Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File:                     CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier:          sjTuKWTA75bH/QDTAwQiun/LVZohlkfUVEb/aJSE7Uc=
Subject key identifier:   81:5A:53:3C:66:60:D0:94:69:21:85:1C:F3:DB:9C:88:EF:AD:72:2C
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer:       /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial:       01901C6AB22A8E912867B1A15B10CA26E3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number:          0135
Signing time:             Sat 15 Jun 2024 15:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:12 +0000
Files and hashes:         1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: GcBnvA2uU8dHa5bnuP8YPxXcX26YRnEMCom0DOC45UQ=)
                          2: hNRI4S_udptfEHNLzR1cCdL0Fyc.roa (hash: aqWVSi2tbawPqoXxM+/JB/gKcBdcEu9o5eXepRCVXNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:b2:2a:8e:91:28:67:b1:a1:5b:10:ca:26:e3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Validity
            Not Before: Jun 15 15:01:12 2024 GMT
            Not After : Jun 16 15:01:12 2024 GMT
        Subject: CN=815a533c6660d0946921851cf3db9c88efad722c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f6:03:6d:b4:b3:2c:cc:99:ba:9a:56:6b:ed:
                    07:d4:9a:29:ef:a7:df:89:f1:97:bb:ea:c1:4a:b6:
                    b9:6d:a4:8f:21:f9:72:e4:31:10:06:19:e6:36:a0:
                    ab:e8:8f:35:1a:2f:58:2b:1f:83:02:43:45:fe:b9:
                    64:e7:de:b8:45:7d:36:0a:e9:b9:d6:06:d2:37:19:
                    8c:fa:44:da:88:b1:21:d9:f0:d6:b3:15:af:0d:20:
                    51:10:91:43:9c:b4:49:7f:8c:72:89:1a:ed:44:36:
                    ca:11:08:83:9d:e9:a8:c0:23:b1:86:74:c9:a6:7e:
                    8f:68:3b:75:00:e4:97:75:87:a7:b5:b9:0d:08:46:
                    00:ea:91:66:b7:8b:20:29:bc:c4:0b:e5:b1:09:b4:
                    5b:25:10:98:a5:90:1e:c7:b7:bd:71:ed:25:e9:55:
                    44:b2:99:75:71:47:35:d0:30:b9:5e:0d:66:a6:98:
                    32:60:27:9e:7e:a7:37:93:47:b0:2f:eb:2b:87:c3:
                    ae:d4:38:22:3c:50:6f:e3:43:9c:c2:b5:7a:8a:35:
                    31:d9:b3:e3:49:00:a4:41:aa:78:ee:9a:95:30:4f:
                    1c:ca:b0:16:1f:c8:cb:8c:95:75:bd:9d:67:50:21:
                    8b:e4:1e:05:ff:83:4b:05:01:cb:48:61:13:55:c4:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5A:53:3C:66:60:D0:94:69:21:85:1C:F3:DB:9C:88:EF:AD:72:2C
            X509v3 Authority Key Identifier:
                keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:aa:04:3d:31:09:75:8a:6a:a3:17:c6:1f:b9:6f:e4:ac:75:
         c3:0c:ff:1d:da:04:9f:60:2f:a2:44:79:64:9b:ee:a0:20:52:
         fc:af:b2:a0:8f:9c:fc:66:cf:52:b6:5f:fe:00:94:67:5b:93:
         02:85:87:ad:f6:69:19:5c:d2:79:64:dd:d1:22:6f:df:d1:10:
         33:e9:53:e9:d4:e7:66:7c:1f:7c:05:7c:19:24:97:15:e2:eb:
         f1:80:64:38:43:8e:19:5d:ec:0f:53:2e:1e:48:e9:8d:00:f3:
         09:81:eb:8a:73:b1:f8:d2:92:25:f6:86:6c:43:fa:9e:6c:6e:
         b3:26:d9:e3:5f:71:b4:7b:ad:f9:af:5e:60:99:9d:0c:e1:8a:
         1d:a2:57:d1:14:55:50:8c:36:8d:5a:0e:be:fa:bd:09:92:35:
         42:f8:3d:4a:26:2a:3f:1e:0f:3e:43:91:ff:26:aa:a6:e1:86:
         3e:9c:67:10:18:c2:bd:d7:e0:9e:89:4c:77:9a:c0:28:52:bb:
         64:54:73:21:65:9d:53:a8:01:fc:a6:8d:34:79:37:78:40:cc:
         6f:b3:ab:3b:76:30:0a:ee:a5:60:56:a4:e0:13:41:8a:f9:28:
         b2:78:52:42:a3:6f:42:a5:52:1c:e2:05:b6:66:23:ef:64:6c:
         c3:4d:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:48 2024 by rpki-client on console-fra.rpki-client.org