Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          rVv/ryCTnTEvF4UyzmMU9P+I8YCXGO/djSFKv7vWfeY=
Subject key identifier:   7A:10:E3:A9:5F:8B:F3:09:7D:6E:0F:F5:8C:80:D0:0E:AF:3C:B0:E5
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       01901DEBC2439A6423A66D9A2C43C9DF601F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:01:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:48 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: Kqz5SIkcPSAiWfCEJgqBxt354cFi9Dcl4ofckFnEKmU=)
                          2: wqhINxVpVUPttsnmvlz2VrEbNbQ.roa (hash: WmZnorqkJb5HTLnx/m9wIS7fLHnf8Opjcmr0UPEf4es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c2:43:9a:64:23:a6:6d:9a:2c:43:c9:df:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Jun 15 22:01:48 2024 GMT
            Not After : Jun 16 22:01:48 2024 GMT
        Subject: CN=7a10e3a95f8bf3097d6e0ff58c80d00eaf3cb0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:9d:ca:54:e3:5a:36:5e:b7:d9:a2:e7:e6:
                    2b:ef:0d:54:f6:28:ee:4d:15:83:a9:c0:fb:12:2a:
                    79:3f:78:21:67:51:4d:b2:ab:ae:16:54:c5:71:64:
                    bf:ba:8c:ae:7f:31:9b:9f:27:d1:99:65:57:c8:0b:
                    10:4f:c6:36:c5:8e:68:48:5d:6c:a9:03:84:39:07:
                    51:b1:36:1f:83:c1:f1:b8:78:41:6b:70:3f:c0:ff:
                    be:30:5c:0e:cf:37:4f:04:65:6a:39:8c:49:68:41:
                    33:36:37:a2:73:c3:0b:f3:df:a8:06:d0:11:57:b8:
                    96:94:a8:b8:38:74:ff:c3:fa:6e:ef:9c:01:85:12:
                    9a:6a:57:bb:93:c9:83:db:6b:2e:51:1c:4c:16:04:
                    ea:46:b2:c9:e5:9f:cb:f1:40:80:ad:13:a6:61:e0:
                    db:b3:53:a6:5c:ac:99:0d:37:88:f2:97:d2:67:0b:
                    01:42:16:18:11:39:98:c0:bc:97:ed:3c:0e:73:4e:
                    da:8d:70:d2:a4:40:42:61:d7:92:cb:57:59:a4:22:
                    5a:56:f6:f8:67:80:de:61:4f:2d:30:28:f1:ab:2d:
                    08:84:d1:6b:be:4c:fb:cc:48:96:90:fd:5b:a8:75:
                    e3:86:46:80:d4:fe:4b:8e:20:1e:ad:2e:ef:02:06:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:E3:A9:5F:8B:F3:09:7D:6E:0F:F5:8C:80:D0:0E:AF:3C:B0:E5
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:ce:96:3d:09:a9:99:aa:35:65:1e:00:62:41:96:3e:df:
         5e:bd:93:3e:51:b9:16:88:70:6a:8f:fe:75:bd:da:51:4c:8f:
         01:ea:dc:42:51:74:6d:c8:15:8a:53:37:3b:8d:0f:4a:80:55:
         9f:ff:ea:73:59:01:be:a5:cd:6e:8f:84:01:a2:82:f1:e1:89:
         e3:7e:2d:63:c1:46:9c:aa:f8:a4:9c:53:b0:9b:77:ac:61:e0:
         e9:05:4c:e2:22:a1:d6:80:fb:b8:15:e1:78:63:0e:3a:ca:81:
         5d:9d:9f:fb:3f:6a:f1:9e:96:0d:4c:98:d6:f4:a2:bb:0a:27:
         9d:2c:30:b0:4e:7c:ef:77:53:8c:fb:48:3f:16:34:4d:f2:c1:
         61:a5:e1:db:2a:2a:c3:5a:e2:bc:a7:36:c0:2e:ca:0f:c7:2e:
         41:a1:b0:03:65:c3:71:9c:c0:8b:d0:b0:30:56:a5:b7:65:50:
         d5:71:64:68:3e:d7:72:a5:2d:d6:04:18:e5:08:61:ca:6e:34:
         67:0e:d9:34:32:3a:06:97:2d:12:c6:58:5d:6e:86:d9:3f:30:
         d9:f9:5b:7c:37:5d:a7:ac:e9:74:28:f5:6f:f4:93:04:bb:30:
         c7:37:8f:18:47:24:e5:ab:82:0e:ea:c2:81:74:c2:4d:25:27:
         bf:d4:32:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:58 2024 by rpki-client on console-fra.rpki-client.org