Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File:                     g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier:          SUX+IlFmdpD8nuKOXMdWugV17mMBLx1tyecKfMFwBvk=
Subject key identifier:   94:1A:3E:F9:F7:DC:1B:65:C7:64:05:5A:48:99:B0:7A:DD:C5:AE:C6
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer:       /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial:       01906C05984C118E1F0B4B44A4AC7D3CF4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number:          11F0
Signing time:             Mon 01 Jul 2024 02:00:24 +0000
Manifest this update:     Mon 01 Jul 2024 02:00:24 +0000
Manifest next update:     Tue 02 Jul 2024 02:00:24 +0000
Files and hashes:         1: A7JDJepx2uGm64Y3mxLHLibJ25w.roa (hash: K0z+t4+KkAJ814aDkSAlgs1fWxkTnvo7Eg3ez+FkNcM=)
                          2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: FO/kCK4WVqCzs3QFXpMC74Yvou7UaBCkj8l51Cn34TE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:05:98:4c:11:8e:1f:0b:4b:44:a4:ac:7d:3c:f4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
        Validity
            Not Before: Jul  1 02:00:24 2024 GMT
            Not After : Jul  2 02:00:24 2024 GMT
        Subject: CN=941a3ef9f7dc1b65c764055a4899b07addc5aec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:d2:40:43:f9:97:4f:f7:1f:3b:87:63:33:
                    fd:72:3e:d9:21:95:7a:05:fc:7c:ad:21:77:5e:8c:
                    15:6f:cc:9d:be:3f:92:8d:77:37:83:6f:e9:91:7c:
                    eb:f5:ab:05:e3:fa:e6:0f:89:da:12:c8:4d:bc:17:
                    25:0b:07:04:e1:d0:fc:ad:98:5f:6b:cd:39:26:88:
                    ca:ac:03:9d:b6:de:0d:56:4f:aa:99:1b:47:3e:95:
                    e2:70:9e:d4:03:71:02:c9:b1:7c:44:c5:26:a9:dd:
                    12:38:51:04:36:02:f9:6f:e0:c2:8e:1e:4c:1e:0e:
                    e2:74:ee:71:12:8c:9d:55:6a:32:3c:99:a2:ac:ce:
                    32:e3:53:83:eb:2f:b2:1e:5f:c9:89:af:0d:8c:0e:
                    34:ad:f7:39:50:05:55:a9:6e:ac:e9:45:53:21:2c:
                    46:e4:c3:a8:8b:2f:03:5c:1a:1e:81:b6:c4:e4:8a:
                    ed:05:5c:a5:08:d6:33:12:f0:46:8d:af:0e:69:62:
                    97:80:b5:d1:1b:2d:3b:fd:4b:2e:88:b8:f7:3b:40:
                    63:f4:a9:1a:39:b9:6c:2b:0f:6b:26:41:4a:e2:6a:
                    b5:4b:0d:ea:5e:0d:c0:4d:de:7b:c5:f8:b7:5e:78:
                    7d:66:75:98:a1:de:83:4c:3d:65:d7:c9:a0:c7:00:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1A:3E:F9:F7:DC:1B:65:C7:64:05:5A:48:99:B0:7A:DD:C5:AE:C6
            X509v3 Authority Key Identifier:
                keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:4a:39:c5:13:e8:2f:56:84:eb:8c:e7:30:fc:65:ad:65:
         aa:47:6d:c1:29:b4:38:bd:82:07:05:f1:b5:a8:66:e1:ab:b8:
         4c:61:87:c2:b8:b3:bb:3c:a3:04:88:0e:32:73:04:69:a4:ac:
         58:ae:ed:9a:9f:33:48:f9:75:b9:19:ef:d7:ab:ed:81:e6:a8:
         f2:81:e4:77:2f:3c:05:d1:c0:70:ab:9c:0b:54:54:b0:65:7e:
         0c:a5:a3:8a:fb:99:f7:0b:cd:62:c6:48:84:2d:c9:5a:29:a6:
         2f:cd:cb:39:4e:c1:1b:ff:75:8c:2e:83:5f:39:35:7b:23:25:
         b4:9c:d4:97:fa:46:0b:4c:1f:17:b7:ce:b3:06:ee:3e:54:f8:
         28:c3:43:51:05:23:c1:27:f2:5e:29:2a:43:39:77:09:21:23:
         a9:56:87:5c:6b:a3:86:1d:4c:13:28:04:36:f8:bd:a1:ab:72:
         af:bc:e9:92:82:c1:55:aa:ee:7c:c6:b4:4c:57:bf:94:38:4b:
         f7:3a:21:56:cc:5d:d4:8e:94:6a:e3:14:c0:7d:c7:fe:af:93:
         18:0c:f9:1a:f4:ae:29:53:35:ba:e3:12:6d:1e:a8:7a:33:f2:
         57:36:61:b2:bd:0e:7a:ca:cb:4f:3d:cf:b0:17:d0:1a:a3:43:
         8a:0c:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:26:34 2024 by rpki-client on console-fra.rpki-client.org