Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File:                     _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier:          SRAr0LX7ztf8UY50UpqdMnTI9oO4QQgEmUDIqVRvT2Q=
Subject key identifier:   19:23:5A:E5:7E:C6:7B:25:B7:8C:A1:6A:B0:BA:A8:15:37:90:70:88
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer:       /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial:       01901D0F5F7BAA99563C31514927877EDABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 18:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:04 +0000
Files and hashes:         1: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: K/vKh1ch6WUsLDLrwlaug3/XkfiNUf48IG3XaVgio3M=)
                          2: tLSmGNwaoHcquuk5kh18O6FNL8g.roa (hash: byO+upBAOxVd2u4ZvF0NHJSZRtP84gAbarEhqUbU+6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:5f:7b:aa:99:56:3c:31:51:49:27:87:7e:da:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
        Validity
            Not Before: Jun 15 18:01:04 2024 GMT
            Not After : Jun 16 18:01:04 2024 GMT
        Subject: CN=19235ae57ec67b25b78ca16ab0baa81537907088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:c1:2e:d5:fc:8d:09:76:c3:06:8c:38:a7:
                    68:2f:ff:4e:5d:31:b7:ed:91:28:8e:25:cf:30:ae:
                    5d:75:03:fc:bb:04:4f:90:59:59:0d:15:37:b0:92:
                    a7:ba:bd:69:12:4d:c2:3f:7e:c1:5f:ea:18:77:3a:
                    cc:12:14:6d:38:35:5b:c1:80:ac:d7:b7:be:05:41:
                    45:47:55:14:6b:fe:33:02:e5:58:d5:f9:ef:61:b1:
                    79:1b:0f:eb:4b:f8:33:19:ad:07:77:0c:b2:89:50:
                    05:b9:ee:74:08:56:fb:05:3d:83:01:e9:d4:ae:3d:
                    63:f8:b3:74:a9:60:d4:d5:ae:14:ab:b5:14:39:ae:
                    a3:41:51:63:89:42:2f:1a:bd:52:72:e4:a5:79:f8:
                    98:50:50:bc:e1:64:23:a2:2d:ad:34:98:be:13:d3:
                    9a:16:05:5c:dc:7f:f3:93:36:91:47:29:db:5b:12:
                    cb:2a:20:8f:c8:31:a4:d3:45:6e:43:e5:cd:0a:f7:
                    93:9c:ab:90:36:f7:1d:4c:c5:61:aa:b5:56:b5:2a:
                    55:09:3a:eb:a9:90:01:e9:57:1b:f8:f7:78:44:61:
                    b4:fc:29:4d:a4:eb:2e:9f:57:e2:ae:2a:da:2f:d0:
                    0a:98:c1:b5:a1:e3:bd:aa:7d:9b:84:41:b3:d6:c6:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:23:5A:E5:7E:C6:7B:25:B7:8C:A1:6A:B0:BA:A8:15:37:90:70:88
            X509v3 Authority Key Identifier:
                keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:32:fe:8a:80:50:a1:e8:ce:65:8a:2e:76:e2:60:3a:e1:06:
         65:e2:15:cc:26:e8:07:bc:e7:ab:20:ad:37:a5:be:e0:1d:e4:
         79:7e:aa:7b:d7:fd:a7:1c:f4:fd:bd:69:f2:9f:26:96:0d:1e:
         e4:cc:b4:c5:e8:7c:1e:30:f1:3e:64:c1:ef:51:b7:c8:c1:2a:
         64:c1:9e:5a:8f:74:42:89:84:ec:1a:1c:85:ca:6a:7e:d1:ed:
         40:67:60:3e:41:99:d7:2b:f8:1b:0a:5b:5d:04:bb:1b:12:59:
         cd:4c:fd:b9:44:bd:f1:e2:0e:59:35:1a:25:c9:92:dd:4b:13:
         da:f3:de:d2:36:20:f8:d2:eb:42:d2:a8:25:b5:b5:e3:eb:8d:
         3c:83:8d:b0:76:4e:5a:bf:8e:26:6e:54:4f:b3:7a:4b:da:24:
         ea:b7:91:8b:20:3e:4d:43:35:20:e4:70:7b:7e:5a:8e:e9:34:
         f1:e8:49:70:30:c0:34:6f:9c:bc:f5:a4:91:10:c4:5b:1f:74:
         1c:9e:fc:72:83:27:fa:c9:1c:88:2d:16:c0:05:c6:b8:04:24:
         24:4a:48:31:19:e3:59:a8:7a:07:85:b7:74:e8:68:57:c9:44:
         cc:4c:0c:5c:b3:e5:b3:c3:7f:fa:1b:97:fc:07:2e:14:3a:ae:
         1c:17:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:14 2024 by rpki-client on console-fra.rpki-client.org