Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File:                     5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier:          ImfXlk4pHNvDPW3sTfhcbUuaIm8NyxWbnHJNLy2B8Yg=
Subject key identifier:   84:14:D8:2A:25:81:5C:85:5E:9C:73:0C:35:57:C4:D3:15:56:E8:F1
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer:       /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial:       01901DEBE6B2A19C390F1B75E3A7AB2E8435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:57 +0000
Files and hashes:         1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: xT7namprYDLBYw5mOBxq+EryfUtDr8lW59PTVq9oNCU=)
                          2: h2CQiMwF_yCoqKm7JUp85Oe6aFk.roa (hash: olFk5vt6buU3Pw3ID0xHuaFgR1OiGksQjs0Hr+UaNO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e6:b2:a1:9c:39:0f:1b:75:e3:a7:ab:2e:84:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
        Validity
            Not Before: Jun 15 22:01:57 2024 GMT
            Not After : Jun 16 22:01:57 2024 GMT
        Subject: CN=8414d82a25815c855e9c730c3557c4d31556e8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:2c:74:46:3f:44:57:24:36:25:b1:08:a9:
                    52:56:30:b9:40:6b:a6:4a:20:a6:f5:8d:9f:43:1a:
                    21:f7:df:15:68:8e:46:52:e9:e9:b4:c4:8f:ca:ba:
                    0e:13:76:c7:34:9f:18:99:91:07:e0:c2:a2:f1:32:
                    ea:ce:20:41:af:5d:de:a4:d4:4f:2b:28:3e:19:84:
                    90:14:39:73:43:41:a5:d8:9e:0d:b9:ad:54:12:97:
                    e3:63:c3:1b:40:24:1d:4c:9a:d3:2d:27:fc:e8:d3:
                    57:11:a3:f7:bc:fe:19:8a:a1:5a:c3:eb:e7:9d:b0:
                    cf:bd:07:ba:cf:fb:5e:f6:37:46:41:67:fa:ea:97:
                    b7:98:46:cb:0a:19:70:5f:f5:a4:8e:8f:2f:5b:80:
                    c6:03:16:6d:20:9f:fb:8d:12:98:29:86:cf:e0:0a:
                    b0:4f:b3:64:55:d3:eb:6a:13:bf:60:2b:c2:bf:3c:
                    26:b9:e3:85:3d:f9:26:f2:22:c3:2b:92:03:8c:7d:
                    e3:9c:85:90:12:83:1a:be:6a:e9:73:29:49:45:a2:
                    52:21:04:72:d0:e5:2a:4f:b4:b2:71:d0:56:9c:58:
                    3b:c6:93:7b:c6:f2:57:15:08:1e:03:36:84:d2:6c:
                    db:7f:97:dd:55:81:61:0c:dc:c6:e5:f1:0f:58:85:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:14:D8:2A:25:81:5C:85:5E:9C:73:0C:35:57:C4:D3:15:56:E8:F1
            X509v3 Authority Key Identifier:
                keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:10:2c:45:25:34:86:83:62:78:9f:4a:4c:49:9c:aa:04:
         7e:41:3c:6c:89:67:21:59:74:90:0a:8e:76:ae:55:16:79:20:
         2f:59:c1:c1:cd:ab:2b:8c:19:1e:6a:06:63:40:28:1f:f2:ed:
         f7:3f:70:ee:21:0a:07:cb:5e:ca:00:11:03:4f:a8:59:85:d4:
         97:b4:2f:c7:b7:d7:37:8a:86:a3:64:ac:e8:b5:af:fe:88:da:
         4c:49:ac:ba:b0:39:d7:84:a2:ca:96:b2:8f:a8:c2:25:ab:3a:
         ac:85:3c:ff:50:49:e6:54:7f:04:6c:e6:1d:24:17:25:83:1e:
         1d:42:d1:c9:82:42:c2:42:eb:07:b1:37:db:98:ad:2a:e8:ef:
         ad:a0:9f:93:b1:b6:13:64:d5:e1:41:8a:bf:8f:bd:15:69:81:
         10:40:bb:79:84:d9:e5:51:9a:32:46:8c:4d:79:e2:65:66:64:
         65:f4:74:37:d7:18:e6:5b:66:fd:51:aa:28:f8:6c:4c:58:ea:
         82:68:de:d2:db:53:09:ae:c7:92:dc:b3:3a:26:a9:fa:ca:4e:
         2b:03:4c:a9:1e:81:d2:9c:af:22:7f:4a:15:bf:cc:b5:cf:34:
         53:99:03:40:29:d0:fe:c2:93:5e:85:37:5b:ed:b7:0f:a5:77:
         7a:93:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:23 2024 by rpki-client on console-ams.rpki-client.org