Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File:                     C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier:          ZkFO9sqySfgypNiYorz67sIAqlo/9Gog91fTIAeZhm4=
Subject key identifier:   BE:61:AB:8E:9F:05:38:F2:85:3A:34:D9:69:C8:9F:CF:6C:2D:6B:91
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer:       /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial:       01901CA1BF45D2FA6835A46BDEA564B1F054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number:          0894
Signing time:             Sat 15 Jun 2024 16:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:20 +0000
Files and hashes:         1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: gTX3vBr8oYoMRd9NhCgYRtPuemxgUdoT5gf7I45WiEs=)
                          2: kSeVSN8DDAymLqVP2x9Uur5LKlY.roa (hash: XVfHvMwYL9khzPmfMYQy8+hCwe2GBrJwjnYn1HjBAEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:bf:45:d2:fa:68:35:a4:6b:de:a5:64:b1:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
        Validity
            Not Before: Jun 15 16:01:20 2024 GMT
            Not After : Jun 16 16:01:20 2024 GMT
        Subject: CN=be61ab8e9f0538f2853a34d969c89fcf6c2d6b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:b0:8b:49:ce:50:64:06:fb:e4:a3:7b:fd:
                    de:51:68:f3:c7:cb:de:44:58:b4:c9:0a:c4:d4:65:
                    9e:fe:3a:31:e2:7f:84:e5:aa:87:93:ad:b7:d7:49:
                    8a:63:84:73:40:b7:fe:cc:98:ef:32:c4:5d:e4:5a:
                    49:37:28:87:00:ad:7a:49:c2:2d:6b:57:e1:c1:26:
                    96:b7:92:12:a3:aa:c3:85:a5:ca:d0:2b:09:ff:58:
                    eb:19:13:71:0c:93:a3:b8:bc:98:a0:1a:06:5d:fa:
                    13:f0:e3:ea:10:a7:02:c9:33:6a:6e:fd:65:af:62:
                    1b:e6:6b:fe:77:ea:d6:64:6f:75:b7:2a:33:71:9e:
                    24:da:d2:f6:ae:b7:23:fb:2f:11:f2:fe:dd:18:db:
                    c7:1d:28:01:47:38:b8:ee:b5:45:e0:11:89:02:4c:
                    bc:5e:bf:8d:64:9f:44:8e:b8:40:95:d8:64:3f:96:
                    d8:df:cc:f1:1d:75:1c:2f:6f:03:d0:c9:e8:ec:88:
                    89:c4:2c:ef:7e:90:f9:3c:a9:bd:e2:df:5c:b4:ca:
                    89:08:ce:a8:88:13:99:c1:b3:c1:9f:05:67:0f:d8:
                    b0:49:0d:d3:c5:7e:d1:b5:60:6e:f2:8d:a9:ff:31:
                    95:e4:23:83:45:3b:5a:6b:dd:9b:64:fd:f1:d2:cd:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:AB:8E:9F:05:38:F2:85:3A:34:D9:69:C8:9F:CF:6C:2D:6B:91
            X509v3 Authority Key Identifier:
                keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:4a:88:61:13:75:c0:88:b4:ef:23:be:49:e9:aa:51:b3:
         47:7c:20:d7:ce:3e:a0:bb:c4:e4:99:27:ff:c0:d3:a9:5c:f2:
         b6:09:80:af:e9:13:5a:5d:78:57:a0:9c:3d:d4:90:9d:73:4f:
         0f:ea:69:86:c5:22:e6:14:fb:35:46:ac:d6:7c:5e:5f:d2:de:
         24:4d:8b:be:74:d6:30:76:14:d8:eb:b4:62:01:67:e7:04:a7:
         9a:fc:9f:e7:60:69:9b:6d:38:cb:b5:e3:6d:ee:1f:00:36:0d:
         ab:6a:d9:d4:74:69:e0:58:a5:21:9f:bd:ef:18:b4:f2:39:2b:
         72:8b:ea:4e:32:f4:1c:12:bf:d8:9a:70:eb:9a:ac:a8:c1:57:
         48:c5:06:27:f1:24:e7:9a:99:c8:2a:a4:e0:1c:86:ce:3b:55:
         5a:50:00:ce:6e:60:b2:9c:e2:84:85:b2:b1:93:02:54:fa:2e:
         fb:7e:25:37:4b:83:99:41:4c:65:53:a2:c0:df:cd:f3:31:5d:
         cf:fa:a7:00:56:1f:69:85:3e:80:6a:1d:5b:be:1f:23:01:d7:
         0f:43:9a:1e:f1:18:94:ad:1b:ba:f1:64:93:4d:25:43:15:12:
         42:03:34:bb:fe:30:e4:50:13:58:e0:86:dd:97:c6:40:93:67:
         ef:8b:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:17 2024 by rpki-client on console-ams.rpki-client.org