Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
File:                     MQg6vX-XmWMam72oo09EIwH8bm8.mft (raw, json)
Hash identifier:          OPK3hRb+2QZkrXAm4GkrLb7uxPngvkx8sasw86p59n4=
Subject key identifier:   14:AB:B2:A3:1D:B8:3E:78:42:9D:B5:C3:92:7B:60:68:5F:DE:C5:F1
Authority key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Certificate issuer:       /CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Certificate serial:       01901D4646DA21DB68D5B2E785266440CBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
Manifest number:          09B8
Signing time:             Sat 15 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:03 +0000
Files and hashes:         1: MQg6vX-XmWMam72oo09EIwH8bm8.crl (hash: p6p3/Y2p1ULR8/OGlzVzblrytlyWPaVSHZ3+cBOd07o=)
                          2: c8BLxRwyhNHXKOZVC0aQH4d4IYY.roa (hash: jazhxGuZxgPfFQ9flUW0RIJQ5NUtZGOz9mXRaoj/1lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:46:da:21:db:68:d5:b2:e7:85:26:64:40:cb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
        Validity
            Not Before: Jun 15 19:01:03 2024 GMT
            Not After : Jun 16 19:01:03 2024 GMT
        Subject: CN=14abb2a31db83e78429db5c3927b60685fdec5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:6b:37:c7:96:c4:f0:e9:0f:35:0e:bb:bd:
                    26:e0:6c:66:b6:fc:54:0f:d6:75:f6:08:ff:17:70:
                    3d:29:f2:ab:08:b6:48:f1:da:56:9f:f3:64:1d:1d:
                    a2:e8:1d:e6:f4:47:7d:b5:a9:be:5e:7d:f9:e9:bc:
                    ca:16:8d:31:12:e5:40:89:de:a6:9f:71:ac:d9:89:
                    9b:73:19:cf:11:67:30:33:97:98:44:35:49:44:28:
                    f6:77:94:07:3f:c6:da:cb:d5:05:74:90:d0:f4:21:
                    58:f6:8e:68:a1:7e:42:34:bd:cd:ef:83:ff:a0:c1:
                    3c:a6:01:6b:d8:9d:50:71:03:0a:e0:d1:67:f0:58:
                    eb:75:14:24:28:a9:68:dd:aa:56:e1:0b:67:6f:09:
                    4d:13:76:c2:b7:70:2c:dd:a9:b8:57:15:03:eb:7a:
                    9b:8e:ad:13:26:0d:3b:5c:75:4f:07:32:22:ba:d9:
                    3d:ec:6d:ba:34:7e:35:c8:e6:d1:a5:a6:a9:5e:b5:
                    16:66:26:e1:e6:b6:c9:39:2d:54:9d:c5:e5:bf:a1:
                    02:82:d4:83:9e:89:9d:82:53:9e:e9:21:7a:88:91:
                    54:d8:ef:5e:96:98:ca:25:db:e1:2d:d8:e1:82:71:
                    69:dc:12:4c:d8:38:44:d2:ea:32:5c:7f:27:94:db:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:B2:A3:1D:B8:3E:78:42:9D:B5:C3:92:7B:60:68:5F:DE:C5:F1
            X509v3 Authority Key Identifier:
                keyid:31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:48:b6:6c:0b:da:9b:32:54:b6:6f:ad:a5:26:2f:0c:be:
         75:d0:06:9c:29:a2:f9:73:9f:f5:b6:ad:d8:f3:79:7d:fa:f6:
         06:98:fc:1e:b9:c7:e1:b0:e1:df:79:db:09:01:7b:2f:c5:92:
         43:b9:0b:ec:87:51:d6:7c:90:41:0a:17:5e:b7:38:7c:93:86:
         5c:16:24:11:16:bd:f3:4d:e5:04:09:ea:05:96:49:d7:b5:ba:
         a4:3c:3a:34:26:13:e0:7a:28:68:81:d3:63:88:ae:60:2a:53:
         69:d6:98:44:35:f2:86:05:86:f6:5b:42:99:b1:70:c9:87:41:
         dc:65:4e:6a:ea:3d:26:65:06:03:b9:1e:44:b1:f9:66:6c:20:
         89:4c:e0:4f:dc:0a:19:50:c8:d7:82:25:aa:07:bd:3d:38:6f:
         86:58:aa:5e:ee:17:a0:83:a1:f5:62:c9:53:51:da:2e:62:d6:
         ed:fb:d9:dd:6a:35:47:96:aa:18:00:1a:14:fa:df:d8:da:ef:
         9f:7b:7a:69:9e:6a:dc:ec:fb:14:21:36:63:49:7c:ef:4c:50:
         cc:ce:6e:72:de:a5:64:4a:23:6f:b1:fc:25:48:d9:98:07:70:
         8f:14:35:1b:34:d2:91:50:32:d9:a3:63:0e:3b:82:b0:75:63:
         48:1a:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:38:00 2024 by rpki-client on console-fra.rpki-client.org