Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File:                     REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier:          ym2CsFkgE4/zjLNx1Cnn0k8sacyRZ0Zn6+dQjU6domY=
Subject key identifier:   0B:B6:73:6D:81:27:E5:93:D3:C8:DB:51:B8:05:C7:99:F7:4E:FE:0B
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer:       /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial:       01901EFDDF491361DB000944650814AD5429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number:          07F9
Signing time:             Sun 16 Jun 2024 03:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:12 +0000
Files and hashes:         1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: KcjySVyVwWJqsWHS5VoNhXyjO1EXHzW1bSHhfm1e6ww=)
                          2: XZlZ_8GBedUKnRXCB745V57iRrU.roa (hash: knTSN57tIEFuuC7/UZ1UfHk3hGF0A7sk13FH8GIHzV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:df:49:13:61:db:00:09:44:65:08:14:ad:54:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
        Validity
            Not Before: Jun 16 03:01:12 2024 GMT
            Not After : Jun 17 03:01:12 2024 GMT
        Subject: CN=0bb6736d8127e593d3c8db51b805c799f74efe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:4c:12:4a:a0:5f:3e:7a:ee:1d:c2:a0:f8:
                    21:0f:50:b9:6d:0d:35:b1:07:c3:c9:ea:33:58:dc:
                    c3:f5:1d:89:c0:8b:ea:7e:6c:39:e8:37:d9:17:53:
                    5c:4b:6c:65:2b:f1:ee:b3:ca:1c:73:34:c4:d0:f3:
                    0a:1b:5d:2e:eb:e4:a3:9c:d0:f9:ce:67:3a:d5:c8:
                    ad:e2:62:dc:f7:34:db:1c:36:18:7f:a8:f3:31:bb:
                    19:06:8b:a4:fe:39:9d:30:7b:75:5e:ff:fd:42:ba:
                    22:11:5d:9c:df:e4:5c:67:a1:ac:f7:88:30:41:3f:
                    dd:65:8c:d6:09:db:3d:e8:83:95:6a:05:3d:89:2f:
                    72:db:fc:3b:27:14:85:74:84:f6:18:05:7c:d9:b3:
                    17:6b:ab:f8:76:e0:b3:70:ef:24:1c:61:e5:44:b2:
                    0c:d5:ae:74:cf:25:35:ca:a0:e3:42:cd:50:1c:16:
                    78:1a:81:03:03:1f:35:d9:50:6d:7a:de:50:1e:dd:
                    7a:7e:5a:aa:7a:76:ac:20:3c:76:c4:9c:d7:76:b8:
                    c6:5b:ef:54:27:7d:2b:1b:34:0f:d5:50:fc:b3:0a:
                    eb:cf:d6:9d:a9:21:de:e8:d1:8f:8f:a9:7e:72:e9:
                    4d:56:b4:14:24:64:c0:7c:b9:b5:28:72:b5:68:cf:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:73:6D:81:27:E5:93:D3:C8:DB:51:B8:05:C7:99:F7:4E:FE:0B
            X509v3 Authority Key Identifier:
                keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:71:b7:d2:39:0d:c7:8e:b9:70:7f:f8:75:53:fe:2f:d5:a1:
         e7:75:e3:92:78:59:c0:c4:e5:c3:7b:4e:45:81:81:9e:8d:0d:
         87:bd:64:7b:37:e1:e2:57:b8:82:28:2c:93:b7:bf:ff:93:24:
         1b:f3:ac:38:90:78:55:d7:71:e6:d8:9f:93:40:00:fb:02:91:
         a0:d0:87:fc:37:ab:b7:0f:5d:1e:ec:86:27:7b:93:63:9e:01:
         da:0c:32:0a:b6:06:cd:7a:63:20:f3:8e:3a:7e:83:6d:76:0f:
         86:b1:f9:61:4c:a9:07:0b:37:6f:c5:4b:41:9e:d2:42:a5:76:
         b4:9a:54:f8:af:fc:76:e2:75:30:73:ac:39:fe:da:89:2f:78:
         b9:68:26:20:83:9a:8d:5d:16:f5:8e:e6:f4:55:7b:bc:8b:18:
         7c:65:94:65:6b:22:af:6d:8b:3b:35:c5:db:1a:bd:0e:d1:67:
         a5:11:bb:f4:97:63:65:54:68:52:7d:cf:43:3c:c2:e3:09:85:
         21:33:63:48:c9:b4:6d:cf:32:43:2c:3e:85:1f:1e:71:dd:5d:
         9e:0d:e2:92:69:f0:4f:30:6b:8f:a6:5c:f7:7b:9e:49:8a:d0:
         53:90:bd:04:2f:41:dc:0d:94:38:70:0a:e1:52:0a:ff:a6:af:
         6c:66:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:32:27 2024 by rpki-client on console-ams.rpki-client.org