Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File:                     L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier:          5AcfK2lSO/1SwelSca5bxTuRHrslX5YPZmKcHMyiZtw=
Subject key identifier:   D5:22:3F:7D:D4:7E:C4:E2:D0:C1:CF:49:CB:2C:C8:96:33:F5:FE:E5
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer:       /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial:       01901E8FE57060E55DAE2F7B0D622E6F9EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number:          0922
Signing time:             Sun 16 Jun 2024 01:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:05 +0000
Files and hashes:         1: 5CAKk40p2qMDTCYl-QjwfnPsY4Q.roa (hash: 6o58+1OBY8266SUDwKwnNfBZEDG2i/QHz8JHYPPno8I=)
                          2: 6egCtY-8LA351KlVfm3WZnEff-4.roa (hash: gbnQHttS3xThBobapc4Si0z0H5tnqlCE+ppNlvur92Q=)
                          3: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: LpawPBByINn18CV3JbH0IRJAIaWU0m+e2Ak2RRSlGpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e5:70:60:e5:5d:ae:2f:7b:0d:62:2e:6f:9e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
        Validity
            Not Before: Jun 16 01:01:05 2024 GMT
            Not After : Jun 17 01:01:05 2024 GMT
        Subject: CN=d5223f7dd47ec4e2d0c1cf49cb2cc89633f5fee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:d2:74:b5:74:d0:3e:f0:74:ff:a6:c9:37:
                    44:72:91:c7:26:3e:ad:79:4d:8c:97:4b:c0:23:a5:
                    54:9a:3b:54:34:26:17:76:9b:a5:df:2e:68:40:26:
                    44:1d:62:e0:5f:b4:47:c4:93:48:ca:dd:c0:56:e6:
                    20:f1:d6:5d:58:67:c9:fa:7c:9c:e8:b2:a3:01:62:
                    3a:16:73:67:0a:c2:a7:91:7d:25:15:10:f6:d6:4d:
                    c9:74:1e:d6:33:01:1c:ac:ba:04:73:b1:62:bb:31:
                    86:73:df:41:7b:a3:ba:75:3d:a4:da:47:4e:f1:b0:
                    f3:56:1b:eb:f2:77:6d:47:73:a1:66:7e:46:01:6b:
                    ff:62:cc:6c:56:6c:47:fd:f0:89:58:e3:57:59:7c:
                    8c:e3:2a:6f:da:4e:31:60:e0:dc:58:d9:c2:50:03:
                    26:2f:e8:74:c0:9b:dc:41:35:70:32:c0:0e:87:e5:
                    85:a7:1a:6f:3e:bb:68:39:98:ea:9e:3a:7d:94:62:
                    27:a7:74:09:23:74:25:64:ce:b7:54:f7:f6:6f:ce:
                    ab:b6:64:10:66:8e:81:de:88:e0:86:f0:a4:13:1f:
                    a8:4c:95:ab:7f:ab:a5:3e:70:32:1a:40:ed:fe:c6:
                    f6:d0:47:00:93:ac:35:97:b2:73:81:bb:22:3e:51:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:3F:7D:D4:7E:C4:E2:D0:C1:CF:49:CB:2C:C8:96:33:F5:FE:E5
            X509v3 Authority Key Identifier:
                keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:80:83:4d:52:56:62:f3:ef:05:a9:d0:4e:6b:01:e7:41:e2:
         8a:af:a2:a1:cf:7c:db:7d:74:4c:e2:9c:db:bc:7b:36:0a:d2:
         66:60:1b:fa:35:99:3a:33:62:42:76:49:28:d9:c7:f1:10:9b:
         96:47:34:50:12:42:76:17:d5:9a:e7:cd:c9:a5:26:47:dc:53:
         77:65:de:92:2e:1a:24:da:f5:eb:2b:92:0c:fd:c2:68:b5:34:
         b3:80:ae:7a:8c:5a:5f:27:89:05:e1:13:26:36:bb:8e:f3:1c:
         48:bf:ae:79:81:7d:c6:24:b2:73:81:0b:ac:48:4f:38:ae:fd:
         65:bf:1f:dc:a7:e4:30:d3:1a:1d:14:c3:c4:62:eb:8d:f2:a6:
         1c:43:b0:ea:38:66:93:71:b5:12:a4:57:d4:28:90:6b:c4:4b:
         d6:2d:a8:f0:7d:90:27:c2:e0:91:9f:c3:b6:29:04:b9:0f:a6:
         94:d4:6f:1b:02:41:5e:85:f2:ac:bc:10:35:6b:cc:4b:8e:4c:
         6b:4a:25:d6:74:36:51:56:cd:2f:a3:33:4c:58:95:d2:fd:0b:
         2d:80:82:c8:41:74:c1:ae:fe:7e:5c:ae:23:ed:f7:dc:74:57:
         ac:98:f4:de:f9:db:89:60:36:0a:59:ee:15:67:26:d7:29:b9:
         f9:90:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:07 2024 by rpki-client on console-fra.rpki-client.org