Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          NF6/un7Hl/JDOfo70TcQXou70Er2FyQ2UsrxZKY27tU=
Subject key identifier:   23:EC:89:F2:55:BA:B1:78:03:7C:0D:63:47:2A:21:2A:5D:E0:1D:99
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       019049B0B0E0BE81363124FF36E877B52066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          01BF
Signing time:             Mon 24 Jun 2024 10:00:34 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:34 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:34 +0000
Files and hashes:         1: 1lObMefZGalYdj71yFwq5dFC0KI.roa (hash: HUQuejTdefWML19kpZkxFKCQ742FIGjjhxy1XBfPgAY=)
                          2: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: e+ftlRwi0GFenKOD3qXElwnS+l6+WUDP2jKOZXjASdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b0:b0:e0:be:81:36:31:24:ff:36:e8:77:b5:20:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Jun 24 10:00:34 2024 GMT
            Not After : Jun 25 10:00:34 2024 GMT
        Subject: CN=23ec89f255bab178037c0d63472a212a5de01d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:66:8d:d9:1f:c1:45:4e:bf:6d:56:95:74:
                    72:12:7b:41:1f:66:3b:71:45:86:1e:55:a0:6f:47:
                    ea:c7:9e:62:bc:22:11:da:a2:d9:9c:79:99:c2:df:
                    5f:98:e1:6d:18:c9:82:49:07:68:1b:99:24:ec:12:
                    5b:6d:0f:7c:52:63:dc:bd:69:77:92:af:8e:d1:f8:
                    96:c4:a6:ee:08:6b:8d:f4:24:98:da:bd:6a:fb:09:
                    8c:6e:30:09:f8:ce:a4:5b:74:73:b0:94:00:f3:34:
                    49:be:1a:9f:3c:7d:67:d3:23:4c:00:2e:14:e0:b9:
                    e3:fe:47:32:ab:66:24:40:ab:f7:37:fb:74:6d:28:
                    38:73:6b:26:af:36:32:5d:be:fd:e7:ef:46:50:5f:
                    30:88:bd:84:e7:f8:a9:26:c1:95:34:da:56:5b:3a:
                    10:d0:bf:06:b2:6c:78:26:0e:3f:43:45:84:f5:02:
                    0d:4a:76:d4:14:6f:dc:bb:f7:aa:21:c4:31:1d:36:
                    0e:de:8f:4e:38:30:80:47:cb:34:12:93:0b:56:67:
                    23:91:f5:55:72:a3:41:78:66:c5:ff:93:35:75:25:
                    9a:c5:71:bd:b0:70:fd:49:63:7c:b9:28:85:50:e3:
                    32:45:9b:fc:89:58:ec:2f:36:1a:05:fe:a8:2d:0e:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:89:F2:55:BA:B1:78:03:7C:0D:63:47:2A:21:2A:5D:E0:1D:99
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:6c:54:6d:ba:6f:0e:8e:35:70:97:18:55:3b:17:00:bc:
         e9:10:72:50:8b:18:d2:89:28:c9:6e:2a:c6:68:88:87:56:01:
         92:34:ac:97:e3:c6:f9:41:5b:5a:9b:f2:b7:23:57:36:63:1d:
         ad:d1:29:89:af:ff:57:e6:9a:1a:7f:30:ea:d5:36:ca:a1:78:
         66:53:78:03:c9:ec:58:db:05:f4:7f:b9:87:b6:de:c7:ae:1a:
         0b:43:1b:fc:21:0d:16:b4:10:8b:b0:d2:8c:23:2a:4a:93:8d:
         1f:01:f1:9b:91:e1:92:9d:a4:42:ef:56:ed:65:18:df:ef:f4:
         8f:22:e8:71:67:1e:b1:fc:23:38:e3:e4:32:df:54:4c:37:42:
         56:a2:cd:41:cc:d0:95:df:bd:3a:53:ab:b2:41:fa:00:4b:0c:
         b5:04:6e:35:86:88:8b:db:0d:d9:90:b3:d1:e1:2f:c7:0a:15:
         d6:38:1e:bc:fb:db:e8:01:d7:98:79:dd:e9:d1:91:fa:36:8c:
         32:f4:5f:a2:c8:1d:72:79:52:ec:56:09:cd:11:de:d2:53:af:
         69:14:ec:eb:a2:91:ef:70:27:fe:2f:dd:f1:d5:55:b9:d5:1b:
         d7:7f:bb:33:d3:f7:86:cc:f9:6c:06:97:91:4d:15:58:f8:e2:
         2e:c2:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:47:25 2024 by rpki-client on console-fra.rpki-client.org