Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File:                     dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier:          t25265B38N/QBJcL4Ir4sjO2jAvWPLOI7ufYeRTAIVI=
Subject key identifier:   D8:66:9B:B0:34:E5:8F:8B:77:23:DA:B5:28:AD:F2:FC:74:86:D6:EB
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer:       /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial:       01904979F60EA739E5D9CFC96F2B615CE8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 09:00:47 +0000
Manifest this update:     Mon 24 Jun 2024 09:00:47 +0000
Manifest next update:     Tue 25 Jun 2024 09:00:47 +0000
Files and hashes:         1: bSRavz531iDXgyDmegycAlmSi1A.roa (hash: 30/VTvTFxf6FwBl6PAApQuXQp4KL0lqvLPS6Ry6wNhE=)
                          2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: wPoPnMV4dPH6eGEImE2EFsTWc4Ml3pVhBnwHMWVZw7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:79:f6:0e:a7:39:e5:d9:cf:c9:6f:2b:61:5c:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
        Validity
            Not Before: Jun 24 09:00:47 2024 GMT
            Not After : Jun 25 09:00:47 2024 GMT
        Subject: CN=d8669bb034e58f8b7723dab528adf2fc7486d6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:87:69:18:7f:a9:4e:6f:05:08:26:17:82:
                    9d:a6:12:1e:06:33:4a:14:58:aa:f9:04:74:03:a5:
                    95:b8:44:d9:ad:cd:4f:1b:50:99:af:9c:46:ef:b6:
                    26:ee:a5:a4:ce:22:21:5f:ff:59:80:84:bb:f9:f1:
                    97:46:54:d4:c1:92:18:a1:73:2a:04:16:f6:9d:86:
                    96:30:5c:8b:95:73:65:af:e0:46:b7:d5:10:0f:44:
                    e9:ea:d5:31:40:54:4c:75:f9:3c:7e:1b:e8:0d:3d:
                    e3:f8:8b:f8:19:80:1f:d1:ad:43:9b:da:87:44:8f:
                    7c:db:fa:a8:c8:2b:9c:46:27:24:c1:ee:7a:38:8e:
                    f1:80:ad:e9:d5:7e:8c:ab:09:46:e0:0b:9f:2f:36:
                    60:a6:65:f7:16:31:57:7b:ad:aa:ef:17:b0:b0:71:
                    29:d4:1a:f8:73:99:ac:b1:9a:b3:eb:42:4a:7d:5e:
                    c9:51:71:e3:a9:0d:0a:5f:4d:67:4f:a8:7a:e2:dc:
                    a9:64:6b:f3:1c:5f:36:b2:18:58:a5:5e:65:17:7b:
                    69:f2:04:ee:e7:ff:4f:a6:b8:be:f8:c2:42:48:1c:
                    4b:91:60:5c:22:84:60:6d:ae:47:52:df:68:22:fa:
                    f4:bb:1b:d0:89:f6:dc:b7:9d:ff:f7:65:46:9e:5a:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:9B:B0:34:E5:8F:8B:77:23:DA:B5:28:AD:F2:FC:74:86:D6:EB
            X509v3 Authority Key Identifier:
                keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:71:59:cd:40:5e:6e:51:57:07:66:c0:b4:bb:54:5a:7b:26:
         68:06:9b:20:a1:0c:47:47:e5:31:bd:b8:35:b4:45:04:05:39:
         80:e0:f6:08:bb:85:df:36:89:88:df:ef:6c:d1:52:42:25:ed:
         2a:5e:48:70:a8:3b:75:c1:17:f0:9b:b4:29:2e:49:aa:c6:e9:
         ff:68:92:68:50:8d:19:77:db:68:4d:c9:09:56:23:29:1d:ee:
         3c:c6:e3:e6:c9:79:02:36:f4:83:70:13:47:e5:7b:7b:b0:36:
         02:e7:e2:63:a5:88:80:de:ee:8a:a0:8d:d5:1a:dc:0a:c6:d8:
         83:9e:34:83:f9:fc:38:46:09:02:8e:3d:64:e8:e2:af:41:ef:
         3a:8c:71:18:7f:3f:6e:22:2d:4a:ce:9c:4c:82:ab:b9:b9:b2:
         d5:1f:75:da:76:54:f7:47:85:ee:89:1c:20:3f:b1:47:2c:c1:
         28:ed:22:3f:4a:59:a6:36:d4:27:04:09:a5:1a:8a:94:3a:2c:
         0a:6e:ab:38:53:db:a5:cd:36:25:77:e3:31:64:aa:bd:6b:87:
         0f:1c:6e:98:f2:ad:2d:f5:fb:da:03:ee:66:ec:c0:de:3f:4c:
         4c:8c:c8:6b:69:d1:fc:44:8c:de:c9:bc:7c:f4:e4:15:45:95:
         1d:84:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:52:39 2024 by rpki-client on console-fra.rpki-client.org