Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          kXDVUqROvSH5K7TKiYLN+9fg+qL0Xgo3h1aPXhhM4WM=
Subject key identifier:   A4:98:BA:B2:67:29:36:0C:1F:97:4B:AE:11:FF:77:83:C4:B6:40:AE
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019072E43B2AA9CD8D3B7848BEC34DC85624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          11EF
Signing time:             Tue 02 Jul 2024 10:01:18 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:18 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:18 +0000
Files and hashes:         1: GTe0mZs7RHiyy7uSLTqGbKTeAJc.roa (hash: QDr1b3fj+Pi3Ey92rTWKqESwTwURY1Ct5XFTnLilh4g=)
                          2: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: GCJy4e4fVHVGemH0AAx0Bx0tcJ2kk73DD9LmHXI9h18=)
                          3: XFr37-qI2n4oCYuN6zptOEG5jrU.roa (hash: XbMv3O/lF8CPUU7H+x3u2rW6mmkyNe1m71t6/7Xxxvc=)
                          4: fS0r4RMWEnYJULjc_4DkFH7bkSY.roa (hash: kCl0nb+ItKnCkRmhx64MWNFmOk50Otn6y8jXG3hYVX0=)
                          5: lwJTIw9WWBx53K0P2kUBXqO7NSQ.roa (hash: zATnSoGwyTlCsmMsv1f5FNfw30h8+dU4PnpLtjXWXT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:3b:2a:a9:cd:8d:3b:78:48:be:c3:4d:c8:56:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Jul  2 10:01:18 2024 GMT
            Not After : Jul  3 10:01:18 2024 GMT
        Subject: CN=a498bab26729360c1f974bae11ff7783c4b640ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:09:59:d2:d7:95:a8:64:60:85:08:de:3c:
                    e1:b1:4c:af:7d:c5:dc:9c:1b:5d:65:1a:75:09:1b:
                    6d:ed:ed:ad:a8:30:c6:33:e7:69:e4:44:40:1d:d5:
                    34:9a:32:b1:ce:14:b6:cc:be:aa:ff:69:11:93:e3:
                    9a:ef:94:02:01:45:ab:ca:8a:ac:64:d8:42:e0:95:
                    d4:dc:fd:48:58:5f:67:19:23:7a:5f:cb:ff:fd:1a:
                    19:6c:a2:17:0a:9e:62:ac:d0:2e:25:90:18:0d:af:
                    b7:68:c4:c7:4d:54:87:5b:cf:1e:8a:12:a5:e7:8c:
                    c6:42:25:92:55:48:ff:7d:52:28:37:9e:18:8d:62:
                    2a:a6:88:42:09:eb:eb:5f:96:99:72:8d:3b:3a:8c:
                    93:2e:8f:3f:6d:66:33:72:e6:f0:1b:d8:57:d0:e5:
                    03:c7:14:2a:7c:b1:75:26:7b:d5:3e:85:f1:1a:80:
                    41:32:6a:e5:8f:2d:da:0b:08:18:26:cd:06:bb:1c:
                    eb:13:83:22:b5:bb:23:e5:61:87:99:ba:6c:89:14:
                    71:89:5f:08:37:bc:a6:f1:b3:bd:3c:35:85:70:b6:
                    50:e5:80:af:f5:05:45:92:5f:60:63:e4:24:8a:6f:
                    3f:10:ee:6b:7e:d8:06:fd:60:b6:01:54:91:99:d2:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:BA:B2:67:29:36:0C:1F:97:4B:AE:11:FF:77:83:C4:B6:40:AE
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:76:3b:7e:88:7b:9e:a4:24:77:5b:55:d4:f0:9b:6c:79:
         52:e5:02:17:88:5d:e7:c6:8a:81:ef:17:50:34:b0:d7:d1:a2:
         52:6d:82:f0:46:55:ec:4d:67:94:c3:f9:22:f0:7f:95:5e:fa:
         94:10:a9:48:df:ef:c5:12:ae:be:64:86:88:20:1f:f1:49:50:
         eb:f0:5f:0c:ff:44:d5:07:b7:83:82:1a:22:b9:aa:5a:b0:bd:
         ca:34:ef:f8:cb:ad:29:9a:2c:54:cf:38:8b:f6:8b:3b:6f:5c:
         3e:e4:1d:eb:5e:3d:a0:18:af:04:92:fc:5b:d5:80:4c:67:b2:
         71:92:d7:45:d8:b7:d9:dd:4d:1b:64:dd:f6:d7:a7:88:70:33:
         ba:de:8e:10:e6:37:4f:a4:a3:8f:b6:1a:55:4b:a2:14:5a:41:
         03:ae:91:c9:c8:62:f0:5d:9d:19:c2:b8:b5:50:7e:79:06:4a:
         c9:46:ff:df:46:49:b3:cf:d7:13:ff:86:b7:24:50:77:b4:9e:
         09:3f:ca:5b:2f:1b:7b:4a:e3:b6:bf:8b:98:66:55:98:14:3f:
         c5:4f:fb:34:c8:5b:d2:88:74:33:9b:fd:12:7b:94:94:9f:4c:
         a4:1d:70:a5:d1:f9:7e:d7:c9:31:35:e6:96:3a:ca:3e:75:3a:
         6c:79:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:45:32 2024 by rpki-client on console-fra.rpki-client.org