Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          lnZqiDbKAm8VLkGmWx8ykF9oG83ut2x4N4DzUiAB1cY=
Subject key identifier:   D5:96:E7:27:8A:F5:F5:8D:27:CD:0F:E8:0D:68:74:9F:F2:FE:23:01
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       01901E8F9B0DF20E4917166C98FF39904BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: V7NhLPTY8igqsLlca5zZx9vKfnFNl0CeHKrI/9hufWo=)
                          2: tDUcPMXmA801pCtLp79TCda6Y4Q.roa (hash: 1t+I6huwkTU42gSkozFuiY7t0kkxSue2BNaGxvrnskY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9b:0d:f2:0e:49:17:16:6c:98:ff:39:90:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=d596e7278af5f58d27cd0fe80d68749ff2fe2301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:c3:9f:c6:67:85:72:8e:cf:d5:64:36:fe:
                    d8:e9:c1:fe:70:e0:20:ad:cf:d1:8a:3d:f6:3f:3e:
                    b9:e9:b9:2f:7e:94:af:8a:07:bc:78:b3:46:cb:26:
                    da:a3:f9:1d:d1:5d:f5:42:ec:1c:6c:55:d5:e1:59:
                    1f:3e:08:a7:15:c8:c2:13:79:98:03:39:e2:e2:ae:
                    60:d3:2e:41:4f:51:93:18:6a:c3:c5:d2:78:5c:49:
                    0e:e0:68:a2:9a:ff:ff:d8:5b:06:0d:20:a2:c7:38:
                    ab:f8:67:76:57:7a:20:a4:bb:3b:01:a8:f8:3f:a0:
                    c9:93:37:b3:f8:28:3a:3f:06:e1:6c:52:7c:00:35:
                    fe:e8:f6:1a:29:31:13:35:16:4c:2e:09:f5:66:76:
                    49:72:e6:f6:b1:83:c7:1b:d4:7f:06:d3:df:8c:cc:
                    3d:f8:90:ae:6f:73:d7:1b:c9:20:10:fd:aa:f6:fd:
                    da:ca:ce:37:4c:46:dc:b3:ed:94:e6:89:6e:f9:81:
                    40:88:70:e2:d5:7d:8f:b2:84:8c:fe:4e:3d:d3:85:
                    67:e0:1d:e7:e4:d9:22:f1:f7:df:cb:4a:10:59:24:
                    44:43:56:65:7e:29:8f:16:92:c8:a2:d5:d5:bd:bd:
                    dc:14:fd:be:e2:5a:c5:e4:80:29:1f:2a:5e:f3:82:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:96:E7:27:8A:F5:F5:8D:27:CD:0F:E8:0D:68:74:9F:F2:FE:23:01
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:11:f5:04:b5:41:41:4f:c6:43:f7:87:f1:a6:e0:d6:41:
         23:1d:32:65:ac:21:a5:40:a3:fa:da:8a:1c:83:fa:54:ce:ce:
         0d:4f:0c:27:ea:34:45:c7:f5:e9:f3:43:ae:72:ec:c7:d0:c8:
         0f:21:80:31:7d:5b:00:be:1d:8d:66:5d:50:fe:13:75:cc:ad:
         70:4a:83:ef:d2:96:6d:4d:d8:f1:0f:cc:3c:f6:9a:db:c1:2b:
         f5:27:ea:90:02:37:f3:0a:75:6c:a3:32:1f:16:d5:a8:ce:c8:
         1b:51:b5:12:a0:5c:b0:c7:6e:ac:7a:4e:c3:58:2a:63:cf:1b:
         ba:44:11:d8:43:45:ca:d8:7a:cf:bf:4b:67:00:8b:80:14:1d:
         b7:1d:a9:3e:fb:dc:5e:dc:3d:17:d6:27:e3:90:08:0e:cc:12:
         73:f3:e2:1e:97:fa:a8:df:03:3e:63:8c:a1:54:ef:45:f7:22:
         41:94:a9:5c:f8:c5:51:bb:61:18:88:71:36:ab:e9:28:db:08:
         2c:46:71:2f:d4:27:25:18:2a:e3:9d:bf:69:35:cf:c2:87:ff:
         60:87:76:5f:7c:de:c5:b3:e8:61:a2:05:8e:6c:e9:b0:60:d2:
         7b:6c:ea:cf:9a:2a:66:cf:96:7e:f8:4e:3f:a7:9b:d9:0a:03:
         57:07:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:17 2024 by rpki-client on console-fra.rpki-client.org