Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File:                     vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier:          uyABmaRbWRFxKwTRNh+EWKyAiVXFTmzw+toSjEu9WLI=
Subject key identifier:   58:95:19:FB:49:4B:5A:AE:17:32:35:C1:6D:2E:4B:F6:1B:B9:3D:86
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer:       /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial:       01901BFD61BCC0482F376431CC4AA07323C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number:          0710
Signing time:             Sat 15 Jun 2024 13:01:48 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:48 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:48 +0000
Files and hashes:         1: 1tz66VRzT3ksgBHezpDP-dWydtI.roa (hash: 2aYx7cEdS5mEmOCtCGZr4szy4XXnCbKjEdXlmLb9uMQ=)
                          2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: xDXnbWuS800l4WCAv305Uzk/S8vO2ti+BWzqgRa1Ss0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:61:bc:c0:48:2f:37:64:31:cc:4a:a0:73:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
        Validity
            Not Before: Jun 15 13:01:48 2024 GMT
            Not After : Jun 16 13:01:48 2024 GMT
        Subject: CN=589519fb494b5aae173235c16d2e4bf61bb93d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:37:bc:20:6c:ff:8c:22:02:90:bc:c1:b9:
                    be:c0:b5:eb:bd:c7:ab:be:54:60:60:ad:e0:98:43:
                    cc:22:7a:44:45:fe:1a:94:29:0b:a7:91:29:50:40:
                    0a:e0:9f:5c:c0:4e:ed:d5:1e:61:7b:07:af:ec:02:
                    fd:45:00:7c:97:37:02:7c:ac:a5:63:5a:bd:1d:a6:
                    36:b8:a4:1d:35:36:1a:40:69:cd:8b:7b:d7:d9:1e:
                    87:62:07:00:56:a0:72:77:da:47:c4:b7:f6:cd:1d:
                    06:84:82:75:44:f7:6f:80:fb:a4:48:26:94:b0:35:
                    54:15:49:c0:3a:13:4a:99:27:0a:0f:96:1a:92:3d:
                    85:1f:ae:e0:54:71:d2:e2:6b:0b:bf:db:af:c3:4e:
                    00:d5:cb:92:af:6f:c5:bb:37:02:0d:36:60:00:40:
                    4c:18:f2:c8:8e:32:88:c7:c5:12:07:54:17:a3:3f:
                    ec:cb:53:41:e9:84:51:9a:16:a6:2f:e7:e7:39:20:
                    78:d0:80:af:fa:1f:0a:a8:9a:5f:66:6c:b9:58:5d:
                    0e:67:be:39:cb:36:da:9a:db:95:1e:d3:4c:00:4b:
                    76:d3:0d:f5:0a:81:19:39:2f:5c:b4:46:a9:e3:49:
                    96:7d:55:41:8e:c7:ed:5a:2c:5a:93:f5:3c:b9:8d:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:95:19:FB:49:4B:5A:AE:17:32:35:C1:6D:2E:4B:F6:1B:B9:3D:86
            X509v3 Authority Key Identifier:
                keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:5b:78:44:67:40:93:9a:8b:f7:c1:db:4c:0c:7c:c9:cf:
         59:4b:da:ca:7c:64:06:b3:8f:d4:8a:28:1c:66:81:3a:2c:a5:
         47:fb:cd:5f:73:27:18:5b:1f:8a:7e:8b:d7:fa:74:d1:99:31:
         66:e9:d7:5b:01:74:f6:6a:cc:eb:ca:61:e9:db:68:79:4e:c4:
         27:6d:88:65:41:7e:11:39:5c:53:f0:a1:52:dc:d7:d6:66:82:
         96:1b:eb:1f:31:9b:b0:79:af:ea:d2:3b:66:0f:ec:9a:5a:45:
         54:33:f5:2e:71:72:42:09:f9:3b:42:13:d1:35:d5:28:57:62:
         29:cd:a6:fa:fa:7b:93:bf:f9:a6:54:97:ed:43:10:76:92:87:
         75:47:88:bc:ff:1a:de:6e:48:db:46:0b:63:ba:30:93:7c:1d:
         22:09:fa:0d:c3:eb:33:b4:be:f3:d0:37:ec:b7:aa:e8:1d:22:
         ec:71:73:9e:56:57:3d:79:65:28:1c:cc:04:14:d3:94:d7:b6:
         b6:58:c5:5d:89:48:0f:75:65:26:a6:6a:41:b2:6c:07:dd:b6:
         ca:ac:6c:df:83:f9:9a:85:a9:a1:ec:a9:4a:1c:69:2b:4f:20:
         21:eb:40:08:9e:39:4d:ca:6c:72:ad:eb:11:4f:b4:b6:65:27:
         d3:cb:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:53:38 2024 by rpki-client on console-ams.rpki-client.org