Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
File:                     7Er2_cFtaK4mqg6rViPmviFwNsE.mft (raw, json)
Hash identifier:          zQ1LpG2Us0lszphFkdH+y6rVDr9gAojgJA45A1dxrsM=
Subject key identifier:   A2:66:9E:9A:89:D1:72:03:B4:89:E9:3B:6D:19:44:72:E9:2C:BF:45
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Certificate issuer:       /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial:       01901D0F178B1889C0E1637C2F98C7F30331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 18:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:46 +0000
Files and hashes:         1: 2L8hVVHoKFZw4Yx_D09pPqSfAts.roa (hash: JXU5vI5lUU/SvohRBy8hBIpXka1bkgIZNiffvKaBJto=)
                          2: 7Er2_cFtaK4mqg6rViPmviFwNsE.crl (hash: Pz5snBgJGJQPgJ8WfgaSCRnTNa//ZyMH6N3GQmWcaF8=)
                          3: c_ORZpR3ooKMGPfa0OmblOdGe1o.roa (hash: 7oPG5YhkzTFPq85armoAnIO4OPEMfyiq1TL/Uwm1q9g=)
                          4: ggyIJb7LBeTbi9_w0Iaae3gkTp0.roa (hash: MOO8Uj5uxGUTYw4us+UxZbh2Gc8FX3omN0gvyIRSyx0=)
                          5: y1L9v2vVO-q46RhUkE8N7byr3OU.roa (hash: JA7iGZg7BPOeagDaNGRiFsitu4NX60PuxnepgH1FCks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:17:8b:18:89:c0:e1:63:7c:2f:98:c7:f3:03:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
        Validity
            Not Before: Jun 15 18:00:46 2024 GMT
            Not After : Jun 16 18:00:46 2024 GMT
        Subject: CN=a2669e9a89d17203b489e93b6d194472e92cbf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:b6:ff:c8:4e:85:83:86:52:93:fb:c2:11:
                    a2:a6:4f:e4:9e:d2:18:a6:14:64:0c:fe:ce:c6:5a:
                    1f:59:8e:94:34:61:d3:f5:60:f7:5b:2c:f4:e2:6a:
                    4f:f1:4e:a3:87:ad:ce:c7:da:44:8c:9b:7d:dc:a6:
                    ea:f4:29:3a:02:8c:d7:ec:61:a9:df:7d:a9:5a:03:
                    78:ae:4d:26:38:13:11:cc:df:fe:a2:68:20:d3:58:
                    9a:3c:c2:73:08:9e:55:ce:b8:8a:08:c8:db:d4:f7:
                    28:ea:17:ea:57:05:b6:6f:86:47:79:71:77:25:be:
                    09:47:e0:9e:e1:7b:7e:64:f6:8d:ed:7c:92:4f:3e:
                    33:b3:ee:ff:13:a5:14:c4:8b:17:06:e3:2d:76:d9:
                    60:64:ad:e0:6c:e2:70:db:4a:c5:54:93:7b:23:06:
                    66:48:f6:16:e8:da:5f:b2:9a:3a:d3:34:7d:89:18:
                    3f:92:ab:25:7c:bb:cd:4f:ac:4a:7d:c7:ea:cf:78:
                    74:49:5c:ca:3c:11:b9:27:6a:7d:e2:e8:e0:89:56:
                    cf:b4:b3:76:06:ea:90:0e:45:12:7a:0f:f9:73:ac:
                    00:7c:59:5e:2a:03:01:75:ca:5f:24:e4:18:b3:48:
                    23:3c:d1:7d:72:63:83:09:63:1b:77:a3:24:91:8a:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:9E:9A:89:D1:72:03:B4:89:E9:3B:6D:19:44:72:E9:2C:BF:45
            X509v3 Authority Key Identifier:
                keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:7b:a2:52:12:98:7c:6c:c8:a1:43:ac:b3:b9:26:02:7a:
         bd:6a:1b:28:f5:b4:ef:6e:a3:3c:cb:fc:05:14:46:de:55:d2:
         7a:c9:bb:20:5a:9a:ba:73:ff:7e:a2:90:2f:8e:38:a5:d7:1f:
         05:b8:7b:7d:39:2b:07:86:1f:9c:16:1c:20:ac:dd:86:59:30:
         ae:61:e0:10:4f:17:4b:1d:3b:d2:4c:ba:bc:a4:d3:17:ee:d3:
         fa:9d:14:85:45:ca:a2:22:c4:b3:f6:0c:8f:9c:f3:92:9e:f7:
         d6:93:b0:5c:fc:00:a6:41:e5:a4:e0:33:00:08:eb:34:7b:41:
         6d:e3:b7:08:59:f4:85:05:57:56:c7:90:1f:06:ea:31:12:ed:
         95:d6:25:60:1d:06:7e:15:a7:0b:41:9a:a9:29:2e:da:45:22:
         ac:f8:34:a8:80:d5:ca:c2:60:59:51:af:17:ed:4f:f4:87:d4:
         05:a6:95:87:bf:23:e8:76:84:c1:3d:6d:a9:ba:05:85:77:a5:
         95:4a:3a:82:db:6c:d6:45:96:d6:10:3c:00:31:7f:ad:e6:47:
         97:e5:a3:dd:e6:b7:13:1b:2e:66:8c:b5:49:e7:cd:33:c2:d7:
         12:f3:0e:0a:e9:b5:7b:31:e7:ab:9c:a4:3a:b7:cb:ff:b8:d2:
         4b:cb:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:19 2024 by rpki-client on console-ams.rpki-client.org