Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File:                     vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier:          pVqYeqZvgClz9xt1ySEoSOJFq1nNoaBCvhoJHOdv40s=
Subject key identifier:   7C:0A:25:97:F0:2D:A8:B7:50:56:C9:AA:7A:2D:AE:AB:59:32:A4:61
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer:       /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial:       01901E5885BA49D18E8B760A48E1C91B75B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 00:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:36 +0000
Files and hashes:         1: MfoIK7Pu23nXy7BxdVnwUKlpK9c.roa (hash: Q7m0pw+Q/3jQOUQ/1TwSXgzB5gx2axAujJ4eeICMpIY=)
                          2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: x8c7rB9RPeV2Lt/XkCya5gwTZHW5eF22JIW0w66y7wM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:85:ba:49:d1:8e:8b:76:0a:48:e1:c9:1b:75:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
        Validity
            Not Before: Jun 16 00:00:36 2024 GMT
            Not After : Jun 17 00:00:36 2024 GMT
        Subject: CN=7c0a2597f02da8b75056c9aa7a2daeab5932a461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:03:dc:ab:e9:50:ae:65:8d:93:1e:3b:3b:
                    a3:8b:30:19:bf:56:92:61:16:d7:09:42:59:8a:c3:
                    b5:1c:4e:b3:e1:23:ff:87:e7:a9:2f:47:f4:a1:f1:
                    b7:f0:52:9c:2a:a3:8c:a8:b9:5a:d6:13:0a:6b:bf:
                    ef:6b:22:a4:db:fa:e8:9b:f3:c9:ac:c7:37:30:be:
                    0a:ee:76:04:49:99:94:4c:02:bc:f4:91:68:9e:38:
                    f1:04:a9:8d:63:ec:bf:29:1e:cf:27:60:d8:54:1f:
                    94:80:92:ea:19:3a:11:34:25:03:dc:6a:92:e5:f1:
                    89:58:5a:62:71:ea:fb:22:3b:04:fd:64:8a:2f:2b:
                    1e:8b:18:d8:df:ab:00:56:e7:02:6c:23:33:ce:46:
                    c3:8b:a9:13:70:f7:3e:92:e7:6b:e5:35:ed:c2:98:
                    0e:c2:13:08:39:9c:69:3f:47:c6:9a:06:d7:e1:50:
                    c6:70:94:79:85:93:09:23:42:f2:0f:12:91:6c:8e:
                    5b:3d:05:70:29:28:9e:64:ce:33:ff:3a:0a:36:30:
                    bc:41:8a:98:33:37:ef:12:1b:2c:62:4e:ce:3e:1c:
                    06:03:8a:cc:3e:81:96:b8:b3:99:8c:1f:e2:2f:81:
                    41:fa:49:a9:8d:90:d3:73:4d:9b:4f:aa:19:d6:35:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:25:97:F0:2D:A8:B7:50:56:C9:AA:7A:2D:AE:AB:59:32:A4:61
            X509v3 Authority Key Identifier:
                keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:47:95:96:3f:ec:05:b7:52:c2:ac:c9:45:2b:19:b9:18:9d:
         88:8d:8e:b3:0c:5a:2c:d6:98:ee:c8:15:d9:7a:40:d9:26:92:
         a2:2c:b4:12:22:39:58:a7:01:1c:ee:af:6d:1d:d9:0a:75:92:
         1d:b0:9f:25:e2:fa:64:ee:04:5c:b1:03:56:78:58:e7:51:11:
         b1:b0:92:81:0b:49:9b:f7:de:dc:50:f2:14:6e:99:a0:f9:79:
         1c:e0:81:09:cb:98:2d:7e:ad:15:07:1b:c4:8d:5d:21:9f:68:
         44:70:98:54:64:29:56:77:12:51:e5:ca:1c:2b:fe:35:3f:82:
         53:32:db:1f:2f:95:c1:6b:cd:19:52:be:d4:70:af:6d:21:8a:
         4d:2b:66:44:d8:35:f9:fb:1a:f6:4e:0d:ae:2e:20:3f:f5:bc:
         a1:03:e7:65:d2:dc:6f:c4:c7:48:a4:47:bf:f7:c4:c3:84:6a:
         12:56:d4:0e:a9:39:64:29:fe:da:61:10:98:1d:29:a7:f3:9a:
         02:f4:6d:05:b1:f5:5a:87:77:76:54:34:17:6b:da:cf:03:f6:
         e7:f6:02:0a:1e:13:8a:93:14:e9:1b:3e:d3:75:6b:4a:c2:6f:
         5a:33:97:04:d2:44:70:24:2f:ae:fb:44:8d:52:7b:c3:ea:f3:
         4a:d7:c5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:13 2024 by rpki-client on console-fra.rpki-client.org