Identifier:
                keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:ba:3f:f3:76:8a:c8:7f:e8:91:1e:9f:c9:b2:b1:bb:9a:
         12:f5:ce:91:6e:99:f0:c9:33:70:84:62:71:d3:64:1b:0a:bd:
         3e:32:bc:66:cc:01:1d:f2:7c:99:e7:03:69:11:83:fb:11:21:
         9a:d0:1c:f7:4b:b8:b4:1a:ba:e7:38:8e:55:11:f0:60:f4:f4:
         0b:22:46:05:b9:9e:0f:f0:cc:f3:1b:34:7b:df:40:d8:b5:65:
         f0:e4:57:ee:b6:66:69:7d:3d:a7:da:c7:1b:e0:e8:b9:8b:5c:
         ad:60:c8:8a:8a:61:7b:3b:68:2b:c8:fd:1a:5c:63:5e:3e:bf:
         f2:5d:d9:b1:2f:b0:ca:2c:3a:05:82:7e:b3:db:a8:11:8f:54:
         4b:b1:8d:38:eb:16:fe:b8:97:c2:25:dc:d5:ff:57:7a:6f:c4:
         bb:cd:57:36:a6:bd:91:c1:58:97:8e:fd:db:0d:83:2a:f8:36:
         8f:50:20:f3:b3:4a:4e:0b:c8:1b:d4:72:81:57:16:07:fd:4a:
         55:31:51:38:b4:6e:04:09:9f:52:be:c9:93:42:a3:91:2a:44:
         84:2a:5e:6d:9a:07:8f:ab:5c:28:65:ca:87:f8:5f:80:d3:a2:
         05:39:4b:7c:a1:77:01:3f:42:a7:45:58:72:32:a2:fd:7f:52:
         6a:44:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:03:03 2024 by rpki-client on console-fra.rpki-client.org