Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File:                     1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier:          A6il0u0UV61/jHWBJTM3PnL3hCBpCN+ciwKMaqZ0HYA=
Subject key identifier:   1A:6A:70:A1:D7:F9:82:19:7E:E3:0A:CE:22:4E:CD:E1:F4:60:D4:A8
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer:       /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial:       01901DEC73792964A3F8AC2C544A459E8262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:33 +0000
Files and hashes:         1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: NZ2afKg158AxCr1QaLNvv0v0xdaWMbcanvGD9e0O2lg=)
                          2: RHYorYmxGEi6EtMAmdNMSaP2RWY.roa (hash: BWIqEsnrM9NrAhkPBGH5oUpzrTh29axC0vKhZEdgr7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:73:79:29:64:a3:f8:ac:2c:54:4a:45:9e:82:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
        Validity
            Not Before: Jun 15 22:02:33 2024 GMT
            Not After : Jun 16 22:02:33 2024 GMT
        Subject: CN=1a6a70a1d7f982197ee30ace224ecde1f460d4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:29:25:ae:c3:b7:c8:80:84:9c:a5:c7:60:
                    a3:f2:d8:0c:ab:e0:d3:3f:0c:92:c0:2d:4f:fa:33:
                    ac:36:d5:57:d4:da:28:58:f1:bf:1f:8e:6d:e7:83:
                    13:2e:7d:52:0e:b2:0e:89:a5:5f:9d:15:37:2f:e4:
                    be:76:8f:f5:f6:ac:ab:e2:d3:5e:60:80:eb:e8:ca:
                    23:da:ed:ec:60:16:b4:a1:b1:ac:9b:be:44:14:d4:
                    a1:61:e2:88:1c:a6:e7:bb:af:bb:4f:49:f5:96:71:
                    78:36:fa:0f:fd:7d:90:50:19:aa:16:ae:93:5d:16:
                    d3:01:f8:58:9d:7e:05:f0:dd:00:f1:c8:85:6b:06:
                    9a:01:49:6d:15:d1:70:07:2d:c8:24:0e:37:4d:06:
                    f8:9d:73:0f:f0:80:96:a5:35:36:8e:71:86:e3:9a:
                    94:7f:11:19:b5:26:41:09:c3:09:62:74:fe:44:ff:
                    dc:1b:1f:d8:21:41:e0:a2:8b:8c:f9:ca:29:67:0a:
                    f1:b5:92:ef:62:84:23:c5:6b:a7:37:30:cf:78:90:
                    8f:92:72:30:52:3c:7f:1c:27:3b:13:41:ab:b4:85:
                    c1:7e:f5:48:2d:d6:cf:7d:ac:91:93:b9:c5:cf:59:
                    33:7d:79:69:43:56:fe:04:3f:88:b7:b9:86:e9:da:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:70:A1:D7:F9:82:19:7E:E3:0A:CE:22:4E:CD:E1:F4:60:D4:A8
            X509v3 Authority Key Identifier:
                keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:96:2e:79:97:01:71:04:69:72:35:36:31:4f:5e:8c:33:
         87:57:1d:13:f3:de:1f:30:4d:51:5a:6c:da:48:c7:6c:c6:4c:
         e1:9f:95:ac:37:16:93:2e:36:2f:74:6d:65:b0:36:eb:97:21:
         3b:55:bb:ee:c6:c3:6a:e6:85:77:b2:78:46:80:c7:dc:e1:01:
         57:90:5c:b8:61:f1:3b:47:f3:40:83:c9:6b:9b:bc:f3:21:50:
         c2:90:2d:9a:2c:19:5a:04:20:39:4b:ee:b5:64:9a:cd:2d:d3:
         28:f7:9a:a2:0a:55:0e:a5:8b:68:71:77:c4:93:c3:8a:97:62:
         d9:a7:ed:13:38:de:f0:ea:fa:7c:69:d9:42:98:5f:c2:d9:f4:
         91:12:6e:98:92:89:42:a7:2b:cc:90:fd:62:e2:95:4c:dd:db:
         17:d7:29:cf:7d:d3:92:55:ce:3a:49:7a:68:e1:3c:b1:87:bd:
         72:14:59:54:66:2f:3d:fd:1c:3f:92:13:4b:73:11:dd:bf:a6:
         0b:0d:16:71:9f:20:7e:99:f7:51:08:76:06:c5:42:62:e9:05:
         f1:ca:56:9d:03:73:0e:16:bc:90:a9:f3:d4:ee:13:af:77:17:
         9d:a1:35:56:8e:53:b5:09:94:5d:b8:cd:29:b3:43:13:e6:3d:
         b6:cc:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:21 2024 by rpki-client on console-fra.rpki-client.org