Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File:                     rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier:          GeGNK63JMhKutSArU4Z/UILfwCnqur9imK9qDG5k08o=
Subject key identifier:   88:55:B3:08:5F:99:D8:C9:77:36:2B:97:51:7B:2D:E6:FE:4F:89:79
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer:       /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial:       0190448D0285EE52C13BB8432E0D3E6DC376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number:          11DB
Signing time:             Sun 23 Jun 2024 10:03:30 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:30 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:30 +0000
Files and hashes:         1: JJfUFmaeCbiRJpL6IiC22mm0xCo.roa (hash: /m/UVYxmI8rHqPPB7glkWW+FFuNwTwlojuwrtAlDx/s=)
                          2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: FQR1v1pT1ZnQQdzy/FjKevJ4XKQYZG+m0fH7Cz09mtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:02:85:ee:52:c1:3b:b8:43:2e:0d:3e:6d:c3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
        Validity
            Not Before: Jun 23 10:03:30 2024 GMT
            Not After : Jun 24 10:03:30 2024 GMT
        Subject: CN=8855b3085f99d8c977362b97517b2de6fe4f8979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:43:8b:97:4a:7c:27:cc:a3:e5:4f:1e:47:
                    8a:4e:37:0d:8e:da:db:cc:d2:f0:62:2e:cd:d3:42:
                    12:59:04:f0:35:62:33:f6:85:e4:54:4e:26:8e:6d:
                    b9:ac:16:c5:7b:d4:52:71:c0:c8:41:6c:64:16:47:
                    6b:5c:52:77:97:a8:9d:9b:77:a6:42:e7:fe:35:be:
                    ab:b2:9c:ee:ba:e0:cf:e0:dd:18:d0:cd:b5:3b:98:
                    c2:81:2e:86:9f:82:18:40:5b:4d:08:88:e3:1b:82:
                    35:b1:b7:25:54:44:76:fd:c1:b0:2c:6d:0a:6d:0e:
                    9b:96:6f:76:86:91:1d:b1:43:29:57:48:78:b7:3a:
                    43:7f:0d:39:06:ac:ee:5c:d3:54:da:8c:f6:85:d7:
                    76:fb:b8:bf:30:43:aa:54:60:e6:26:cb:07:2a:93:
                    ac:fd:f2:6a:1b:11:38:68:98:ce:b7:cf:d9:19:c2:
                    4d:15:9e:36:8e:aa:b4:90:b8:b8:58:74:e5:9c:79:
                    ec:05:b3:98:fd:f4:88:f5:fa:8d:50:b7:0f:f2:c8:
                    09:83:e3:fe:38:e4:8c:66:55:0e:6b:86:ad:de:37:
                    e0:d9:ae:5f:fc:51:c5:98:fe:d1:46:25:d0:12:9c:
                    0a:8f:db:7b:cd:d2:74:03:85:d3:d4:df:fd:53:46:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:B3:08:5F:99:D8:C9:77:36:2B:97:51:7B:2D:E6:FE:4F:89:79
            X509v3 Authority Key Identifier:
                keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:9b:fd:f5:4c:de:2e:c8:95:bf:85:95:55:9e:af:22:60:
         eb:d2:c8:53:0a:64:19:99:47:f9:3b:ae:6e:13:10:61:e7:73:
         19:d5:c8:72:6e:b2:d6:00:2b:d6:32:fa:83:76:65:cf:22:63:
         10:09:7c:36:1c:c1:5a:04:36:7d:58:a5:c7:23:7f:e7:14:d2:
         1a:12:bc:a0:80:8c:0f:67:06:f0:0f:7c:5a:a8:ce:3e:bc:90:
         55:60:82:6f:b8:3a:24:4d:c2:f8:72:1c:88:f2:9a:18:a4:35:
         b6:f6:a0:0a:4f:f8:bb:17:ed:c6:6c:96:29:4f:8c:c0:f0:c2:
         7e:87:7b:dc:57:0c:d1:3b:37:50:c4:8f:ae:08:55:9a:3a:e7:
         02:37:ef:34:eb:79:ba:f2:e5:7d:e3:b7:15:0e:4c:37:ed:6e:
         0a:e0:ac:89:49:e1:53:22:dc:db:ad:12:88:20:c1:07:1d:b8:
         90:7f:7a:74:f1:13:ba:75:cb:f7:f5:df:93:d0:12:f6:b4:4c:
         ed:1f:86:d6:37:eb:68:05:eb:5c:22:20:e1:3e:b2:45:b5:22:
         e0:25:96:e0:dd:72:da:65:06:af:2c:26:51:9d:0a:b9:f8:61:
         3e:d7:54:19:9b:da:86:4f:7a:86:e0:82:47:04:4f:c3:3e:d6:
         d2:ad:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:57 2024 by rpki-client on console-ams.rpki-client.org