Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File:                     IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier:          ejUjbm2Ylrk855V6N2avUh1GTlUikzv/iezrAlepA+Q=
Subject key identifier:   75:B4:84:D2:48:21:15:29:A5:55:07:65:B0:1E:4F:8E:09:DE:9B:9E
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer:       /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial:       0190441C7A9AC7778F983536BF9A70F1AAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number:          01A7
Signing time:             Sun 23 Jun 2024 08:00:35 +0000
Manifest this update:     Sun 23 Jun 2024 08:00:35 +0000
Manifest next update:     Mon 24 Jun 2024 08:00:35 +0000
Files and hashes:         1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: a7hkJHHelKbHzfgUNi2MTsIGYPqppRNXSpeH9Ap9UpA=)
                          2: OZOU13jxcHSCna7NVq8NZj7z7Z4.roa (hash: OxTt22B22xpUgD98Fu864uaTHI8JlLlmqte20gDmtEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:1c:7a:9a:c7:77:8f:98:35:36:bf:9a:70:f1:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
        Validity
            Not Before: Jun 23 08:00:35 2024 GMT
            Not After : Jun 24 08:00:35 2024 GMT
        Subject: CN=75b484d248211529a5550765b01e4f8e09de9b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:85:46:80:97:ae:60:2a:65:65:e7:77:23:
                    4e:3d:f0:7b:c3:4d:91:80:62:e9:09:1c:10:51:3e:
                    25:94:9e:c3:39:3e:1f:d9:d1:93:17:b8:ab:81:21:
                    69:50:e4:8d:a9:da:54:16:df:6b:7d:35:dd:49:48:
                    82:f8:70:0a:56:92:a3:87:65:eb:f8:a5:09:32:07:
                    6e:25:56:83:55:b0:d2:d0:5e:40:36:97:61:86:3e:
                    ea:27:cd:cc:b0:a0:b6:96:b1:6c:6b:37:15:ad:da:
                    a7:50:14:41:08:d0:6a:14:a4:34:65:ea:ae:78:4d:
                    1c:ac:14:8a:86:47:5a:8e:8e:52:cb:17:f3:11:f2:
                    63:70:16:37:aa:c1:b3:65:9c:5d:42:b6:61:0c:09:
                    d8:a5:91:61:a7:fe:54:c6:26:e8:bd:3c:40:ba:e3:
                    33:ff:18:30:41:1d:c9:e8:5a:a1:bb:16:3a:d9:83:
                    73:bd:b3:71:7b:ee:09:be:7a:9e:09:36:ae:f8:a3:
                    b3:df:e4:10:84:35:43:06:26:fd:00:6f:1f:95:af:
                    06:7f:d3:46:87:98:79:9f:3d:b1:12:d9:12:3f:dd:
                    3d:e1:a3:bd:f2:09:43:c7:6b:5f:08:0d:b1:17:10:
                    18:12:a7:a6:05:3a:32:d1:e3:df:da:d4:b1:a4:b8:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:84:D2:48:21:15:29:A5:55:07:65:B0:1E:4F:8E:09:DE:9B:9E
            X509v3 Authority Key Identifier:
                keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:d0:f6:77:6d:7f:d2:c7:5a:6d:56:ba:0c:7c:b0:f7:8b:c3:
         20:79:bb:7d:84:8e:2f:83:be:6e:4e:82:1f:ed:69:41:b0:5a:
         35:be:f9:2b:1b:14:a5:ba:cf:1b:5c:4f:b3:8b:c8:1e:6b:43:
         fe:0d:3c:c9:63:a7:76:f9:09:4a:ab:99:c2:5b:2c:9a:2e:18:
         e7:ac:7b:5b:01:cc:fe:34:0f:05:a7:dd:6a:33:fe:6e:ee:02:
         fb:a7:7f:bc:93:51:92:23:12:fc:a0:20:3f:6b:b8:d0:5d:f6:
         af:ef:ac:74:0d:ca:15:54:a4:b5:bd:6d:ae:7b:46:a6:bf:d0:
         40:14:43:fb:40:dd:35:25:b5:04:02:60:c4:a4:36:e0:6d:10:
         4c:a0:b1:bb:36:fc:57:12:ca:38:fa:5a:7a:c3:97:3f:29:da:
         cf:ee:68:b8:dd:2b:98:b7:aa:f9:d4:d2:17:4a:ad:55:e9:5c:
         e6:b6:77:76:f4:7c:8f:8d:e4:3c:16:40:79:01:ad:54:1d:34:
         36:25:4f:4c:df:fd:a6:0f:f2:a9:b2:22:22:01:ec:63:84:43:
         96:74:6c:35:12:a8:cd:57:c3:21:e4:b5:46:9f:4d:a6:d9:97:
         e8:54:25:46:09:b8:24:ea:4e:a0:93:de:79:16:c0:14:5e:92:
         16:81:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:29:48 2024 by rpki-client on console-ams.rpki-client.org