Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File:                     FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier:          oK36cqrdLMbxlonssl+EJIliR3cEAQ8tIt2NMKJ5L0g=
Subject key identifier:   CE:B7:0F:41:43:EA:0F:04:CE:6E:6B:B5:0A:BC:3F:B5:0E:CA:20:72
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer:       /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial:       01901E5906D39FCD1A8F2CDE9BBF88A658C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number:          11CC
Signing time:             Sun 16 Jun 2024 00:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:09 +0000
Files and hashes:         1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: yqMRUKdszie6TNSqBdZkasv+Caoj9w7aumueJrS1Y7M=)
                          2: ZFOkOwryANr48fciRppCbKPT_9I.roa (hash: M+RqgF/IUqRNDOtOQ3wJdUgWeyPJFE39NqXHf2onjPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:06:d3:9f:cd:1a:8f:2c:de:9b:bf:88:a6:58:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
        Validity
            Not Before: Jun 16 00:01:09 2024 GMT
            Not After : Jun 17 00:01:09 2024 GMT
        Subject: CN=ceb70f4143ea0f04ce6e6bb50abc3fb50eca2072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:ff:a8:db:fc:c7:33:26:54:df:58:93:8f:
                    51:0e:b5:16:ae:46:e1:82:de:b4:bf:67:8f:6d:2f:
                    90:10:6f:8a:21:42:6a:be:bb:28:7e:2e:e3:dd:a0:
                    98:7f:2f:19:8c:29:00:57:5f:b0:8d:ba:5a:8c:dc:
                    27:ac:4f:e2:b8:80:f8:18:02:70:7f:e8:a3:c0:1b:
                    2b:84:41:e2:59:1a:2e:39:fa:38:7d:d9:6e:bf:1a:
                    2a:4b:95:79:ff:62:13:bc:42:6d:4f:af:9e:3b:a1:
                    73:e1:bd:ba:5a:84:20:bc:d8:cc:c6:05:dd:3c:7b:
                    b3:51:55:7a:0f:bf:3f:f1:cc:7a:88:9b:26:0f:6e:
                    57:4c:c0:9f:99:21:c6:9c:9e:35:81:01:0b:16:8f:
                    b7:b9:7c:90:f5:5c:f4:f0:5c:11:91:0c:e6:39:7d:
                    f5:5c:3d:56:12:f1:4e:d6:1b:45:37:99:6c:17:d3:
                    ca:28:59:a2:a4:90:bd:4b:02:ad:a5:2c:62:58:58:
                    82:eb:80:5b:69:fd:e1:39:9f:d8:9f:38:45:7b:2a:
                    82:35:3f:fd:3f:d9:22:9d:16:5e:77:1f:19:a0:57:
                    d5:ba:73:06:b7:b8:c4:8f:c5:e8:5e:d6:33:19:0c:
                    da:a8:d0:c7:ca:29:49:bf:38:93:d9:0e:31:59:89:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:0F:41:43:EA:0F:04:CE:6E:6B:B5:0A:BC:3F:B5:0E:CA:20:72
            X509v3 Authority Key Identifier:
                keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:13:da:11:75:ad:05:6e:56:11:1d:14:2a:98:8a:96:db:
         6f:99:d8:b6:03:19:c5:63:a3:ca:81:e7:47:d5:65:ca:1c:00:
         cb:b2:03:c7:d2:b6:d2:03:24:db:8b:e5:92:b5:77:3c:c4:42:
         ef:e1:0d:57:d9:26:8e:e8:15:31:b7:79:e1:21:30:0d:c5:8a:
         ab:8f:61:cf:c7:3e:70:e3:bd:3e:f5:6f:3e:c2:c7:7d:0f:1b:
         5a:73:9d:f3:6b:f9:ce:4d:10:74:45:63:b6:ac:53:06:cd:64:
         b3:de:67:bb:59:34:72:c9:56:e6:ab:a5:01:cf:7f:b8:89:9f:
         0f:45:a6:0f:89:23:e7:3c:73:b5:fb:02:4c:2d:e7:95:9e:7c:
         d1:d8:4f:36:5b:ea:a5:80:7a:63:da:4a:b2:7f:0d:80:53:46:
         aa:13:f5:63:66:b8:4e:a0:98:fc:28:93:e1:c0:df:91:d1:bc:
         71:94:a8:22:a3:3b:eb:9a:df:15:f7:e5:d1:67:3f:70:f0:44:
         58:ff:f0:cf:7e:1e:7e:7e:cd:2b:22:c8:b6:d9:16:fb:73:6b:
         8c:e5:ba:2d:d7:cf:df:b5:14:36:7b:da:b1:ae:02:9d:28:fa:
         f3:0b:3b:1c:d4:de:84:1d:01:ff:3d:0a:6d:83:f8:d5:b5:d5:
         2d:ce:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:59:43 2024 by rpki-client on console-ams.rpki-client.org