Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File:                     6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier:          WS1pUQs2wiE7VVJYII6fCTQJ+okw2QK2o316AGE78lE=
Subject key identifier:   C0:4F:72:EA:5C:B8:A5:73:D4:D2:71:59:5E:59:68:A6:03:04:CB:AF
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer:       /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial:       018F41C36AB86C5F2DC6F8FBA8C68D4D586E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number:          045C
Signing time:             Sat 04 May 2024 04:01:16 +0000
Manifest this update:     Sat 04 May 2024 04:01:16 +0000
Manifest next update:     Sun 05 May 2024 04:01:16 +0000
Files and hashes:         1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: ME2nPLqz+wCEsxvsFxPQy4V/X43xEkBiHA8LbMgmBZU=)
                          2: uYdBNvpge0TzaiXy2_8mcemu5PU.roa (hash: Kqb2c+nyxNO78nX1uWi+dVPJnMkKBAqqs87VUcEkVaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:6a:b8:6c:5f:2d:c6:f8:fb:a8:c6:8d:4d:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
        Validity
            Not Before: May  4 04:01:16 2024 GMT
            Not After : May  5 04:01:16 2024 GMT
        Subject: CN=c04f72ea5cb8a573d4d271595e5968a60304cbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:36:ef:12:8a:e1:5f:f3:ef:47:ac:20:f4:
                    b1:e0:df:07:94:0d:17:8f:84:65:c4:da:b7:45:0b:
                    a7:a0:57:2f:7b:c6:10:fc:52:4c:98:a2:8e:e1:cd:
                    7f:7c:34:4a:6b:96:f8:74:34:1a:90:40:d7:e4:36:
                    6a:28:f3:51:be:c7:cd:4e:a7:3d:c8:a6:3a:ba:30:
                    a7:5e:18:73:2e:ad:ed:cd:c1:35:7e:00:c0:fe:00:
                    13:e9:ff:13:17:53:6a:7f:c6:36:a6:ac:1e:f8:bc:
                    18:fe:8c:75:b2:dd:fe:48:fe:d3:79:b4:38:da:87:
                    63:ce:f1:56:83:df:1b:c7:50:5f:46:ed:39:76:db:
                    88:7a:f8:76:df:fa:ca:8b:58:94:7a:aa:a5:82:62:
                    f1:d8:1e:91:bb:82:ef:59:ba:d5:34:eb:43:b0:0b:
                    00:7d:bb:13:25:84:68:68:dc:c5:d0:6c:08:c4:76:
                    8f:39:ec:c9:03:61:3f:ea:4a:93:55:35:12:09:c7:
                    b7:ba:d3:bb:55:1c:58:75:ea:15:6f:fa:d8:95:d5:
                    6e:12:c1:8d:53:ae:cb:ab:71:74:c5:97:69:b8:a8:
                    84:dd:c1:53:14:08:02:47:d5:13:58:d4:da:2b:db:
                    33:1c:70:e7:ef:07:2c:b1:15:93:fa:50:f4:09:09:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:72:EA:5C:B8:A5:73:D4:D2:71:59:5E:59:68:A6:03:04:CB:AF
            X509v3 Authority Key Identifier:
                keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:59:3e:95:4b:89:71:ae:93:30:4a:4b:3b:b6:2a:33:9e:6d:
         40:54:48:05:36:ca:1e:b9:6e:a0:8b:52:56:ed:08:d7:dc:de:
         a7:fd:39:21:ec:4b:e6:de:77:23:28:21:99:f0:03:0f:ae:aa:
         5a:89:6f:6c:3b:8b:64:fd:75:cb:85:09:51:b1:49:b0:3b:06:
         16:ff:6b:1a:2c:3c:a2:57:e6:aa:1b:19:93:7c:4d:0d:86:0a:
         4a:22:fd:42:ad:ba:47:c7:53:4d:2a:04:20:22:d0:a0:db:ef:
         c2:df:5c:2a:65:41:f6:6f:a7:f8:0d:45:c2:26:f8:e2:bc:a0:
         fb:80:e8:19:d4:4b:23:02:a8:f2:2d:c1:e4:b1:b3:23:b4:07:
         64:0c:55:0a:9a:b5:be:56:2d:9c:2e:6b:e6:ac:34:99:5d:07:
         37:a5:a0:a7:53:e4:03:3d:e7:a6:35:de:3c:59:70:94:41:98:
         1a:ba:4b:03:16:bc:0f:28:f6:fa:a0:ec:d5:dd:86:c2:17:2d:
         eb:62:01:07:8b:07:a8:1f:5f:be:07:28:3c:35:20:d8:46:90:
         3c:5a:d8:80:b2:02:3e:10:20:88:3b:62:3b:9d:22:cc:8e:66:
         fd:a2:50:26:f0:e2:30:fc:dd:b5:12:43:aa:58:10:f2:81:11:
         2e:ca:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:47:35 2024 by rpki-client on console-ams.rpki-client.org