Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File:                     lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier:          Ukd/qanSuxdsb0ezPKUBNL9qOuq+rIRTf2226NJSiKU=
Subject key identifier:   92:56:E7:D6:5C:33:AE:30:67:66:FD:4E:F6:4E:96:F1:4F:10:54:79
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer:       /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial:       01901BC551C9A23613E03C515FED2A207B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number:          0646
Signing time:             Sat 15 Jun 2024 12:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 12:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 12:00:34 +0000
Files and hashes:         1: IsXlJVr4hClOkJL-3vmF95s6rec.roa (hash: f7ariwQoc3hUPsiD3EeDf1kwHLpX2QdwswTREcD7/zA=)
                          2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: S6kAbJu2hhPAIhIDsl+BClwcyLQqn5r/00ImnddbSSg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:c5:51:c9:a2:36:13:e0:3c:51:5f:ed:2a:20:7b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
        Validity
            Not Before: Jun 15 12:00:34 2024 GMT
            Not After : Jun 16 12:00:34 2024 GMT
        Subject: CN=9256e7d65c33ae306766fd4ef64e96f14f105479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:d8:97:6a:b2:ac:9c:92:d6:d9:ca:42:0d:
                    ff:b2:e8:96:6d:aa:b7:c8:14:26:16:fd:f9:27:82:
                    4a:3a:8a:0e:1e:a6:39:60:b4:ea:83:39:b5:a6:f4:
                    b9:0d:e6:5e:f5:d8:53:26:fd:6a:32:d5:00:42:18:
                    98:86:b2:d6:8c:5a:21:75:0e:8a:fa:b2:72:26:c2:
                    a5:10:96:37:98:2b:ff:8b:6f:70:43:76:bf:16:d4:
                    d7:57:f0:44:80:26:39:d2:86:53:f6:3d:f6:b4:a2:
                    b4:bb:d9:5b:52:eb:a1:cd:c7:ff:30:9a:2c:78:14:
                    b2:02:70:dd:4c:75:e5:7b:93:7c:de:ee:e9:15:92:
                    01:18:fe:9e:c5:c9:95:5e:19:aa:09:eb:8b:4e:5a:
                    cb:33:d7:a2:34:ff:58:13:aa:69:30:68:ec:9e:71:
                    8a:e9:f0:d0:02:4f:9c:c0:65:a1:2d:4e:ed:1d:dc:
                    c8:3d:23:53:75:67:30:c9:20:48:d0:71:4d:49:ad:
                    56:3d:dd:79:ce:dd:8d:fb:05:e7:08:36:63:2b:c9:
                    36:0c:2d:9b:c8:d9:6e:30:25:7a:0f:41:d9:24:e0:
                    84:c1:5a:5d:fa:8b:6d:28:e6:b0:52:f5:00:07:f5:
                    f3:a1:53:b7:f3:b3:e5:62:e4:3a:fc:4b:cf:4b:48:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:E7:D6:5C:33:AE:30:67:66:FD:4E:F6:4E:96:F1:4F:10:54:79
            X509v3 Authority Key Identifier:
                keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:04:13:cc:c3:83:d4:00:06:d5:e9:3b:9e:61:68:ae:65:
         13:f9:a6:d5:86:cd:d2:9a:d3:c0:50:b0:8f:34:5f:20:d8:3e:
         49:1c:b8:4f:8a:f5:1e:7d:92:6d:a5:e3:f4:a6:4b:4e:a2:cd:
         2a:2f:e3:f6:81:37:e0:cd:a7:5b:6b:9f:fa:78:f9:86:98:4c:
         ca:9d:d0:c5:03:bd:a9:60:70:4f:85:06:81:9a:fa:e5:4b:79:
         82:32:da:a0:2a:c9:52:6d:ff:8d:e1:a9:0e:0a:49:f9:1c:1d:
         e8:5c:fb:12:cd:db:36:28:5f:7c:69:5f:56:1a:45:b1:75:1c:
         76:01:11:82:2b:8d:3d:a7:be:91:b0:09:d6:fb:e3:cb:55:83:
         17:3d:b5:13:65:88:cd:a9:27:b0:eb:bb:09:d0:9e:d3:40:88:
         c3:8f:77:37:6a:42:19:01:c7:74:e5:b6:0b:12:bb:eb:18:18:
         11:d6:36:9d:6d:99:ea:bf:8f:c4:ca:fa:ed:4a:4f:81:4c:89:
         ae:44:c1:75:cc:63:78:4e:ef:af:32:89:b6:95:2d:c7:ed:5e:
         c8:1b:68:d3:d1:0b:49:9f:06:a3:96:aa:b7:36:e4:b3:c2:1f:
         d0:d9:6b:f0:3f:bc:11:21:e1:6c:8c:11:41:0d:9f:d5:c2:f5:
         0f:b0:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:50:24 2024 by rpki-client on console-ams.rpki-client.org