Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File:                     Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier:          qOuWNGo/qgjYrn/zyJGDX3+Yin7Bhnidehh5A/QWsAs=
Subject key identifier:   85:F3:CB:BB:62:0D:C9:E3:0F:47:95:CE:4A:35:90:54:ED:03:89:C2
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       01901E592BA5B36CB91E289F40DECED8DC53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number:          0696
Signing time:             Sun 16 Jun 2024 00:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:18 +0000
Files and hashes:         1: QX6CgQD4upDkzhRtoj_7HRllXIU.roa (hash: CqW0Jj6Qx/VSe304K6tqyrEo9RpA43Rh1iQUBT4I0dE=)
                          2: W8xOKYuUrB4yQ5Ra5wc31x2a0Ac.roa (hash: zMogPsn0mV3FICmDXJYqruTSL90bxHMmbz3E9GwqU6E=)
                          3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: YMKqQLSGvKHPrjURpFx+z3zFIjU8Xxoo+cEuvF2jfrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:2b:a5:b3:6c:b9:1e:28:9f:40:de:ce:d8:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Jun 16 00:01:18 2024 GMT
            Not After : Jun 17 00:01:18 2024 GMT
        Subject: CN=85f3cbbb620dc9e30f4795ce4a359054ed0389c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b0:0b:80:de:d8:3f:65:f1:41:f3:ea:7c:cb:
                    0d:ab:ee:4c:81:75:da:85:eb:de:af:ed:81:e1:aa:
                    4f:2c:9b:2e:76:07:67:e2:b5:ab:3d:e8:a3:7b:03:
                    67:6a:e1:9a:1e:d9:91:45:2b:9b:67:f5:e5:b7:77:
                    53:20:cd:8f:86:a2:b3:b9:e9:54:86:4d:22:cb:10:
                    62:66:be:06:e6:e4:24:13:eb:a4:51:e1:26:8f:dc:
                    e9:5f:34:2b:e9:b2:64:f6:a5:53:60:f3:9d:c3:fa:
                    72:02:54:d5:60:66:7d:a5:f2:80:62:de:c7:12:67:
                    ad:61:9c:c1:68:cd:b3:9b:5e:75:df:1c:b6:0c:ff:
                    3b:40:46:2a:ac:e0:a6:7d:9a:34:f2:35:d0:64:ed:
                    f3:0a:b2:ce:64:cd:ee:f2:78:eb:ce:51:42:71:7e:
                    2d:ee:ff:28:2b:f3:ca:f6:da:3d:3a:a9:75:b2:fa:
                    d5:89:58:b5:91:5f:43:70:37:65:6b:ee:cc:50:54:
                    3f:4c:62:d5:20:af:b5:d3:3a:67:45:47:70:dd:5b:
                    55:e2:52:e6:46:de:4a:06:e1:56:e6:d8:0f:6a:fa:
                    90:6e:c6:fa:53:3c:d9:9d:d0:0b:ac:0b:2a:47:95:
                    d2:b2:14:95:ec:5f:0b:a4:49:59:fd:13:cb:b1:db:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F3:CB:BB:62:0D:C9:E3:0F:47:95:CE:4A:35:90:54:ED:03:89:C2
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:ae:b6:90:9b:eb:a8:af:63:2c:84:dc:ec:7c:e3:3e:0f:
         ef:77:1a:ad:2c:e6:38:15:4b:3a:05:d7:ea:5a:18:37:40:69:
         20:e8:9a:b7:6c:fa:e4:f9:33:50:c4:ef:56:47:14:11:cc:cc:
         f0:5e:3a:21:11:80:38:55:8c:b7:33:c4:75:b0:10:86:1a:70:
         2b:ab:b1:ca:6e:ca:78:dd:32:7c:ac:0a:78:6f:ca:d3:ba:a5:
         1b:2e:2e:dd:ff:69:24:9a:53:9e:56:cb:b0:fe:37:5b:1a:99:
         c1:a7:2e:f1:79:fc:19:13:70:d6:48:68:ec:92:33:89:a0:ea:
         77:fb:b0:81:c7:7a:f8:05:a2:7b:1f:dd:d7:06:21:58:03:86:
         84:25:a1:2e:0f:b9:47:f4:7b:38:bf:1e:77:fd:a1:79:04:ab:
         7b:79:aa:87:1d:e6:6e:d2:2e:ff:44:59:10:0d:f1:46:b5:2c:
         e0:0e:c3:f9:f8:8f:12:28:d4:07:c8:cc:65:96:b9:31:23:d0:
         f4:e1:4a:02:3c:b1:34:a9:32:45:61:92:ab:72:34:bd:e0:29:
         98:72:32:f5:a8:81:c7:b4:6c:d4:57:e9:39:eb:56:06:32:5c:
         9e:90:80:ef:2a:a1:06:f9:58:58:57:50:ec:99:d4:0c:f1:54:
         fb:5a:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:23 2024 by rpki-client on console-ams.rpki-client.org