Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft
File:                     9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft (raw, json)
Hash identifier:          XqxHd/PFPFAt9yhjttg5LJkeAIf4RXZDZO0cUDm3nEw=
Subject key identifier:   12:DD:1E:CA:8E:C6:82:8F:E2:12:AB:EE:F9:98:7A:97:29:37:3B:87
Authority key identifier: F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC
Certificate issuer:       /CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
Certificate serial:       01901D0F26C2A4B2EFF746D3AD005D13DD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft
Manifest number:          0F4B
Signing time:             Sat 15 Jun 2024 18:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:50 +0000
Files and hashes:         1: 9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl (hash: zuHvey9wxedYpyPMqqMWzpg0/aBzCSPgpSFLBHXG6xk=)
                          2: spxBFrRTXksX8fvfc0dXhGkhiwE.roa (hash: n9jU/0B6fjkLFx2dvO1H12A4sA1hG6j4sPdVGTQx1Ss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:26:c2:a4:b2:ef:f7:46:d3:ad:00:5d:13:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
        Validity
            Not Before: Jun 15 18:00:50 2024 GMT
            Not After : Jun 16 18:00:50 2024 GMT
        Subject: CN=12dd1eca8ec6828fe212abeef9987a9729373b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:84:59:b2:ae:db:23:c3:5d:ad:a7:84:59:
                    ae:60:19:60:5d:29:3d:eb:11:e4:c4:19:63:10:87:
                    0b:b3:b7:e5:d6:f6:50:ca:f3:b1:25:b5:2b:8f:ee:
                    f3:4b:8c:05:1c:53:81:1c:2c:fc:cf:54:07:89:21:
                    b8:e7:e8:38:44:67:e5:fe:1a:20:9d:c2:08:d0:67:
                    3b:b1:d7:25:12:7c:59:4b:98:4a:79:dd:05:92:1f:
                    de:07:73:9e:89:73:9d:1a:b8:d3:56:78:b8:7a:69:
                    00:d9:c7:5f:9c:c8:5d:67:05:20:03:a3:b8:2d:17:
                    1c:df:67:dc:bd:5d:5b:31:ae:71:fd:be:cb:36:b4:
                    e2:db:5e:25:b5:f4:a7:46:96:66:55:f3:ee:76:5e:
                    3f:03:60:5a:b1:7c:0c:19:59:8a:b9:3c:75:3f:e4:
                    b8:28:41:2f:2d:e2:12:af:dd:6a:50:e6:dc:00:63:
                    69:ce:72:e8:6e:ff:8f:d6:4c:ba:6a:87:00:b8:5a:
                    d5:8c:23:d7:f5:fc:11:9c:52:dc:b2:09:67:0c:6f:
                    d2:f8:e1:33:65:41:52:e1:12:44:c6:72:2c:69:9d:
                    89:9f:24:6e:a7:05:25:5c:ef:32:3f:44:8f:db:9d:
                    f4:5d:0c:97:b5:17:05:ef:cc:b5:de:dc:f2:5c:78:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:1E:CA:8E:C6:82:8F:E2:12:AB:EE:F9:98:7A:97:29:37:3B:87
            X509v3 Authority Key Identifier:
                keyid:F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f9:ed:6d:01:0f:37:96:60:83:65:64:40:fd:df:2e:0b:47:1e:
         45:0a:66:df:d3:ad:da:32:d0:e7:23:17:62:1a:ac:82:1a:a3:
         2c:3e:90:a1:1f:75:68:20:30:f3:1a:03:55:3c:c4:02:f8:04:
         13:1e:c9:1e:e7:70:d2:77:e6:f0:6d:e3:93:63:69:3d:82:c2:
         d8:3a:7f:66:c0:6b:e9:04:61:9c:7c:02:3c:cb:4b:68:3a:3c:
         e0:28:13:39:19:bb:3b:43:1e:f9:55:72:bc:cc:21:e4:7e:98:
         91:4c:55:39:9f:4f:77:77:bc:16:8d:b7:c3:83:f1:b7:e7:07:
         a0:5a:eb:81:fe:06:02:ee:40:18:8d:3d:4f:74:e7:ae:f9:4f:
         ae:71:d4:9b:52:ed:ff:a2:46:a7:00:2f:7c:50:0f:2a:e9:68:
         a7:0b:b5:9d:aa:59:2b:f9:b2:6a:35:bc:60:88:7a:f4:91:71:
         99:16:4d:14:16:74:49:88:0d:99:5d:8d:9c:c2:d8:59:21:c4:
         15:ea:c5:07:09:a0:1d:7a:d9:95:72:e8:76:47:bb:38:9c:5f:
         79:da:8a:cf:b3:19:11:51:89:d6:9b:71:27:ee:98:67:40:92:
         6d:c5:c5:5b:ef:53:be:33:4c:5d:50:7a:f8:a6:d7:55:66:8e:
         7d:cc:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:03 2024 by rpki-client on console-ams.rpki-client.org