Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File:                     gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier:          BqWXoYa+AoxGLkEtRH4lyTs8PRm2VeVfXyKmoxKOz1s=
Subject key identifier:   67:EE:71:3A:71:BF:E6:4C:7B:51:02:5B:4F:9A:97:DB:8D:0D:33:9A
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer:       /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial:       01906B2C734A5D4CB46EFBA6264AD884E603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number:          11ED
Signing time:             Sun 30 Jun 2024 22:03:13 +0000
Manifest this update:     Sun 30 Jun 2024 22:03:13 +0000
Manifest next update:     Mon 01 Jul 2024 22:03:13 +0000
Files and hashes:         1: ELlxwxnivhlKzmhjPfFYR3NLU8Y.roa (hash: f0zUZxBoz+HkHe4LxnyJPo+gqRtO7zjKiQgfOLEVns0=)
                          2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: SAnkHhMvrIBr4cQ/trwwnOz3YQzK9Bsi81qh1eJZae0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:73:4a:5d:4c:b4:6e:fb:a6:26:4a:d8:84:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
        Validity
            Not Before: Jun 30 22:03:13 2024 GMT
            Not After : Jul  1 22:03:13 2024 GMT
        Subject: CN=67ee713a71bfe64c7b51025b4f9a97db8d0d339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:64:3c:f1:2b:75:b6:a5:40:c2:63:d7:58:
                    c7:31:2b:ed:4c:08:74:1d:ca:b8:c6:25:b3:d3:1c:
                    fa:d4:16:c8:d0:f6:da:66:1c:c5:f4:04:78:a2:f7:
                    84:8a:c9:9d:39:35:af:dd:76:a2:61:73:f3:d8:22:
                    e3:38:28:08:f1:05:b1:11:2c:b2:44:87:a2:77:05:
                    b3:06:cd:d6:03:fb:b9:d1:29:e5:db:1d:da:99:ca:
                    b0:ba:29:ad:50:1c:d5:41:db:f8:76:57:8c:7c:49:
                    12:0e:6e:cd:c1:64:f2:e4:fa:26:90:2e:4c:05:5d:
                    d6:76:a1:b0:12:53:4c:2c:33:18:e7:00:2d:11:b1:
                    84:13:84:58:c0:2a:6c:d6:82:a7:ae:08:00:e9:33:
                    c1:aa:cf:6e:bf:e4:6c:71:f7:8a:e6:ab:cb:b0:1c:
                    bf:56:7d:2b:3f:c2:e7:99:fd:68:87:3a:ec:c7:1b:
                    92:5b:e1:e6:86:6d:4d:f7:65:18:84:1c:01:37:8d:
                    ff:e3:03:96:27:ce:66:ff:c0:02:28:33:07:c7:dc:
                    fd:29:6d:04:3f:af:c0:78:10:1a:74:00:e4:d0:0c:
                    c3:36:be:4b:81:5a:21:29:7f:65:71:2f:be:48:b4:
                    91:64:73:c3:93:7e:0c:91:70:0f:5d:92:d9:75:f0:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:71:3A:71:BF:E6:4C:7B:51:02:5B:4F:9A:97:DB:8D:0D:33:9A
            X509v3 Authority Key Identifier:
                keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:13:07:cf:e9:6f:89:82:df:c6:eb:ec:13:7c:b9:11:9f:
         a7:6e:06:20:bd:e1:74:91:49:c2:6c:cc:25:72:64:c9:bd:21:
         93:35:c4:9c:df:8b:2e:74:e8:93:75:28:2a:05:20:2f:21:6a:
         cb:7d:a2:93:0d:1a:75:ea:34:15:4a:f3:c9:39:45:af:65:53:
         aa:66:94:78:8b:36:8c:70:36:b6:61:b4:05:28:35:53:3f:0a:
         83:0f:f8:03:99:30:0c:9d:e5:7e:5a:05:d8:15:66:91:38:eb:
         98:e3:67:ae:1d:29:fd:b1:8c:34:1c:6f:46:3c:a7:3f:f7:fd:
         92:14:3f:8b:e8:42:f3:13:c8:d9:bf:46:4a:68:37:27:59:46:
         b2:ef:b8:e4:ac:6c:f2:c7:4d:ab:89:ac:13:9f:88:f7:bd:81:
         e8:d5:78:b0:4a:9a:c7:fc:b8:8d:d9:9f:b7:2b:c0:94:0d:c2:
         00:54:0e:68:e9:cb:a6:8d:2f:82:c0:a0:78:fb:6c:0f:c4:07:
         1b:c0:a5:b9:ff:e6:c6:5c:d0:0e:3c:d3:f3:fe:5a:8b:2e:f7:
         b8:e7:e9:5d:20:ed:d0:4d:06:5d:01:08:6e:5f:c1:e3:fb:0c:
         11:70:c1:bf:b8:89:24:5e:29:32:c9:53:ce:7b:26:d1:6d:39:
         4e:69:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:06:47 2024 by rpki-client on console-ams.rpki-client.org