Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File:                     M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier:          ncu5eg1AXbBDrg9uk46HH3xz14W5GV1ZvLGssM/IlEs=
Subject key identifier:   A9:29:98:CA:FE:CF:66:61:1E:BD:C1:84:91:63:19:D0:EA:74:D7:30
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer:       /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial:       019040B06590E39CABAE323C5ECC23C66EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number:          11D9
Signing time:             Sat 22 Jun 2024 16:03:40 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:40 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:40 +0000
Files and hashes:         1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: Absk3bYBx5nnpYr1zo45yO9hCtmThTVOsNftiaYHFtQ=)
                          2: cPBBL3VgyK-uzOK4q4Nlp1IYLOI.roa (hash: X9K+Wt8Sjqf/at0PZsDJh3E3xtwGr4SgqWpcInxkdpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:65:90:e3:9c:ab:ae:32:3c:5e:cc:23:c6:6e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
        Validity
            Not Before: Jun 22 16:03:40 2024 GMT
            Not After : Jun 23 16:03:40 2024 GMT
        Subject: CN=a92998cafecf66611ebdc184916319d0ea74d730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:eb:a9:b8:47:9f:eb:31:65:f6:87:17:61:
                    f1:4f:23:53:2f:60:0e:69:10:bd:f1:06:55:ca:10:
                    b3:47:66:c0:2c:85:3c:79:4d:d8:b1:00:e0:c8:33:
                    07:5b:2b:03:0e:70:d1:de:90:1f:4f:1a:88:a7:f5:
                    08:f0:c2:49:92:a5:f7:a3:a6:75:09:09:c1:c2:a0:
                    2e:92:fd:37:d5:d5:70:fd:34:d4:30:ca:1c:5f:16:
                    05:41:3f:e9:42:73:ce:c7:58:d2:51:8a:03:a3:52:
                    37:ab:48:97:5a:b5:81:f2:b0:c8:61:e7:aa:92:02:
                    64:12:03:43:32:86:a9:12:46:84:76:03:f0:5a:d4:
                    6f:9b:05:aa:99:41:b3:c1:a0:ed:e7:76:dd:68:af:
                    46:e7:c0:e0:fc:e8:1a:96:c9:5f:01:b4:e2:3a:1d:
                    7f:58:03:51:33:dd:df:00:5d:6f:28:14:5c:fd:7d:
                    b5:e9:bb:db:15:f2:78:85:aa:74:36:f3:3a:dc:f4:
                    81:33:b7:d2:f7:c7:05:9b:95:78:5d:86:38:53:a5:
                    27:d5:33:45:63:77:ee:b7:c6:bb:40:44:be:e1:96:
                    b5:52:7f:3a:66:a4:58:66:9e:a7:03:0e:65:62:ae:
                    12:da:b5:0b:b8:b2:e5:27:e7:a3:95:f8:1c:c2:23:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:98:CA:FE:CF:66:61:1E:BD:C1:84:91:63:19:D0:EA:74:D7:30
            X509v3 Authority Key Identifier:
                keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:40:af:84:41:f8:f6:17:3b:54:bd:fe:77:84:1c:37:90:7e:
         5d:87:54:80:79:73:75:18:53:34:8f:ac:77:4f:68:1a:a5:f1:
         fc:5d:a1:64:c5:af:78:7c:b1:a5:fa:fa:70:b8:6d:7e:7c:cb:
         39:0b:14:97:60:3b:ae:44:e4:f3:c8:7d:8a:f1:4c:28:95:cf:
         96:67:71:20:6c:4b:3c:de:bc:a3:31:e8:56:2e:f6:c2:3e:f4:
         c5:6c:07:52:11:98:63:2d:7f:45:bf:9b:25:5d:cc:af:d0:7d:
         9b:36:d1:85:a1:d3:a5:8f:f7:0c:3d:78:42:ec:1b:f4:d3:0f:
         87:04:a3:64:7d:17:79:7a:dd:00:28:1a:85:d4:10:a0:6a:5a:
         ac:19:f4:7f:33:e4:31:c2:b4:4f:5e:47:c3:72:30:4e:42:51:
         a9:45:fa:2c:2d:16:7f:54:f8:0c:21:76:16:3a:04:90:e1:48:
         24:a9:d8:b9:e2:f4:bd:2a:f1:da:77:39:9d:ad:b6:0e:9e:df:
         78:8e:17:90:8e:ec:59:a8:eb:e1:b4:08:9e:c1:00:54:f1:12:
         72:39:59:e8:d2:d3:e6:0a:7a:0f:80:21:00:4b:32:c0:f7:eb:
         ff:d3:3d:4e:60:48:04:3a:5d:ac:01:a4:b2:e1:a3:dd:1d:c0:
         20:d0:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:08:20 2024 by rpki-client on console-ams.rpki-client.org