Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File:                     CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier:          r8ZvPrSQOoWGfXLQH3czo0/jc1bBx1u3arrBF2/ec4c=
Subject key identifier:   89:E7:DF:FA:4B:31:11:73:F6:D3:17:46:E0:21:6F:55:36:F9:5C:4E
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer:       /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial:       019045D490C92F7C1E8C1048FBD8671D8DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 16:01:16 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:16 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:16 +0000
Files and hashes:         1: 7llY_dOaKkiG2SCPk3KgX-Vy4js.roa (hash: 5XrALu4/ZOHhP7bKw0CcLI0ipABagws5xNeks1e/93Y=)
                          2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: HoWzYVLitA8kAG8TvK15DnvGIMj7eE5W2jNC8Ca1pjM=)
                          3: GUmaJzfZzAdW94729BVx3bxnvvI.roa (hash: p1XaNJjmkMbqwOYcM+rF+yV2UbppQupd9kE5HujGvss=)
                          4: ytZFJp27jGFYcX22sjWEfOc-rNk.roa (hash: rrfhczHYqW8Z5rAN9Dam9ieX700vIKeW9o1NL88feBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:90:c9:2f:7c:1e:8c:10:48:fb:d8:67:1d:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
        Validity
            Not Before: Jun 23 16:01:16 2024 GMT
            Not After : Jun 24 16:01:16 2024 GMT
        Subject: CN=89e7dffa4b311173f6d31746e0216f5536f95c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:91:d9:c2:5f:b3:cc:9e:09:9d:a5:f6:09:
                    bd:85:f2:4a:d3:2c:1e:d8:cd:9d:ec:ac:0e:b8:26:
                    73:62:95:e5:9e:25:25:2b:c9:1a:7c:1c:04:9d:be:
                    ec:24:b5:1f:e0:13:41:d6:76:a5:c1:62:41:6f:4d:
                    38:4b:62:30:f4:e8:66:35:d0:be:ec:56:b3:4b:ef:
                    d5:8c:e3:45:2c:bd:1a:c3:25:32:3e:ef:ff:03:09:
                    6c:45:63:95:c2:80:88:40:b4:85:a5:1f:30:87:6f:
                    83:b6:00:8f:2f:81:67:44:f8:91:82:fe:57:cf:75:
                    d7:d8:79:e2:72:41:30:a7:f2:04:71:6d:df:1c:26:
                    c2:7e:1f:94:4c:e2:b4:4f:8a:7e:01:80:84:6d:6b:
                    58:02:7b:6c:f6:1f:89:5d:4a:03:21:4b:7c:f0:da:
                    c4:ba:90:d7:bd:ef:01:61:b0:a5:32:75:4d:9f:6f:
                    eb:c0:a8:01:1f:c2:79:48:cb:1a:ef:b4:c1:32:16:
                    19:4c:e3:8f:fd:a3:25:e1:8b:39:27:09:4c:29:5e:
                    ce:ff:66:b0:1d:ad:b4:45:55:92:a2:38:48:bd:aa:
                    ad:26:02:3d:3f:30:be:6c:2e:9c:c9:f3:ce:6e:77:
                    f5:b5:87:94:5f:64:1a:50:b8:6e:e0:68:be:79:d3:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E7:DF:FA:4B:31:11:73:F6:D3:17:46:E0:21:6F:55:36:F9:5C:4E
            X509v3 Authority Key Identifier:
                keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:18:57:8a:24:89:35:d8:0a:93:24:2e:fe:90:b9:73:f1:c0:
         8b:f1:97:1a:e0:3d:f8:9d:8a:97:71:22:fc:a3:84:5c:92:23:
         3d:9e:fb:63:14:18:0e:01:e6:eb:4f:40:b2:4b:57:79:fa:c9:
         e0:23:11:0f:e8:08:05:32:af:93:86:6a:93:2f:09:5a:4f:f7:
         92:d1:c2:1f:b8:37:b0:16:68:77:22:32:d3:e8:a0:47:27:4c:
         33:98:a1:6b:40:ce:ab:b6:16:f8:ab:55:42:60:ec:03:60:e7:
         3e:82:32:cb:4b:bf:65:24:70:1e:54:d8:fc:86:a4:cd:d1:41:
         b9:7d:22:8f:19:72:4d:95:f6:0d:de:8d:42:be:81:be:9f:09:
         6e:fc:cd:68:2d:e9:92:03:40:52:63:e5:a0:b5:c0:07:64:33:
         ea:33:51:d1:25:76:20:a6:07:52:23:1f:11:00:71:2f:d7:57:
         13:b4:07:ba:8f:14:0d:8e:fe:ba:19:b2:a0:80:6a:c6:6a:96:
         3c:e8:cb:4b:c2:e0:23:fa:b7:97:3f:12:f2:5e:5f:b3:2e:a1:
         3a:1a:d3:20:24:bf:1f:30:ae:9b:6b:ea:cf:47:9c:7c:fa:fa:
         eb:57:98:62:7c:2b:85:53:cb:58:0c:46:9a:5d:fc:12:ff:73:
         63:34:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:41:34 2024 by rpki-client on console-ams.rpki-client.org