Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          wZByRg43k+YfdpR2rXrv7RKCnpDDYcAbfDG7kaIoR7Q=
Subject key identifier:   94:B0:21:6E:64:EC:DB:70:81:AC:FB:7D:A1:F0:C7:93:F8:33:29:E3
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       01901D0F0E4F4F5E48AB5F527F3FECCDFE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 18:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:44 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: FNRVdqilUYOO3IjvrCUVoVVUjgUnOS1lj1THz4HrU8Q=)
                          2: boYMDLX2wQ1bhDvDCF--n1I0bKE.roa (hash: td/2ln1z97zZBrK4bDb99ZFzQXjdkrBPtSGIOiLonk8=)
                          3: iIHLiBZX4PjbUzFvnKkA8sZbYk8.roa (hash: t4JjKVHzeixXmieDDrYpnCLksOYJ2dh0XKnw5x0oUxE=)
                          4: sYFt3rrUBuJk57Y3zAGFmZOltic.roa (hash: gQqoyQHjxZ3QpmMXCuD04vnCJWZx+pARGd3BNASn0U0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:0e:4f:4f:5e:48:ab:5f:52:7f:3f:ec:cd:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jun 15 18:00:44 2024 GMT
            Not After : Jun 16 18:00:44 2024 GMT
        Subject: CN=94b0216e64ecdb7081acfb7da1f0c793f83329e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:dd:ef:35:bd:35:5c:1b:4a:2a:d1:53:d2:
                    a3:f1:74:78:e5:5d:14:2f:ce:f7:8e:ba:45:33:5b:
                    77:0b:ee:09:3c:c9:95:52:12:d3:ff:4f:3e:a0:1c:
                    d2:c9:f1:1a:49:02:d2:b9:cd:9c:8e:39:8c:c9:a5:
                    5b:7c:0b:cd:28:12:1f:f8:e3:b2:79:50:d7:ee:00:
                    d9:76:35:50:73:9e:31:b0:15:f0:c7:28:b9:8c:c7:
                    1e:6b:3e:05:c5:1a:0b:df:e2:ea:3d:04:bc:4e:d9:
                    bb:2f:02:51:fb:f0:92:4e:87:17:02:27:8d:21:ca:
                    6b:73:c2:9c:60:bb:6d:6b:3c:fa:40:db:16:1b:3c:
                    90:90:fb:47:e5:7d:8e:22:65:e1:db:35:b9:6b:21:
                    3f:58:be:87:49:5d:85:27:b6:2d:a7:7c:fc:71:e0:
                    47:af:88:66:61:73:53:a9:e1:3e:80:1b:f7:88:5a:
                    5f:e4:9b:a7:67:9b:2d:4b:68:6d:d4:ab:95:67:ce:
                    5d:45:bf:7d:78:5d:cc:c6:a2:fd:da:39:cb:bb:67:
                    58:1e:3d:cc:f9:8d:8e:60:1a:80:f1:83:0b:3b:7f:
                    a4:02:dd:26:07:49:87:8e:1b:5b:0e:40:12:be:51:
                    7e:1a:06:d7:8d:80:cf:92:dd:b5:7d:2a:fc:38:2a:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B0:21:6E:64:EC:DB:70:81:AC:FB:7D:A1:F0:C7:93:F8:33:29:E3
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:96:0d:10:14:91:7d:ea:4d:db:23:0d:c8:4d:84:19:50:
         7d:40:7d:b4:f9:79:19:e6:7b:99:fa:fc:d6:b0:52:d6:66:b9:
         5f:df:18:84:71:b7:67:e9:7a:7d:ab:c1:05:41:fe:ac:19:cc:
         40:87:b6:b2:18:71:74:40:32:b4:64:df:fb:9a:ea:22:0f:f9:
         b4:58:22:62:76:b5:8b:3b:3a:32:f6:0c:0b:d3:d1:ed:96:37:
         fe:ee:8f:fc:02:b7:77:3a:91:9a:21:90:1a:55:6a:80:d1:d2:
         8f:88:f2:6d:e6:02:fd:e7:ca:e4:cd:d4:f3:a8:c9:cd:06:69:
         16:c9:c5:33:c6:4b:50:30:3c:6c:af:1a:6d:25:37:23:df:19:
         b1:16:7b:10:6c:f6:77:25:62:80:6e:e1:50:f2:40:f1:56:8d:
         68:e1:f2:88:3a:64:81:ef:97:f7:43:f7:20:f5:de:33:54:3c:
         41:ff:9f:a6:97:f8:b1:55:b0:2a:25:a4:fd:dc:58:e2:e9:f3:
         df:69:7c:65:21:c2:8a:90:56:54:cf:0a:6c:5a:3b:f0:46:3f:
         8b:b6:10:f3:1f:5f:19:bb:cb:fb:15:aa:cc:9b:6b:0c:57:db:
         1c:78:13:bd:39:69:a1:0f:ef:84:4b:f9:e8:d2:b2:db:c0:76:
         1b:35:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:17 2024 by rpki-client on console-fra.rpki-client.org