Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
File:                     dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json)
Hash identifier:          MzMMfv4xlzPSo3kurmqjLquGeXuGH0Jxax9r6I7tlsg=
Subject key identifier:   6C:10:74:A9:C3:86:7F:91:CB:C6:15:75:05:0B:F7:7B:83:21:D0:FF
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Certificate issuer:       /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial:       01901E21B9E8AEE9B19F7759308F7311F24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
Manifest number:          09A8
Signing time:             Sat 15 Jun 2024 23:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:44 +0000
Files and hashes:         1: BHjZS92KAV4UEoHv84k2RbU6H8A.roa (hash: RIJRpfrOTBqxwoCSZfBpesJ5WrdzQmc87uKigCHzdZg=)
                          2: Of6tXEVsQkrwgMIPVntULpcCcuA.roa (hash: w4i+zBy4g6l3BrrkA4lTbIzD3BiI+gFRkboRjyiX2Ls=)
                          3: SdITyx60ptY_jki0QqIZzLGfWGQ.roa (hash: 8uOqDrxNewwtyoYBFcJf2g7t8peH0bPiB1UfCuek6Po=)
                          4: VPV2LBRxfmKNKHaz5d07Irqqmuo.roa (hash: U6y+CpKb961GYe6EFqt3d83ywxIMvHKZWu0ZQzX1Zjg=)
                          5: crzOIIY9iaHUQMni0jIhdrkfnPU.roa (hash: KlgExnVYcFqcG4Kjtd2jetLtUevwMXVwzHadkUetfio=)
                          6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: mB1cBXkkdQJ15F9Ck2r7tgJokf5EX1PkrR1Jdix108w=)
                          7: fsclRUUTdgcxO_lSIff8dXvPL64.roa (hash: 8SpHt+w+/s4hWbzpU1XYYRGk60JjOjuEBME9qfyGiCM=)
                          8: yz1DQh0QzkkA49N9iS7ThokKYH0.roa (hash: 3dPQSEP9z8lwcCDik0ituoCOOV917MN5n3ce1pcyaf4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:b9:e8:ae:e9:b1:9f:77:59:30:8f:73:11:f2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
        Validity
            Not Before: Jun 15 23:00:44 2024 GMT
            Not After : Jun 16 23:00:44 2024 GMT
        Subject: CN=6c1074a9c3867f91cbc61575050bf77b8321d0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:be:e0:c9:95:2d:b1:52:90:c2:e5:21:e3:
                    79:ac:6b:10:92:f2:05:7e:39:05:8f:ae:6c:66:fc:
                    31:0a:8f:aa:8d:2a:d8:78:f2:1b:18:89:ba:89:54:
                    91:15:91:e6:22:d4:c5:4f:3d:00:1d:4c:69:0a:7f:
                    9b:24:0c:df:6e:7c:a8:f5:4b:ab:3a:cb:6f:dd:c1:
                    81:15:65:07:3c:95:e9:bd:a5:9f:81:79:9a:cc:1b:
                    cb:50:ea:15:cf:b4:c1:02:50:2c:a7:be:02:69:2b:
                    52:2b:70:50:ce:9d:79:2a:ed:ad:7b:75:54:5b:cb:
                    54:27:b7:8b:5b:1a:2a:29:61:67:1e:4c:fd:af:d7:
                    9f:88:d8:b4:48:07:28:5a:ec:7e:6b:2f:f1:00:e4:
                    72:06:99:08:1b:a7:03:e5:7a:83:12:a2:55:36:fe:
                    59:6b:6b:63:a7:58:fe:3c:3a:e8:42:5d:16:86:7e:
                    cf:d8:0e:6f:ec:79:38:86:c1:c7:5f:7e:8d:28:68:
                    42:5b:ba:02:47:bd:fc:6e:18:01:72:a6:0c:4b:49:
                    7e:61:73:98:2b:6d:1b:01:62:98:e9:1e:d9:ec:c2:
                    2b:5d:a3:89:6b:59:fe:30:12:24:f7:76:1b:de:e5:
                    7a:64:8f:57:54:0b:0b:4a:17:11:e0:d6:10:92:6e:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:74:A9:C3:86:7F:91:CB:C6:15:75:05:0B:F7:7B:83:21:D0:FF
            X509v3 Authority Key Identifier:
                keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:87:71:f5:6b:57:3f:35:16:62:ec:f3:fe:e1:55:9e:d3:a7:
         b9:a9:29:ee:d1:60:2e:88:7d:49:3c:ab:27:39:b9:93:58:45:
         fc:d0:02:7a:e9:93:ea:a3:a2:93:34:d8:56:77:74:11:9b:00:
         1a:b2:2e:e4:92:8a:85:99:49:78:e9:46:5c:fe:55:01:cc:8d:
         2e:be:91:fe:e0:27:f2:53:2d:9f:9a:9c:f2:0a:98:64:78:41:
         da:cc:d1:8b:fc:1a:b2:55:fa:95:72:00:d9:b4:08:95:bd:8a:
         85:1f:66:bc:36:43:2e:f0:cb:2c:13:a5:e0:48:7d:24:78:32:
         61:45:1a:11:9e:43:4a:ad:6d:7b:f7:d5:4a:e9:a2:34:c2:ce:
         3a:82:39:e7:d7:00:4c:1f:ba:02:de:de:5e:5a:0c:c7:93:3c:
         69:95:c6:df:9e:b4:b0:be:6f:d9:6f:89:03:ab:12:81:8d:96:
         73:c5:74:17:89:50:2c:43:95:1e:4d:19:c4:4b:17:ee:25:0e:
         a8:c1:d7:a4:d1:e5:2c:22:2c:5c:af:e7:c9:d5:01:d8:ea:93:
         29:7f:7f:9e:12:83:32:4a:8a:d2:98:67:e0:60:4a:bc:67:f3:
         ff:6f:d0:2d:8d:6e:a1:ac:23:21:a0:2c:63:b4:c0:76:b9:20:
         ba:59:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:31 2024 by rpki-client on console-fra.rpki-client.org