Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft
File:                     nXtvF5O_KALLOj1_rTLMqtjYrS4.mft (raw, json)
Hash identifier:          YFn3XJDR9GV0i1znofLY2CVETE8+73D66PPEfl1NJxw=
Subject key identifier:   9A:58:5E:DD:9E:F1:94:32:7C:FB:2C:CC:85:9E:15:08:3E:4F:0D:EB
Authority key identifier: 9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
Certificate issuer:       /CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Certificate serial:       01901BFE4DA94BA1A3FC10556C45810D8D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft
Manifest number:          06E5
Signing time:             Sat 15 Jun 2024 13:02:49 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:49 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:49 +0000
Files and hashes:         1: KcQ5_rlr8B3UUKpvwYoaJQ7AGiM.roa (hash: CpvU52qnN5Ry6S7kQUOAwZkNs79rbvDLj3Xj4FBPZws=)
                          2: nXtvF5O_KALLOj1_rTLMqtjYrS4.crl (hash: 1pzvVgXmoVQyOW1cRT0tmXM2o7mLECpw46ueZifxxrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:4d:a9:4b:a1:a3:fc:10:55:6c:45:81:0d:8d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
        Validity
            Not Before: Jun 15 13:02:49 2024 GMT
            Not After : Jun 16 13:02:49 2024 GMT
        Subject: CN=9a585edd9ef194327cfb2ccc859e15083e4f0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:51:ee:39:1b:20:4b:a6:b4:42:71:bd:9d:
                    5b:0d:5d:a0:87:7f:1b:71:65:c5:a4:12:4f:3e:ce:
                    59:9e:61:6d:03:00:f0:fb:67:65:c1:cd:e4:16:23:
                    fb:d3:6f:5a:23:bc:d6:71:3f:f8:47:46:de:95:b0:
                    49:c7:09:f4:62:8a:e6:5f:bf:cc:30:2f:92:08:57:
                    6f:81:1e:21:28:f3:f5:5e:c5:14:66:d6:56:52:b4:
                    b2:38:39:6a:57:af:04:17:5e:1d:4d:a9:97:93:b7:
                    1e:e0:24:ed:25:f8:cf:1f:97:6e:de:37:e9:fd:33:
                    7a:19:aa:3d:2e:bb:d2:a0:64:33:3a:b0:48:39:2e:
                    31:60:90:a0:c2:4e:f9:4e:16:eb:76:54:29:33:1b:
                    bb:b0:ed:75:92:85:ef:3d:d6:8d:c4:7d:c5:90:b7:
                    68:f7:3e:6e:eb:b5:41:33:38:82:06:66:a2:1f:ea:
                    9c:0b:5c:0b:30:96:9a:a9:0e:3f:7c:ba:51:73:44:
                    f1:ab:b5:00:63:16:ec:4a:30:6d:c3:65:f6:80:16:
                    0f:ad:e7:a2:11:d6:97:f5:6b:f9:d3:fa:e3:27:64:
                    ff:63:94:6f:50:72:c3:f9:d5:c8:af:80:04:50:eb:
                    b8:0d:3a:03:4e:df:f1:28:9e:b6:2a:d5:c3:7f:5d:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:5E:DD:9E:F1:94:32:7C:FB:2C:CC:85:9E:15:08:3E:4F:0D:EB
            X509v3 Authority Key Identifier:
                keyid:9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:88:ac:74:48:b6:6a:5f:40:e9:25:b6:31:92:1e:ed:7e:
         7c:6c:14:db:a0:cb:4c:4a:fd:25:62:a1:a3:f1:45:1d:19:5c:
         0c:a8:f5:9c:66:62:e8:58:f6:76:03:90:d0:0a:c1:79:98:8f:
         0a:0d:1c:15:38:b8:e4:20:65:67:e7:d6:5b:6b:9b:bd:eb:83:
         1e:ca:13:17:f8:a5:3a:b3:9f:43:3e:0b:d9:be:bf:07:15:06:
         c0:ef:94:a1:b2:b3:17:36:7c:70:8f:60:9d:40:6c:f9:67:f6:
         4a:b4:08:ad:bb:45:83:79:81:0a:b9:b9:8f:42:7b:67:19:fc:
         c3:c3:7c:b1:d8:2e:de:c3:a7:67:b4:f6:d2:8b:7d:db:cc:df:
         4c:a0:ce:31:8f:92:5b:70:97:df:a3:64:ac:f6:26:71:e6:bd:
         c9:ea:04:37:c6:04:5d:92:94:cc:5b:bf:db:e3:1b:c1:4e:9d:
         86:10:82:76:5e:38:e9:e0:4f:f2:a1:7c:d4:63:d3:bd:15:de:
         5a:7f:76:3e:cf:f1:77:0c:1e:b7:46:8a:b9:96:8b:93:18:df:
         7e:fa:ed:7a:24:e3:20:f2:20:07:81:3d:8c:da:dd:e9:b8:52:
         97:c3:0a:2c:23:4a:62:cc:d3:41:0c:da:82:3d:8e:19:8b:3f:
         dc:3b:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:08:02 2024 by rpki-client on console-ams.rpki-client.org