Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.mft
File:                     fNbAI2_01gUJBpV__TgLOHnm7W4.mft (raw, json)
Hash identifier:          R1Mya5moi+CNF6awyQO8i8CnnyAIkyP7fZvZpTwByck=
Subject key identifier:   39:30:36:1E:FB:FC:05:89:BB:19:A6:44:B2:9B:B5:9D:24:AC:59:12
Authority key identifier: 7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E
Certificate issuer:       /CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
Certificate serial:       01901DEB9B72C6F492A4B8D7AE546BA4E259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.mft
Manifest number:          0788
Signing time:             Sat 15 Jun 2024 22:01:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:38 +0000
Files and hashes:         1: fNbAI2_01gUJBpV__TgLOHnm7W4.crl (hash: JP59IYY/BIPX7trakogpUzZnWieydbKnr6b0vCzIcGk=)
                          2: h34z8F5f9FPKn-eucqv-9wISJ4E.roa (hash: qESRbNYIxa+NzoEd2bhVZzQEoBLbrs16ZCmP+lqrsOY=)
                          3: mOEUmr-CvGtTNY8R9GBBehrPIU8.roa (hash: iHFJGDu0qC8S/AeDYojtNJYVyAUHS65JyPi6Lf9CUt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9b:72:c6:f4:92:a4:b8:d7:ae:54:6b:a4:e2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
        Validity
            Not Before: Jun 15 22:01:38 2024 GMT
            Not After : Jun 16 22:01:38 2024 GMT
        Subject: CN=3930361efbfc0589bb19a644b29bb59d24ac5912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:fa:bb:37:57:dc:8f:e6:bd:74:3f:bb:07:
                    8c:d7:fa:b7:c7:e1:7a:72:57:9a:94:fc:27:e7:59:
                    5b:db:d0:1a:34:21:6b:e5:5f:dd:04:3c:c8:f6:6c:
                    ca:5a:4e:c8:5e:80:8b:d2:84:95:c3:bf:ef:52:2d:
                    ea:fc:58:10:32:59:8b:f3:94:df:6c:ef:61:64:6f:
                    12:de:7d:e0:f4:74:7a:27:c3:be:a1:f5:20:31:cb:
                    13:03:c4:26:78:84:69:af:ce:ee:61:c2:d4:bc:7a:
                    3e:69:2e:fd:9d:c6:41:c1:dc:49:a9:50:c2:e2:b4:
                    bd:db:0a:7b:71:c4:a3:b6:16:f9:83:7e:d9:76:c9:
                    6c:c7:a4:7e:c2:b9:ac:34:52:70:e4:d6:27:bd:9e:
                    d0:fe:7c:28:1f:31:51:38:03:9a:9a:d9:42:b5:5e:
                    20:75:ff:33:8a:5f:df:4f:5f:f9:33:38:96:79:a1:
                    13:0f:99:48:6d:1f:2d:81:a9:ab:97:20:e7:ed:1d:
                    ff:c4:d3:d8:e0:05:69:18:fd:f5:5c:88:a5:96:72:
                    8b:d6:c4:17:cb:a1:2f:d7:af:9b:3e:a7:ba:67:5e:
                    7c:7b:6b:5f:04:29:6a:5a:fa:6f:8f:3a:59:30:86:
                    44:4a:a0:06:9e:48:95:07:c0:25:47:ae:6d:e3:6b:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:36:1E:FB:FC:05:89:BB:19:A6:44:B2:9B:B5:9D:24:AC:59:12
            X509v3 Authority Key Identifier:
                keyid:7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:79:c4:e5:12:b4:ce:08:29:29:77:23:4f:ab:3a:75:da:
         37:39:9b:6b:d0:20:8a:e2:48:1a:fe:b8:e6:06:d4:66:37:03:
         9a:16:16:ea:93:e4:96:10:67:bc:df:b7:9a:39:8e:91:3e:80:
         af:30:a5:d1:e4:76:c0:dd:9c:82:60:76:eb:da:c3:a5:67:08:
         69:f6:c0:1d:69:b2:ab:98:99:08:91:94:c2:8c:e4:7e:19:6d:
         76:72:a7:2b:03:5b:eb:02:34:8d:57:53:ba:1d:e4:8d:c5:30:
         ab:6c:b6:d4:97:60:12:cc:c1:72:d5:f8:15:48:01:ea:24:37:
         2d:f3:53:0a:7b:d2:89:f2:ef:3c:17:1c:12:c8:75:6d:0a:26:
         b8:c9:08:f5:ee:06:30:eb:11:95:31:33:f9:ea:23:84:93:4c:
         9e:9f:14:85:2d:17:74:0f:64:2a:bb:7c:b4:29:33:df:a4:03:
         02:04:1b:86:c6:4b:8e:14:73:13:d9:3a:b1:74:61:63:65:fe:
         2a:64:29:f6:fa:bd:6e:73:00:ea:a1:b6:f8:4f:a6:33:c8:61:
         f9:66:b9:77:ea:28:54:3e:a7:fd:1a:0b:36:13:3e:a2:18:16:
         b6:74:d2:3e:06:b6:58:d1:0a:23:04:76:66:a7:bb:a4:1c:9b:
         7b:3f:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:28 2024 by rpki-client on console-ams.rpki-client.org