Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          I9OV22q5yVEwJt8x9fn64KejoWEVom6+GpUsgV0uLx8=
Subject key identifier:   9A:00:0B:0F:7E:85:3C:E8:12:CE:2C:E3:E9:35:13:33:CD:E6:61:45
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       01901DEDB3C25396DEBB73994C48416B7288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:03:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:55 +0000
Files and hashes:         1: 3C90JZW4dC9x7edWQ9gUQTYK6VA.roa (hash: hRfVILU4vQIZ5BlnhoL2jjMEZQkueYexoBctOsdSfFA=)
                          2: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: TCmNVJWcqW09RtLd3y01dNP9tm5rX2/UknbjO/VTBJc=)
                          3: vPdNYp-mchdmtcaWUZ1RJpFG-nE.roa (hash: 9iHICWNipP2JdsvY6VuIirxL7nAFhCI0weQv7/w5Oys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b3:c2:53:96:de:bb:73:99:4c:48:41:6b:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: Jun 15 22:03:55 2024 GMT
            Not After : Jun 16 22:03:55 2024 GMT
        Subject: CN=9a000b0f7e853ce812ce2ce3e9351333cde66145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:6c:49:c0:6d:95:92:e4:83:65:fb:30:5d:
                    2b:f3:19:83:1a:99:2b:b5:af:d9:35:b2:e4:66:08:
                    0e:e8:af:a0:23:29:91:f2:8f:a8:66:76:28:ed:8f:
                    6f:31:f6:a8:f0:37:7f:49:31:0e:11:a6:fd:e2:73:
                    bc:ce:37:be:28:c5:33:2d:77:f2:a3:1a:ca:75:80:
                    ac:d1:64:2d:14:57:2b:bb:88:f6:d7:0f:55:95:d9:
                    6b:43:ef:d0:bd:35:19:93:a3:62:86:26:28:d0:13:
                    04:84:c7:d0:d5:e2:d1:88:b6:5b:f0:56:24:4d:6f:
                    47:6e:1d:73:31:ee:bc:f6:7e:01:fb:c1:eb:6a:34:
                    b1:7a:35:ef:b2:14:8e:04:bd:9a:84:1f:46:66:b4:
                    0e:cb:e8:a7:a8:59:32:74:9c:74:57:29:80:21:92:
                    b1:da:0b:b2:74:18:69:34:60:04:5c:c1:79:a4:72:
                    d6:68:2d:01:d2:de:ad:12:b6:3a:47:ca:34:fd:36:
                    f7:dd:60:6a:40:15:ed:60:8b:9b:31:cd:48:2b:02:
                    91:02:11:51:93:9d:a6:30:8f:5b:31:40:f1:40:50:
                    94:aa:33:63:0b:7e:e3:b5:a1:8f:09:c4:35:d4:93:
                    ea:e3:2b:61:e9:7b:27:1b:82:3e:7c:dd:06:6e:a9:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:0B:0F:7E:85:3C:E8:12:CE:2C:E3:E9:35:13:33:CD:E6:61:45
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:cc:76:00:c1:8f:f0:f3:74:92:0f:7d:52:83:eb:f0:f1:
         72:bb:30:11:b1:b0:4c:dd:2b:ae:fc:fc:35:b9:a0:6b:1d:87:
         af:54:7a:a7:34:98:11:91:62:02:19:b3:22:25:04:c9:78:fd:
         30:ba:3f:69:d9:32:f4:4e:34:56:a1:50:10:89:aa:eb:20:6d:
         bd:db:09:d1:4d:f1:88:01:bb:ee:93:34:a1:31:bd:b2:cc:fd:
         bd:01:61:94:ea:1e:79:90:77:c2:35:9c:6d:4e:22:a3:4e:0d:
         4b:b9:d9:00:f9:f1:09:74:a4:63:75:24:dd:e5:a5:c4:bc:f4:
         41:64:1f:9e:2b:17:1b:95:b5:f0:58:8a:ad:53:92:ab:3d:35:
         12:27:22:d1:7e:0f:9d:ee:d2:8c:a5:28:49:50:f7:84:1a:ab:
         7d:23:88:ba:c6:01:33:36:af:f0:de:b0:2e:69:37:a8:5a:d5:
         d2:d6:e8:28:10:46:c7:38:cf:34:da:c8:69:ec:95:38:87:ac:
         45:e2:1e:a1:11:1e:49:64:41:f2:1c:47:49:2f:f0:23:65:db:
         12:92:72:3d:dc:ac:f3:e4:8f:c4:09:22:c4:2b:1b:e1:c6:cf:
         4f:a0:82:27:0d:ed:bb:83:85:94:3c:9c:6c:31:7d:4d:6e:8f:
         a6:b4:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:52 2024 by rpki-client on console-ams.rpki-client.org