Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File:                     lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier:          VdxIvitReDRVwVZSngwfv09GD7N5UYwKdDWzlJ3kAFk=
Subject key identifier:   6C:D9:13:68:B7:82:A1:AA:AA:58:AD:11:28:3B:0C:C2:F3:F4:2F:AD
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer:       /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial:       0190448CCFB9308069B8A90A6E6AD159FC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number:          0255
Signing time:             Sun 23 Jun 2024 10:03:17 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:17 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:17 +0000
Files and hashes:         1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: q752spqQx5TyEghJcxuI9WLKOaY9Z8kzhg448jL5tMQ=)
                          2: t75SWtp_QWHBabvDRb8ItDWsKcw.roa (hash: hoJXfQpLwtCOfQvQDWRZmv4RfC1kXW0rCspGdGp5q5U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:cf:b9:30:80:69:b8:a9:0a:6e:6a:d1:59:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
        Validity
            Not Before: Jun 23 10:03:17 2024 GMT
            Not After : Jun 24 10:03:17 2024 GMT
        Subject: CN=6cd91368b782a1aaaa58ad11283b0cc2f3f42fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:31:3a:20:7e:73:12:6e:64:76:f3:65:98:
                    ed:cb:00:c0:79:a1:09:49:1e:04:67:26:39:dd:42:
                    47:20:6e:f7:9d:e0:64:26:9b:fa:71:df:a9:67:ba:
                    d6:33:7f:f1:fa:8c:34:6a:1f:64:3b:e6:92:8c:24:
                    06:c5:23:0c:e7:10:3a:d1:d3:84:4d:8e:c1:a6:5f:
                    bb:32:21:c0:9e:80:c0:06:f2:f4:10:67:9e:33:d9:
                    09:9b:51:40:4f:ae:79:1d:3a:00:81:3a:58:70:cd:
                    11:29:0f:8c:99:43:6f:21:ba:1a:4b:c6:81:74:e6:
                    5d:15:77:eb:95:be:09:78:6c:78:bb:d5:3d:63:85:
                    e3:de:d7:f7:64:60:f5:8c:9d:05:5c:a6:f4:b2:51:
                    7c:44:bd:c3:74:b0:56:52:24:80:84:ae:2b:af:b5:
                    96:3b:13:23:cd:8b:20:1d:f4:f8:8f:39:15:76:da:
                    6d:e4:9b:d2:b4:0f:b9:48:c2:f2:8d:22:7d:45:f0:
                    d2:cb:78:f6:53:86:15:a4:32:43:21:db:2f:e2:ef:
                    7e:ae:af:40:9b:1f:d7:ac:33:16:2a:8d:d8:af:ee:
                    34:55:9d:4f:90:03:30:12:dc:1b:a0:0b:16:dd:e7:
                    35:48:72:c5:5a:b6:e3:9b:39:dd:19:72:02:7e:f1:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D9:13:68:B7:82:A1:AA:AA:58:AD:11:28:3B:0C:C2:F3:F4:2F:AD
            X509v3 Authority Key Identifier:
                keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:cd:37:6a:3e:84:50:fa:6a:21:96:4a:8d:ec:59:31:e4:
         a3:e8:ed:18:5c:30:94:b7:81:22:f4:0f:88:64:1f:e1:79:5f:
         fc:6f:42:7a:94:3d:76:5c:75:b3:1f:3e:b9:a8:32:27:2a:0b:
         d1:0e:82:8f:1e:31:78:3f:df:dd:5f:0b:de:32:d7:a3:fb:3d:
         b2:d5:18:be:75:af:bc:6b:19:be:d3:7f:04:e7:95:ff:95:60:
         98:1a:33:d4:50:34:cd:60:b0:55:39:26:31:d7:45:88:93:31:
         e5:eb:cb:03:94:1c:4a:d6:25:a6:80:84:64:e2:a4:a5:a5:1d:
         d5:34:bf:ff:e4:13:f9:c4:d4:3f:55:d1:58:22:f2:1b:1a:a1:
         b7:ed:9b:3d:c6:5b:e1:02:ac:2b:19:d4:b9:c9:f5:61:f9:9b:
         d1:ed:34:7c:9c:3d:f0:44:a0:a7:13:54:39:a7:4c:5f:db:75:
         76:33:7d:2b:68:5d:bb:e0:71:5d:c6:4d:59:20:f3:54:a8:73:
         3f:35:a9:17:c7:3c:d1:be:09:e6:39:61:a8:ad:9e:70:fa:5f:
         9a:76:0c:dc:46:f1:e1:58:8d:3b:84:02:4c:a2:03:64:66:76:
         a9:c4:07:72:8c:93:93:d3:05:03:e2:97:ad:a3:58:45:25:4b:
         5c:d8:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:34 2024 by rpki-client on console-fra.rpki-client.org