Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File:                     M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier:          J797nQ1XhCzJoLFAIZLFCDs6E8EzLx/s++8F4Frvlqo=
Subject key identifier:   64:79:6F:4A:79:4F:EB:D7:54:CB:08:91:55:94:B7:61:DA:0B:62:6C
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer:       /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial:       01901DECAFAFDBCC14454F1F9CD813423217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:02:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:49 +0000
Files and hashes:         1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: AfwyYcNkvaqitD7Zxo9b564n73erj8KFMz8MdZQM2qg=)
                          2: cPBBL3VgyK-uzOK4q4Nlp1IYLOI.roa (hash: X9K+Wt8Sjqf/at0PZsDJh3E3xtwGr4SgqWpcInxkdpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:af:af:db:cc:14:45:4f:1f:9c:d8:13:42:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
        Validity
            Not Before: Jun 15 22:02:49 2024 GMT
            Not After : Jun 16 22:02:49 2024 GMT
        Subject: CN=64796f4a794febd754cb08915594b761da0b626c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:ac:f6:1c:c7:d2:e8:de:2d:43:06:9c:95:
                    82:ce:70:de:2f:7f:e8:60:b2:ce:c8:3d:30:aa:69:
                    a0:33:51:d3:1c:69:eb:d3:42:44:d6:24:ee:29:fc:
                    b9:82:24:b3:87:7e:d6:93:5d:c9:cc:86:32:67:24:
                    2f:87:7a:6e:fa:39:c1:dd:71:3a:0c:b6:37:63:ac:
                    2e:16:13:42:a6:be:52:13:50:17:60:1f:63:83:4b:
                    32:e8:6c:93:30:c4:f3:2c:d7:46:06:00:6c:72:77:
                    07:06:88:d3:01:72:e3:ac:25:71:30:e9:85:01:e4:
                    f8:d1:81:fe:40:05:34:6d:60:bd:b5:6b:88:c7:01:
                    61:69:5a:f1:b8:ac:a8:cb:20:aa:46:13:c0:66:8a:
                    a2:d6:90:ec:16:5c:8f:2c:8d:92:3f:1e:d3:ea:73:
                    67:12:c0:54:a7:a7:16:82:3b:c3:eb:83:69:a1:62:
                    70:49:18:85:6a:28:e0:8d:95:45:af:18:95:6a:6c:
                    36:c3:84:0c:c0:47:d6:b1:7b:2f:21:ca:65:33:45:
                    54:68:cc:cb:6e:20:15:77:44:d4:cd:3c:e0:80:de:
                    f6:5f:52:32:c4:27:95:19:a1:c0:ca:cb:77:b8:90:
                    22:64:43:97:a6:f2:0d:96:15:f4:0e:cc:1e:ba:0f:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:6F:4A:79:4F:EB:D7:54:CB:08:91:55:94:B7:61:DA:0B:62:6C
            X509v3 Authority Key Identifier:
                keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:b2:e9:f7:05:64:15:c6:ec:0f:42:e2:a6:97:e6:77:59:
         1d:8e:7d:19:e0:32:9a:a3:ef:a2:5a:d2:5c:5a:f0:3d:61:a9:
         bd:50:4b:22:f7:33:2f:23:22:f6:fa:e0:c8:68:f2:94:48:82:
         7c:8a:a0:93:0e:32:e8:ae:d5:f4:4e:b5:0c:d2:8f:2c:1a:ce:
         36:68:57:e5:e6:8a:a0:fc:d3:90:e1:fb:25:2b:64:6b:8e:d6:
         30:83:e1:fc:1d:ca:16:91:50:0b:dd:3f:90:0f:d7:1c:85:c8:
         d7:c1:44:bf:34:9b:7f:b7:e6:b8:81:23:74:fd:50:15:6e:94:
         68:4a:05:48:81:e4:d9:e8:67:8d:e3:b8:6e:3a:3d:41:77:a0:
         5f:9e:65:0a:7f:12:be:5a:cf:38:b8:be:b7:ce:f5:b0:e6:4a:
         17:db:a0:64:3f:73:5b:fd:03:a5:d4:fd:e4:e3:95:61:97:0e:
         5d:92:36:82:57:be:5d:15:24:c5:82:a5:e9:fb:35:ce:e1:28:
         bc:4a:f3:65:ff:57:b6:ce:14:a1:2f:67:06:7d:5d:66:45:9c:
         95:28:a2:9a:62:6a:0b:4f:df:c8:c0:b3:aa:f0:d1:e3:0c:1a:
         4a:ad:27:f1:4e:04:a7:30:0d:cd:97:1d:f0:b5:b8:2f:75:16:
         2e:93:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:03 2024 by rpki-client on console-fra.rpki-client.org