Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File:                     gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier:          xp86BQ/IhFXHULMURBeEQ3KJkpy5ppaZBsfNzY7olKE=
Subject key identifier:   EF:F4:CE:7B:6C:99:15:9E:D7:2A:41:91:6F:93:C7:87:85:9D:7C:09
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer:       /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial:       01901C6A9B4F453C09897AD4E40DDE6983FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 15:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:06 +0000
Files and hashes:         1: ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa (hash: 0k+Mzq/cOPCr6/pXSxHPs52VFLR7kRctdtSogHIznKQ=)
                          2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: wWZoOW+JUsd7cL56AyShkeXH3gnm/JyqiBiAwQCmICc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:9b:4f:45:3c:09:89:7a:d4:e4:0d:de:69:83:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
        Validity
            Not Before: Jun 15 15:01:06 2024 GMT
            Not After : Jun 16 15:01:06 2024 GMT
        Subject: CN=eff4ce7b6c99159ed72a41916f93c787859d7c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:13:6c:3b:d3:3a:90:b6:bd:8d:51:2b:38:
                    86:ab:38:58:f9:49:fe:30:a4:98:39:d2:98:f6:07:
                    73:09:90:09:f2:68:76:b5:c5:1a:4a:90:a4:94:ed:
                    a8:10:10:b5:ce:cd:da:5d:e9:e6:7b:d3:0a:87:81:
                    20:4f:33:cd:47:0a:e2:6a:b9:52:cb:47:84:85:a7:
                    de:4d:ec:99:dd:da:f1:ab:09:95:aa:bd:19:97:54:
                    d0:a5:58:b9:a2:f1:0b:d0:c7:88:5e:61:56:25:33:
                    87:0e:b7:76:ea:76:50:2c:2d:da:b8:af:28:c1:08:
                    09:78:28:8b:3a:8a:37:22:36:af:0e:ae:1b:c1:00:
                    30:a9:0d:e0:96:c0:7a:f5:5f:72:e1:30:33:3a:08:
                    c8:68:6d:6e:89:c7:3b:6d:ce:15:ce:b9:ee:d5:55:
                    b3:4d:3a:62:f8:19:13:8b:b8:cd:ee:5b:4b:81:6e:
                    89:b5:36:23:f2:42:1b:be:60:59:e8:8e:bb:23:be:
                    8a:b2:67:bb:c3:63:6a:b0:fc:57:7d:04:02:2a:d3:
                    26:8d:c7:20:80:c6:0b:31:86:a6:ac:61:a6:fe:50:
                    39:b4:fa:c7:0a:2f:b8:2d:88:e6:3f:a0:ae:3c:e2:
                    cc:57:9a:8f:a8:32:44:d9:b1:7a:6d:1a:68:02:a9:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:CE:7B:6C:99:15:9E:D7:2A:41:91:6F:93:C7:87:85:9D:7C:09
            X509v3 Authority Key Identifier:
                keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:17:24:66:b9:e0:d9:30:79:35:24:e7:97:ae:3d:bb:00:d8:
         93:7b:18:88:63:28:c6:b9:c4:5d:6b:cc:09:1c:b2:e3:87:f0:
         07:71:bc:a7:2b:76:71:7d:8d:5b:5f:8f:86:f4:ae:ef:ad:41:
         33:e3:ff:62:f6:ba:0b:93:2f:86:f8:93:3d:99:6a:65:b1:89:
         42:17:56:d5:a0:11:28:47:a3:25:1c:55:9a:4d:30:96:26:c5:
         37:6d:d5:a5:ca:d3:4d:a0:bc:a8:2e:6c:d2:a3:1d:43:5e:b2:
         af:51:92:ee:10:09:ca:16:11:a4:71:ce:3e:c0:85:e2:ef:00:
         8e:41:ee:63:5f:38:92:5b:e3:a8:7d:d2:65:cb:01:10:0c:61:
         de:d0:1d:d5:24:51:48:d6:04:d0:b7:bc:77:2d:28:c1:5e:22:
         9f:35:09:dd:da:14:2b:3b:50:2f:23:a0:d1:8e:29:55:94:82:
         a6:44:9a:b4:36:25:4a:58:39:b4:b2:20:fd:c8:62:88:ea:52:
         9c:ba:03:18:fd:64:61:a6:06:f8:41:5b:e2:40:b7:89:3c:87:
         17:1f:20:e4:1e:94:09:0a:a8:d8:53:84:5d:78:17:fa:27:6a:
         a0:c4:58:35:d9:d1:bc:96:fe:45:9c:43:e0:b5:d5:d5:7d:b9:
         50:61:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:31:55 2024 by rpki-client on console-ams.rpki-client.org