Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File:                     rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier:          9LGZx5Z2VkRUIqQEc8aa9NSeR62xuEWlDyYwq9ussOw=
Subject key identifier:   A9:72:47:1F:9B:1C:B4:16:EA:84:6A:C7:50:4E:30:2C:3C:2E:71:F3
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer:       /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial:       01901DEB158D4B4796C1762051ED563DF983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number:          11DF
Signing time:             Sat 15 Jun 2024 22:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:04 +0000
Files and hashes:         1: haFxmEplesatplQxfCjMgKAGx-w.roa (hash: 8dF57wkEF3zvfWpMJNNT2LtVTE2DN/jEVKaw7JUHQeY=)
                          2: hj9c802h27A_GvsHt_USkRE3yPs.roa (hash: 93uBritA9RupTUznnPbJQHB4ptevP6l3YJa4aQx702M=)
                          3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: tMMEQAeJu83csZneyS8mb63WahaE7hR+BsmQZL2PLlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:15:8d:4b:47:96:c1:76:20:51:ed:56:3d:f9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
        Validity
            Not Before: Jun 15 22:01:04 2024 GMT
            Not After : Jun 16 22:01:04 2024 GMT
        Subject: CN=a972471f9b1cb416ea846ac7504e302c3c2e71f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:2c:a4:ed:c9:d3:b8:35:d8:93:5c:52:b3:
                    d2:2d:99:6e:c9:c3:f0:5e:f1:87:05:1e:6e:5a:30:
                    08:83:5e:85:b2:13:bb:52:19:19:44:be:cb:e4:0c:
                    c6:9c:b5:e8:04:89:12:b4:68:25:ef:ae:fd:2a:af:
                    17:68:d2:8e:3b:72:71:bf:1e:f5:47:97:92:d5:1b:
                    bf:9d:69:a5:e6:30:3f:ee:58:af:32:82:ce:10:f5:
                    db:79:41:6b:cc:e9:cd:bb:dd:d2:3b:a3:c0:a8:6e:
                    9a:6e:19:4f:62:22:a5:e4:8a:f2:52:d8:1e:04:1c:
                    b5:11:c2:85:6d:c8:a8:3e:a2:b5:4a:f8:68:0a:a0:
                    15:22:f7:78:a6:a4:b3:9c:96:37:24:55:28:cf:35:
                    f5:d7:2c:6d:89:94:1b:fe:67:ac:d3:5e:ca:dc:9b:
                    8a:70:43:87:b9:26:dc:a3:c3:51:e4:e6:40:ba:60:
                    f9:31:83:ee:05:12:b8:59:57:c4:b9:8e:8d:07:22:
                    c8:70:f7:09:10:36:c1:90:44:8d:f0:d7:63:2e:5f:
                    66:10:59:07:64:94:1d:6b:78:09:e5:8b:da:33:3f:
                    a4:4b:14:9b:65:5e:ba:10:88:a9:ef:66:fa:82:9e:
                    77:24:40:d6:93:7b:62:d8:2b:a4:82:b9:2c:dd:52:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:47:1F:9B:1C:B4:16:EA:84:6A:C7:50:4E:30:2C:3C:2E:71:F3
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:c6:c1:28:17:89:b5:30:4b:63:de:c9:66:2b:be:24:28:
         c6:ae:29:fc:5b:e7:e8:b0:3e:eb:66:e1:75:36:94:14:8d:11:
         38:7a:1a:61:dd:0b:85:57:25:59:1f:ba:4f:c8:7f:d2:94:3a:
         ab:e0:4d:14:df:e4:17:52:2a:0f:33:07:07:22:84:0d:67:65:
         20:49:c8:7b:cc:ae:22:b8:0d:7a:7e:0a:90:24:99:ae:19:f7:
         b7:89:d8:93:ba:8d:f1:0a:38:45:a6:92:9a:05:0d:0a:a4:c3:
         1d:d3:bd:90:0b:d2:9d:1b:4d:71:2b:4a:71:cb:4e:70:3f:d1:
         ac:fd:c6:27:64:66:38:72:fd:ce:3a:69:19:8c:c5:5d:1c:05:
         75:bd:4f:99:b3:27:19:81:0e:89:94:65:fd:aa:eb:47:62:ae:
         f1:d6:95:11:ab:2f:7c:40:73:29:15:99:75:e5:cc:96:e3:dc:
         dd:6c:65:87:75:92:ef:5d:b4:2a:1b:80:94:b3:22:39:c2:34:
         b1:7c:fb:cf:91:eb:61:d1:44:69:5f:b5:39:87:66:96:10:40:
         60:5d:a4:10:bc:4b:b8:62:9f:45:bc:18:80:bf:2a:e8:53:e8:
         0c:65:66:c7:df:79:71:e1:2d:d6:8f:68:e8:69:72:60:86:d0:
         14:45:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:57 2024 by rpki-client on console-ams.rpki-client.org