Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File:                     Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier:          YNgyvDpQN+MMVuMehGGo2ReIL2VLY6Tt5MDOAaEmGeg=
Subject key identifier:   E3:3F:82:BE:33:B0:27:AA:48:42:F2:D6:97:BB:CC:91:C3:44:EA:B8
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer:       /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial:       01901E8F6F6B1881B179ADAC403882C55608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 01:00:34 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:34 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:34 +0000
Files and hashes:         1: 1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa (hash: NUzkXeHHw+jseVHTZ65/J6ZpBY1QV8EwfoPNhS+Bw/Y=)
                          2: E_laWUYCmTV0SCcR-n5FbsSpUAo.roa (hash: I9IAxK/QPcty9PaECGbQkPS55lT6UHIYJJIlcZ9w1c0=)
                          3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: XARkJa0ya1751lIgFJ5J5g+SXT9ACz0700PjcXCd6E4=)
                          4: LP7tg3FBvFLLW-HMFkYDRUPOELU.roa (hash: Egs0+i1zrlaOijAcDT95IdmtPqJrqUAguzSSvfOnTM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:6f:6b:18:81:b1:79:ad:ac:40:38:82:c5:56:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
        Validity
            Not Before: Jun 16 01:00:34 2024 GMT
            Not After : Jun 17 01:00:34 2024 GMT
        Subject: CN=e33f82be33b027aa4842f2d697bbcc91c344eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:fa:04:99:9f:6b:21:90:4e:99:96:29:00:
                    86:2a:2f:6a:96:0d:2b:a8:15:62:3c:5e:3a:48:fa:
                    b5:b0:77:db:7b:83:88:ba:f0:78:7b:ab:41:32:9c:
                    0a:53:70:a0:08:e2:c9:cc:37:38:15:e1:f5:d1:e6:
                    9a:6c:05:5c:b9:22:10:19:18:51:8d:99:11:41:6d:
                    bb:07:8a:7d:a3:bc:44:a4:f6:3f:80:ea:ba:7a:2b:
                    b7:ef:f7:b9:43:9d:69:4f:01:cf:1d:a9:e9:db:08:
                    5c:f6:9d:fd:af:23:1d:c2:7a:72:83:dc:ae:1b:d7:
                    e9:87:26:57:c5:42:95:59:5a:25:42:fe:4d:71:f3:
                    9c:56:43:03:f2:e2:94:4a:98:aa:80:98:c6:b8:a0:
                    34:aa:21:fd:09:d2:36:a6:05:de:37:81:52:e2:6f:
                    a7:a9:d6:09:7a:a2:db:dd:7b:60:0c:d0:e3:43:1b:
                    d6:4a:05:33:b2:5a:84:90:a2:cb:ee:07:b2:bd:d2:
                    7c:8a:b0:2c:92:f5:5d:02:ea:1a:96:79:35:83:6c:
                    89:0c:c7:05:88:5c:c4:b2:75:d9:bd:69:67:4b:1b:
                    71:fb:55:d1:66:73:06:52:9d:0d:a5:3e:f4:1a:58:
                    8b:d3:9b:da:dc:35:10:a7:b6:61:44:eb:d6:b9:33:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:82:BE:33:B0:27:AA:48:42:F2:D6:97:BB:CC:91:C3:44:EA:B8
            X509v3 Authority Key Identifier:
                keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:b8:70:a9:9b:d2:56:b8:2c:fe:a8:f9:84:83:9e:47:27:
         a6:b2:90:59:1a:ca:b3:51:7c:44:ac:5e:c1:49:08:98:f7:96:
         85:8b:d3:47:1f:5f:e3:5b:b8:06:a2:72:a2:5b:95:a1:3a:eb:
         e1:69:91:27:79:2c:25:60:7d:7a:d4:05:a7:28:3b:09:6c:e5:
         20:1c:e3:ce:e7:a3:34:13:f0:db:1c:ba:df:76:32:dd:2c:2b:
         e2:4d:4c:71:8b:b0:b7:99:f2:13:32:90:ba:7d:a9:13:49:5e:
         32:f5:1c:cf:d4:8b:30:b7:07:06:91:11:ee:1c:34:db:0f:95:
         a9:ef:dd:c2:31:c6:5b:05:6a:ac:b7:ad:90:55:be:83:d7:f3:
         87:35:32:c9:55:9b:6d:c6:01:f4:33:c2:56:72:14:62:fb:cd:
         2a:03:40:71:59:45:37:29:96:df:1b:69:f8:bd:4d:98:21:44:
         27:88:a5:2f:32:e3:6e:b7:f6:d1:3d:74:89:ea:e0:84:4f:ed:
         23:0e:c4:91:8f:5d:3b:41:08:fe:87:f0:9f:fc:68:f1:20:a2:
         e3:ae:f6:a3:05:94:85:73:7f:91:45:67:32:9f:81:11:86:5f:
         f7:a3:32:73:b0:be:66:e2:31:50:47:46:04:d3:3c:17:02:86:
         04:c9:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:34 2024 by rpki-client on console-ams.rpki-client.org