Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File:                     ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier:          L35VjF/AnEeN6y/Xe1mxzCKnoVuynUnYygkkGnDiNXg=
Subject key identifier:   D6:2C:12:F6:FA:EC:E5:CA:03:ED:29:97:56:C9:A8:16:C8:BC:4D:AF
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer:       /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial:       01901DED277C6B759DB7D9F160846208A1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:19 +0000
Files and hashes:         1: atKE68eodvcZAlGK3V6bjqpw2S4.roa (hash: 8AvUYoeajDlOwilLNU/fdayTVnMLJa2RcHp+ohE2yYI=)
                          2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: wJQFjauYMPPp1ync+YWIsDTuL/d6ynRLjoK3OANqBY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:27:7c:6b:75:9d:b7:d9:f1:60:84:62:08:a1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
        Validity
            Not Before: Jun 15 22:03:19 2024 GMT
            Not After : Jun 16 22:03:19 2024 GMT
        Subject: CN=d62c12f6faece5ca03ed299756c9a816c8bc4daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:10:ef:a3:b2:da:5c:2a:61:99:d6:b4:03:
                    3b:d1:9e:f9:a7:ae:c3:cf:09:f5:e9:3b:d8:b0:c8:
                    50:46:80:8c:ae:71:31:9e:7b:7a:c9:06:20:bd:39:
                    57:65:c0:09:bf:4c:12:4b:72:dc:bb:b9:89:b3:8b:
                    86:fd:6b:6d:f9:a2:dd:dd:60:38:f6:1b:d5:2c:56:
                    b5:f8:b5:78:28:89:e0:ba:d5:bb:2c:6d:2b:21:4b:
                    93:f3:46:a7:67:fc:87:96:0d:ef:f7:a7:1d:74:d5:
                    db:21:54:e1:a5:d5:d6:0a:ff:66:d6:e3:70:3c:75:
                    3a:c1:c1:ac:a3:66:85:de:07:bd:e5:81:a1:9b:db:
                    09:4a:df:7a:82:52:e3:a0:5f:c6:3a:03:07:ac:1d:
                    2f:13:55:7a:56:7b:fe:62:39:3b:06:cd:83:38:b3:
                    4f:4f:71:e4:fb:e7:2d:9d:8c:77:51:a1:ba:39:4d:
                    b5:25:a2:88:8c:f4:7a:d6:1c:63:0d:39:ca:c6:d5:
                    aa:e9:49:9b:41:42:1b:55:df:ca:d5:d3:85:c5:bc:
                    a0:e1:86:fb:97:15:d8:54:d9:56:04:31:10:8e:b7:
                    57:08:b9:4f:f2:fd:bb:63:d5:92:f6:6b:cb:b1:28:
                    d8:ce:dc:a2:80:e3:c7:a0:4f:f0:37:b9:85:44:8b:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:12:F6:FA:EC:E5:CA:03:ED:29:97:56:C9:A8:16:C8:BC:4D:AF
            X509v3 Authority Key Identifier:
                keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:88:08:e9:8c:c2:49:a8:99:f8:e0:aa:9e:4b:f1:ae:cb:
         51:bc:f0:3d:98:00:6a:c0:17:80:4e:cd:84:73:c1:49:66:0b:
         c3:8a:6d:3a:24:da:c9:f3:ce:5a:50:e4:2f:c0:04:a4:2c:fd:
         29:d4:25:cc:e6:be:9b:59:42:b4:e5:c0:2d:ea:9a:87:4f:3d:
         33:19:c6:b5:d6:6f:bc:b4:27:e3:d4:ed:b5:f6:6f:4b:00:62:
         7a:e6:16:e9:98:a8:25:df:8a:9e:b2:5b:1b:1a:7a:d6:46:03:
         84:b9:23:3b:da:4a:a2:98:ef:64:9c:59:79:6f:19:a0:fc:c1:
         57:b4:4a:88:fb:f2:3c:06:04:22:b1:e6:4e:19:70:9d:29:fe:
         b0:d0:60:02:62:1d:97:c6:a7:a3:c4:3b:e9:39:97:49:c7:8c:
         4c:13:a7:95:25:53:2e:5d:aa:aa:c7:54:85:5e:da:4b:9c:a8:
         bc:fd:52:28:e3:e7:eb:f5:dd:af:b2:42:7e:99:7e:b2:54:ae:
         27:44:fb:ee:f7:3a:45:49:38:05:8e:02:7e:04:1f:e0:32:26:
         a7:37:d9:4a:78:e6:99:27:21:c2:5c:a4:3b:e3:7a:bc:d7:b4:
         14:38:3d:de:ff:0b:31:78:da:d5:76:eb:61:49:e6:f0:0c:d1:
         29:c9:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:11 2024 by rpki-client on console-fra.rpki-client.org