Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier:          8WDS66k6vXShP0fp88celyxZp9/dzbpgYfIxMne5cH4=
Subject key identifier:   D2:CA:49:B2:CF:61:8B:82:80:78:E5:33:51:2D:CC:67:51:43:EF:22
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer:       /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial:       01901BFCC5A952019AA8AC0F0D457B06D0C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number:          0260
Signing time:             Sat 15 Jun 2024 13:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:08 +0000
Files and hashes:         1: kwSvI56IlFWybpzO1z-SpKL9Uao.roa (hash: kM6WLK0XXkcxHuk7IYES7eXQU5roKTiPKfln0TDlKI8=)
                          2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: 4aP2eCcN8jNAebVHTVUQUx0jEfTTVHJVCa5F9r2SBB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:c5:a9:52:01:9a:a8:ac:0f:0d:45:7b:06:d0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Validity
            Not Before: Jun 15 13:01:08 2024 GMT
            Not After : Jun 16 13:01:08 2024 GMT
        Subject: CN=d2ca49b2cf618b828078e533512dcc675143ef22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:21:c7:06:3e:4f:97:1c:8f:f2:f6:c3:e4:
                    8a:b0:12:a0:96:e2:de:6b:ff:2c:7c:3f:f6:61:09:
                    f1:37:bf:92:9c:ea:2e:57:62:5f:ed:a1:e1:cf:86:
                    cf:49:30:ab:dd:91:a4:35:3f:8c:bd:04:0f:99:bc:
                    04:62:73:58:2f:e1:ec:37:41:e4:27:2d:3a:40:e7:
                    46:e6:32:27:77:2a:a1:2a:df:e3:05:3a:3f:ca:5e:
                    91:35:0c:4b:84:19:f6:b8:f9:ee:b5:12:c8:01:2f:
                    89:e0:07:1e:4d:d2:fe:f5:16:41:cb:78:02:35:7a:
                    b7:5a:5f:c7:16:97:fb:80:a9:ff:4a:e7:97:7f:f0:
                    2d:81:fd:ce:8a:d9:58:f6:0b:2d:25:7d:92:09:a3:
                    37:bc:16:8c:e0:04:ed:18:cd:59:0a:1d:47:42:ad:
                    74:f8:7e:b2:fa:94:79:32:e8:8b:cd:17:77:a5:af:
                    75:df:ad:81:bf:cb:4e:49:9f:32:7a:93:8d:71:91:
                    96:aa:1a:ab:f8:33:66:8a:8b:5f:bf:ae:b2:bb:67:
                    6f:81:e6:2f:a1:4f:0d:0a:25:2a:a4:f8:dc:fb:30:
                    2c:7c:33:58:03:8f:19:d9:28:0c:6f:cd:bc:0a:a3:
                    2c:b7:54:d6:13:39:84:7a:75:9c:d5:81:3a:5f:f6:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CA:49:B2:CF:61:8B:82:80:78:E5:33:51:2D:CC:67:51:43:EF:22
            X509v3 Authority Key Identifier:
                keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:cd:78:65:e6:9f:82:7f:7a:31:4d:f7:59:2e:d1:f3:ff:
         a1:8c:9f:f6:57:00:65:1a:40:a6:89:15:04:3f:22:a8:cd:aa:
         85:87:2f:13:69:40:13:67:97:12:9e:20:36:ea:88:e6:a7:0b:
         10:9b:f8:7e:61:cb:4d:02:f1:0c:43:6f:d2:d0:69:71:37:d1:
         1f:38:24:da:07:1c:55:a1:64:33:97:d8:08:60:57:c0:6e:58:
         3a:56:8e:47:2f:85:2b:ed:48:65:f1:ec:88:15:4a:8f:41:4f:
         ee:0c:c1:6e:4e:00:44:bf:36:4e:78:c8:fe:40:9a:11:3b:5d:
         c8:5b:f9:0f:5a:69:fb:f0:11:f5:3c:db:c9:ea:cb:40:47:8a:
         59:d9:ad:63:21:93:00:98:11:8a:bc:54:9d:06:1a:62:57:a7:
         0a:c0:e9:fe:13:4f:0a:e2:8d:86:5a:9a:eb:5f:5a:97:8d:f7:
         6b:e7:9b:12:69:83:df:cf:ef:ba:1e:17:c9:e5:eb:d9:ea:55:
         28:cd:1c:e6:d0:10:b4:09:f1:08:5e:7f:f7:2a:fa:7c:ba:25:
         24:10:dd:f8:b3:2f:03:79:37:55:78:34:1f:41:1a:6d:9d:a6:
         31:5e:f3:bb:b9:8d:b5:9a:90:0c:6e:5d:ee:7c:62:cb:5a:a0:
         4d:cb:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:53 2024 by rpki-client on console-ams.rpki-client.org