Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File:                     lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier:          7z3Dr7D9SqmGzUcAH15AZYotlg5jppbLY+z8/LqCgM4=
Subject key identifier:   88:1A:E9:3E:B3:D9:00:E0:67:EB:68:1E:8C:91:2F:7D:67:02:23:BE
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer:       /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial:       019041F74627779127E4393189075817D8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number:          11DE
Signing time:             Sat 22 Jun 2024 22:00:42 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:42 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:42 +0000
Files and hashes:         1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: 620BX+NywCJS7ihGcGW43TpYMI4sidcsF9Plx0rD34Q=)
                          2: wZASo91Ntj94AA2q9K07CjUK06g.roa (hash: ycGkbMaIG4S4X7fkc39Tgu6ydna5tDZEr7S7IQ75Hdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:46:27:77:91:27:e4:39:31:89:07:58:17:d8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
        Validity
            Not Before: Jun 22 22:00:42 2024 GMT
            Not After : Jun 23 22:00:42 2024 GMT
        Subject: CN=881ae93eb3d900e067eb681e8c912f7d670223be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:ff:3a:48:6c:38:df:a8:48:a9:ee:69:a5:
                    b6:97:c7:85:fa:9f:47:b9:f7:8b:ad:f3:30:a6:61:
                    fe:25:a4:7f:d2:26:a3:87:38:87:64:30:ca:1a:9e:
                    4e:c5:4e:9e:4c:15:2b:13:fb:36:e7:3a:3f:e8:1f:
                    21:81:7a:b0:f6:85:42:d8:33:35:3e:19:b3:50:99:
                    81:2d:74:26:c0:3c:dd:92:08:84:d4:94:8d:bb:04:
                    7d:83:92:8e:7f:e2:b0:de:57:62:02:bd:3a:29:57:
                    fb:37:9d:a8:ad:44:6d:15:e7:e5:38:84:a6:6f:12:
                    84:fc:db:de:72:06:b0:a2:d1:05:53:e0:ee:f3:a0:
                    49:3a:8f:f2:bb:9a:d1:39:75:12:80:2c:ff:9d:19:
                    bc:79:0d:85:05:e6:91:66:1e:96:81:7b:e6:8d:b0:
                    26:87:25:09:b9:22:fd:c3:a8:9f:b2:9d:12:9d:d0:
                    7d:32:41:fa:fa:b6:e2:a1:d0:b1:86:e7:a0:00:86:
                    bc:94:d4:34:97:c1:3c:a8:f3:f9:8d:48:a4:71:d9:
                    76:1c:0d:73:8f:bb:1b:09:69:3f:88:59:b7:0c:43:
                    78:c3:e6:85:ca:65:05:3f:33:bc:3a:cd:0d:a5:ff:
                    21:68:b3:e3:06:9d:e1:54:1e:eb:d3:32:39:d5:5d:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1A:E9:3E:B3:D9:00:E0:67:EB:68:1E:8C:91:2F:7D:67:02:23:BE
            X509v3 Authority Key Identifier:
                keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c6:6d:0e:02:24:2d:6f:b9:11:76:78:d1:23:a3:d8:8e:0f:
         54:db:f6:9f:42:e9:88:c2:ab:fe:1a:d2:f0:73:9f:af:92:fc:
         75:d0:cb:a0:5d:c7:02:5c:c8:5d:68:cd:4e:fa:b3:e4:fd:2b:
         97:83:4a:b9:ae:b7:5f:cf:51:b4:5e:5a:63:61:80:0a:2b:14:
         b5:14:8f:37:38:5e:93:61:dc:14:bb:c8:98:18:16:b2:81:0e:
         39:22:c8:eb:b5:62:19:f6:ca:2a:34:d3:8b:3b:bc:e9:88:bb:
         8f:9b:65:6a:b2:d0:90:2f:18:cc:fc:93:58:dc:d8:8f:81:ed:
         31:51:e0:3e:40:21:cf:47:1e:eb:53:4b:39:2c:81:5d:ef:30:
         3c:e1:ef:52:7b:36:f6:6c:40:12:44:cd:aa:66:11:b0:d4:30:
         8a:5f:33:a8:c0:d5:e9:d3:ae:bd:1a:eb:28:a0:12:d6:2d:cb:
         2a:bf:8b:31:8f:09:8a:68:d6:6e:22:a4:00:d5:e7:1e:57:70:
         9b:c8:63:35:bf:f9:12:6e:fd:7e:db:06:16:84:42:98:09:00:
         bb:25:f7:c8:b6:75:87:e6:54:3d:8c:fc:91:dd:7d:31:67:17:
         bc:6b:7c:10:fa:60:82:99:54:24:ce:a6:10:e2:74:ab:0f:f0:
         8a:78:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:42:52 2024 by rpki-client on console-fra.rpki-client.org