Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File:                     khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier:          BIwzTjv68rnLsGu6dgPmALhgP4Si+H1jpVXqqaVT7Vw=
Subject key identifier:   5B:BB:7D:6A:06:22:82:A9:5B:69:78:24:1A:69:DC:F1:64:86:B7:6F
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer:       /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial:       01901EFDC9CD09447EE0913503F637ECE1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 03:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:07 +0000
Files and hashes:         1: 2fv-_iSBnxzAE5fYNDFbQddXIwU.roa (hash: tC3x8O6b2Z5PhzDUQp72TfTcF2yte/CL0Yt7sp9bLIU=)
                          2: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: YgEBuQZBRrnz3/063zBW6aqG46m9vYnRzQKBwxdivz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:c9:cd:09:44:7e:e0:91:35:03:f6:37:ec:e1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
        Validity
            Not Before: Jun 16 03:01:07 2024 GMT
            Not After : Jun 17 03:01:07 2024 GMT
        Subject: CN=5bbb7d6a062282a95b6978241a69dcf16486b76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:c6:c0:c2:7e:44:3d:c2:5f:5d:83:2c:51:
                    67:ce:3e:d1:eb:ca:f4:22:74:ca:8b:52:42:34:a1:
                    5a:04:a2:5f:83:33:2c:72:13:86:a6:cc:9f:e6:d5:
                    9c:69:77:22:59:df:2f:50:1b:20:ba:ee:88:46:31:
                    6d:60:80:76:54:9c:51:a5:cd:90:38:19:26:e1:c1:
                    71:7e:ab:53:04:9d:b4:b2:ed:15:e4:63:c3:b9:b8:
                    7f:12:7c:79:8b:43:7f:b3:88:a8:df:67:28:eb:fe:
                    3d:ad:aa:ce:16:46:73:68:ea:e0:5d:e5:cf:4d:a0:
                    74:66:03:ba:be:18:9e:43:80:6f:5b:ea:d8:5c:3c:
                    c6:4a:d5:4a:c8:ea:df:56:df:8f:75:9f:2a:c5:f9:
                    0f:c1:85:05:24:d0:e9:1d:64:30:4c:d6:d6:b4:58:
                    6b:95:36:5b:98:35:d2:fb:23:ef:05:2f:d0:89:3b:
                    8f:ae:66:1f:17:77:fe:e8:79:9d:cf:98:64:19:be:
                    7c:bb:bd:ab:3e:fd:f6:02:2b:c2:4d:d1:e4:9f:08:
                    cf:90:2b:dc:85:74:80:68:63:7b:33:f6:37:57:78:
                    b7:97:f9:89:ae:41:53:b2:74:9e:ec:1c:fb:30:2c:
                    03:28:c8:5c:e7:e3:35:39:1b:69:c3:c1:29:d8:b7:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BB:7D:6A:06:22:82:A9:5B:69:78:24:1A:69:DC:F1:64:86:B7:6F
            X509v3 Authority Key Identifier:
                keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:f3:9f:b1:84:54:fa:5f:6c:bd:28:5f:51:92:43:94:a1:
         a0:ba:b5:98:b9:32:9f:62:0d:73:35:f2:1f:99:43:89:17:63:
         16:c2:08:da:9a:a6:5a:49:b4:ba:aa:f8:40:96:9d:7d:16:3e:
         99:5f:28:e7:ba:31:ab:d4:9c:95:7c:ae:5c:2f:f8:4f:3d:a1:
         0f:0d:ec:18:4e:06:bd:6e:40:f8:b3:0e:f4:43:c0:0a:8e:e0:
         91:a0:35:0f:30:65:a3:d1:d5:78:92:ab:bb:5e:34:38:2e:8a:
         5b:4c:39:44:9a:cc:df:3f:de:5a:6f:6a:d0:12:1c:ba:25:31:
         86:ac:f8:87:0c:4b:72:8d:78:77:4e:b8:0b:2d:a4:f6:7a:54:
         3b:72:6f:b4:41:c3:16:e7:93:e4:38:1d:7f:a2:68:0c:26:3e:
         75:04:3c:47:69:22:5f:2a:0e:4d:ef:2d:9a:4f:11:94:80:16:
         82:c3:96:9d:1d:22:cf:17:ac:8e:9e:3d:fa:99:de:31:60:4c:
         86:c0:47:45:41:e9:46:5f:aa:d3:5a:f8:93:1e:38:2c:d9:41:
         c9:cd:aa:d2:a2:5a:72:e4:c2:77:b5:b0:98:28:a5:48:b4:18:
         fc:9c:e4:c1:9b:82:91:e9:ae:81:0c:50:92:04:70:ed:bd:1b:
         e2:10:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:39 2024 by rpki-client on console-fra.rpki-client.org