Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          dJT/2laBj+lUW+g9DHS9ajI6RYDAacas2LT6Zkn0gWo=
Subject key identifier:   10:C3:C7:BF:54:88:3B:7C:F8:0D:CB:B3:C5:24:69:3C:7B:4A:A2:37
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       01901F34A0EDF48FFF965FFED77742C20F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          100D
Signing time:             Sun 16 Jun 2024 04:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:00 +0000
Files and hashes:         1: bui5NFlRO1fwZtx4u5P1IBHq-Mo.roa (hash: xed8Wfv/fhkQfqqDxWqldGuDTapPMfaFRfcotwhJ2EM=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: mTWl1djxl/HpfEtZ+VghcaOPjjHuoV0zbLLz21o7uKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:a0:ed:f4:8f:ff:96:5f:fe:d7:77:42:c2:0f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Jun 16 04:01:00 2024 GMT
            Not After : Jun 17 04:01:00 2024 GMT
        Subject: CN=10c3c7bf54883b7cf80dcbb3c524693c7b4aa237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:d1:99:ad:b2:cd:31:2a:77:14:10:87:4b:
                    3c:19:2f:ef:ec:1c:5b:31:5d:dc:bb:b1:a9:51:7b:
                    48:b0:48:50:e9:60:a2:97:3e:00:5c:56:41:84:bc:
                    24:fa:9e:b5:5c:e0:db:88:8b:06:b3:5d:70:1a:a9:
                    a5:d4:ac:b7:1b:87:d2:6a:c8:b7:55:aa:7d:93:8f:
                    9f:54:65:d2:95:23:24:9e:3c:f8:19:45:dd:c5:bd:
                    b1:8f:5b:31:7a:32:b4:ce:71:1c:7e:03:51:ff:5d:
                    66:fb:44:10:f3:29:2c:24:6e:eb:7a:eb:a9:4a:d7:
                    40:fe:12:10:1b:45:cf:d7:95:52:68:cd:bc:53:11:
                    e8:00:24:22:c3:08:15:9c:0c:b4:8a:71:3f:c5:ad:
                    71:28:46:07:eb:5b:53:03:c5:fa:42:be:aa:c9:f3:
                    ed:cd:c5:66:90:04:b2:f1:f1:65:5a:d9:5f:84:8e:
                    2a:92:26:cd:70:9b:36:00:e6:94:ec:a1:eb:9c:6f:
                    bb:18:2e:65:ef:f1:0c:02:44:80:f1:8e:be:4f:2e:
                    c5:a8:28:df:ac:bf:19:de:2c:79:47:3d:90:07:29:
                    65:3d:72:dc:68:54:27:ae:c7:e6:67:de:08:f1:4d:
                    d7:2e:bc:7b:1e:3d:cd:68:00:f4:72:7d:e4:aa:28:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:C7:BF:54:88:3B:7C:F8:0D:CB:B3:C5:24:69:3C:7B:4A:A2:37
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:97:a5:12:e5:ef:19:ca:97:3a:06:ed:18:79:0f:be:58:
         0c:82:38:7d:e5:f1:be:66:ce:34:69:d2:a7:bf:f6:cf:2e:52:
         47:ab:5d:c4:1a:6d:ef:a9:13:52:60:c2:c2:75:35:cf:b2:03:
         f7:4b:cd:26:d2:de:68:13:c8:d8:40:1e:3a:48:6a:35:d3:d8:
         09:8f:ca:7b:d6:19:b5:91:7d:fe:9d:83:19:95:7b:b4:53:6d:
         c8:92:d0:14:d3:e4:4b:9a:93:cf:51:77:cc:f9:76:54:ff:e7:
         60:e8:01:c3:b9:81:8b:ac:5b:13:2b:f5:35:48:4c:3e:0c:fc:
         34:4d:65:a0:ee:75:fc:1a:80:dc:b7:ee:ce:e3:61:cc:23:aa:
         92:5c:d8:fa:7f:b6:f5:81:0f:32:a0:a1:23:da:8c:5b:5f:7e:
         4e:96:9f:75:6a:94:8e:52:bd:6f:5d:47:f7:8e:f3:70:bc:13:
         d5:49:a6:6a:71:67:29:92:69:c0:6f:8f:02:41:8c:6f:0c:37:
         24:e4:cc:fe:9a:0a:51:d8:44:c5:8d:d3:a4:74:1d:c9:8a:cd:
         d6:a4:4b:84:33:2b:08:28:3c:84:8c:67:f7:12:b1:1d:10:99:
         79:4c:b9:f6:da:b5:a5:95:d2:2d:f1:b4:ac:af:ab:ef:04:6b:
         b2:e9:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:58 2024 by rpki-client on console-fra.rpki-client.org