Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File:                     IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier:          I+fANI/a2VPBeyP2DDp+g8w089JwB+8JbV9Fb6bCP9g=
Subject key identifier:   94:9A:76:F1:C1:F4:B2:6C:91:FF:92:32:39:B3:F3:41:24:44:0F:48
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer:       /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial:       01901D468E41176C9444C47E3EEE65AB28CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number:          0F0B
Signing time:             Sat 15 Jun 2024 19:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:21 +0000
Files and hashes:         1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: BtEVeFvlkSb1RM5jMDyC1BUj2oMvv3H+ul6OIi9Q56w=)
                          2: TkYM8cMVsHOgMX_MJl6VkjL5ymk.roa (hash: 0CiddHS+AfBeJScyvv8MzIEZcSs3jVMsd8BeFgeCRZ8=)
                          3: gPNlbpk-rWNZZq2ZluykG7NZiuk.roa (hash: Bp0SKQNMrRch7RqtAH31ulIMY44oxzoJ1nCOyI506Hs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8e:41:17:6c:94:44:c4:7e:3e:ee:65:ab:28:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
        Validity
            Not Before: Jun 15 19:01:21 2024 GMT
            Not After : Jun 16 19:01:21 2024 GMT
        Subject: CN=949a76f1c1f4b26c91ff923239b3f34124440f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:dd:22:8a:e1:1e:7d:9d:2a:bb:29:e6:27:
                    23:88:97:83:d3:f9:6a:dc:f1:04:4a:47:b2:02:5f:
                    74:39:7f:19:9d:c9:94:c6:a8:f8:a2:17:75:5b:4c:
                    bb:1c:64:c7:63:8f:d7:58:1e:41:89:9b:48:85:b5:
                    83:e0:70:91:52:74:3f:cb:aa:a7:48:f9:2b:00:d8:
                    e9:5b:11:58:55:74:87:ce:6c:13:80:50:78:6e:f7:
                    cd:7f:2e:e3:3b:50:ea:6d:82:f2:55:35:6e:71:21:
                    a3:5f:aa:7f:b6:ad:19:98:97:17:c0:85:22:7d:8c:
                    86:13:c0:53:37:31:e1:43:4f:a1:67:3f:85:70:5d:
                    05:07:f6:4f:2f:27:70:a4:56:cb:d9:2d:05:3f:94:
                    9e:a1:3e:2c:a4:dc:61:6e:8c:e5:e9:5a:4c:b2:17:
                    ef:f3:ab:4f:7c:b1:95:74:33:6b:ca:13:0b:f2:79:
                    0d:10:c4:ce:cf:70:d9:4c:d4:28:88:86:34:bf:52:
                    40:85:be:13:e9:20:e7:76:88:e3:f7:46:5e:7a:78:
                    21:54:e4:fb:d5:3d:0b:0f:77:0d:9b:bc:f8:e2:25:
                    57:6a:c1:6d:78:5e:32:49:b9:05:88:04:70:6a:ca:
                    56:f8:0d:ec:3a:79:39:60:dd:a2:a5:e1:44:2b:2b:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9A:76:F1:C1:F4:B2:6C:91:FF:92:32:39:B3:F3:41:24:44:0F:48
            X509v3 Authority Key Identifier:
                keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:d6:14:10:47:c3:0d:5b:ae:50:f7:42:56:74:0d:68:8d:
         c4:97:06:13:1c:ba:d6:9f:3b:63:19:07:3b:94:cd:cb:48:da:
         b8:e9:47:f2:83:a7:a7:74:3f:fe:79:87:c5:62:89:1e:78:a9:
         72:35:00:94:a8:8c:ee:1c:7a:dd:bb:91:ad:9b:b4:ed:e8:35:
         1d:27:ae:57:7a:50:9d:6c:04:d2:41:91:f2:21:56:37:84:ad:
         9e:d5:a1:3c:fa:49:a5:fe:68:96:21:96:5f:d2:9e:20:82:1e:
         44:e9:2f:d5:82:9b:5d:ec:3a:b2:c9:06:42:ec:c7:ff:95:88:
         26:8a:f5:63:92:36:3c:40:db:c8:84:04:6d:15:85:60:a0:f7:
         6a:3d:c7:8c:03:77:29:1d:17:e9:3b:51:89:f2:55:e9:e7:4a:
         05:19:5f:25:b3:d0:1c:3d:ce:29:e2:7c:91:ce:f6:39:6e:ea:
         d7:76:ec:1e:ae:d0:7d:5c:0c:5b:86:c1:3d:09:2e:0d:b7:e7:
         bf:5a:1a:40:61:ab:fd:88:28:40:ec:0a:77:97:80:3f:cb:9c:
         b6:6a:91:c6:cd:6c:00:55:49:9f:54:85:c8:61:c7:f2:4a:12:
         3a:24:57:c2:ef:31:da:7a:1d:bf:2c:c1:bb:a2:c3:d0:ba:99:
         d5:b4:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:32 2024 by rpki-client on console-fra.rpki-client.org