Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File:                     hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier:          F2GmgESL9EStf0bJw6i03pokhpMQ6A7GLZr/a9RuW5c=
Subject key identifier:   43:B7:C7:16:38:02:E5:6D:19:9A:B6:DC:05:9C:67:AD:42:D2:D7:93
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer:       /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial:       01901F34D8E2A7D47F7ABD9CD5F00F76CED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number:          1195
Signing time:             Sun 16 Jun 2024 04:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:15 +0000
Files and hashes:         1: cZ1U3KVI3FmDVNwyu0VE8FUehmQ.roa (hash: eKBBNnsalQEcZYUUZLrsVLG/GIDZJ0S0NSFkhiLb3cI=)
                          2: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: /IVXgiRQ/GXQjy2zpJ9b5GW38lxpEUV+BJ3N05tVmIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:d8:e2:a7:d4:7f:7a:bd:9c:d5:f0:0f:76:ce:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
        Validity
            Not Before: Jun 16 04:01:15 2024 GMT
            Not After : Jun 17 04:01:15 2024 GMT
        Subject: CN=43b7c7163802e56d199ab6dc059c67ad42d2d793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:82:73:92:c4:7b:32:39:eb:00:1f:dd:32:
                    44:83:e9:bd:79:1c:a5:56:7c:e9:52:46:d2:3f:ec:
                    06:0d:e7:06:d0:13:8a:f5:45:0f:93:92:50:84:f7:
                    e5:b1:7f:e0:21:95:01:0e:eb:bd:85:f5:55:2c:f4:
                    c1:12:0c:09:6a:86:4b:46:0a:24:6f:d2:a5:a5:cb:
                    24:b6:a7:d6:ae:27:3f:40:54:b8:2f:2c:20:76:48:
                    48:57:72:e5:62:5b:f1:1d:76:8f:f9:41:f8:c1:9c:
                    5c:6b:1a:8a:71:c6:69:73:b5:92:20:4a:81:33:5f:
                    41:d6:8a:27:91:bb:52:d3:ca:9a:82:85:5c:b4:23:
                    73:32:aa:e7:cf:58:e7:a5:cc:44:3f:51:98:9c:d2:
                    c7:9d:71:df:ed:20:37:e5:79:01:8a:86:d4:cc:c0:
                    32:26:c6:60:f1:a1:e4:cb:ba:40:f7:2d:76:0e:d5:
                    65:a2:84:6d:1c:7f:f7:29:ec:9a:6c:04:ef:85:a1:
                    50:6d:6b:a0:c9:ea:4d:fd:4f:13:1b:86:5f:28:0e:
                    1a:fc:6d:31:c6:7e:5e:41:d4:98:0c:98:9f:cb:85:
                    95:f8:4b:c6:3b:1e:fd:d2:5c:48:75:3a:a3:8e:d1:
                    1a:48:a4:90:8c:93:b9:c1:2b:37:79:2c:ac:df:d1:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:C7:16:38:02:E5:6D:19:9A:B6:DC:05:9C:67:AD:42:D2:D7:93
            X509v3 Authority Key Identifier:
                keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:fb:7f:04:67:8f:4a:19:f5:21:da:3f:c5:ee:11:ff:9c:38:
         d7:c8:ff:65:e7:3e:88:82:8a:1a:e4:49:93:03:c9:c4:2d:49:
         41:d0:66:99:f0:c3:e5:29:23:c2:44:92:a7:38:3b:db:58:de:
         5d:f3:e5:b9:97:1a:b3:f1:c6:fe:5a:5d:c0:60:20:39:91:d5:
         41:e8:8c:f2:d0:53:41:b1:89:61:e7:17:ef:69:54:e4:bb:af:
         b5:a3:a7:6d:6a:3c:35:4b:29:30:30:40:df:40:07:4f:1d:d8:
         c8:ba:72:34:03:40:96:85:d2:6c:38:08:8b:d8:ab:6f:61:d3:
         e3:67:a1:2e:13:04:4b:72:ed:d9:64:6a:89:90:ec:50:5d:b8:
         4a:bb:c9:36:72:88:c3:df:39:cd:20:b9:89:c6:51:fa:db:ea:
         64:f4:11:7a:c2:1c:67:79:41:b0:13:15:54:0c:05:39:c3:b3:
         c4:0d:92:6f:01:16:16:78:38:78:45:55:8f:b2:df:14:91:ce:
         7a:0b:97:91:68:dc:09:f7:6a:04:05:fe:48:9b:d6:d0:81:2d:
         13:b6:2e:73:8d:98:88:6b:1b:39:fe:77:77:77:56:fe:13:8e:
         0d:af:9c:86:5b:dc:87:11:a6:ef:a6:f8:89:65:7b:8f:52:e8:
         7a:1b:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:29:50 2024 by rpki-client on console-ams.rpki-client.org