Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File:                     hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier:          3rGP3ph5a48S+oLMfE5P2Kql/Ex3gm1K3SSUg2xxwNw=
Subject key identifier:   BA:0F:12:23:FD:91:F1:B8:BE:63:73:2A:F0:72:AB:89:88:D4:39:DF
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer:       /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial:       01901E58F0B50CC6673B42AD3F87A7BFBDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number:          02AA
Signing time:             Sun 16 Jun 2024 00:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:03 +0000
Files and hashes:         1: W3WW6HWHAZicJBI7U-JSCenDZYQ.roa (hash: llPhicJWA1wGXhw3KKrjYRKPjTwhasf7egy9y4jfkPU=)
                          2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: NFmHkaaEM7xBAcitc0AxaZgZauY7mfiNOtJax3HrKtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f0:b5:0c:c6:67:3b:42:ad:3f:87:a7:bf:bd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
        Validity
            Not Before: Jun 16 00:01:03 2024 GMT
            Not After : Jun 17 00:01:03 2024 GMT
        Subject: CN=ba0f1223fd91f1b8be63732af072ab8988d439df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:ad:41:d1:f1:6d:4f:b6:28:73:40:a5:7e:
                    92:14:b4:9c:46:bf:09:01:8e:3b:b1:d3:30:62:6a:
                    9a:99:60:af:9f:58:59:73:f6:5c:98:01:a9:86:da:
                    2a:5d:09:4b:2b:4a:53:06:38:3d:75:b2:4c:8f:43:
                    02:57:53:02:00:94:13:f4:62:7c:13:c0:75:ae:45:
                    22:42:07:af:f5:96:63:4f:c2:c1:68:14:b9:52:55:
                    dd:b0:f8:6e:5c:61:9f:47:40:d4:7e:f3:49:ff:2f:
                    f2:1e:a5:7e:61:93:3f:30:45:c1:3d:3d:48:1b:2d:
                    4d:e0:ab:93:ed:72:24:d4:96:52:ef:8f:39:2c:df:
                    9d:da:4e:ec:97:f1:19:27:c3:fb:1b:76:70:d7:52:
                    d6:65:ae:ca:46:84:94:3a:90:61:5b:8d:d8:68:e1:
                    f0:f5:09:86:ee:93:88:bd:56:88:75:8b:be:2f:0d:
                    d6:d6:b9:4b:e7:a6:c3:93:e4:01:c6:a8:ca:89:71:
                    70:24:dd:07:c4:30:e6:68:4b:90:a9:83:1b:09:b3:
                    b0:49:d5:ea:13:c7:e0:66:d0:04:06:cb:14:0d:f0:
                    5a:69:1e:a3:f0:a5:1a:ec:03:4e:52:f4:a7:0c:79:
                    50:0f:74:77:b7:28:80:e9:55:02:ef:18:7a:97:7f:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0F:12:23:FD:91:F1:B8:BE:63:73:2A:F0:72:AB:89:88:D4:39:DF
            X509v3 Authority Key Identifier:
                keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:7c:ce:7a:0c:6b:66:56:86:50:4e:b1:1e:a9:f6:da:be:
         8b:53:b7:50:0f:a7:90:de:39:35:aa:5e:90:88:4c:eb:cc:86:
         89:79:10:df:5e:8d:00:60:20:a7:c4:8f:b1:61:55:77:ec:18:
         44:e3:84:cb:f6:ab:81:f4:ae:64:a3:7f:4b:b3:74:da:33:9c:
         0f:ee:cd:a0:d6:1b:93:fe:dd:2a:22:6d:3d:98:0e:d2:b8:df:
         0d:32:2c:7b:bc:19:e0:14:44:d1:fb:21:33:5c:cf:ab:a9:89:
         97:af:0b:d2:f9:9a:85:73:00:88:51:03:fe:95:da:61:2c:19:
         a7:0d:c9:d1:3e:f2:58:4c:e2:f0:86:52:a0:b8:6e:c7:87:73:
         94:78:b8:07:9a:91:34:cc:d8:5a:6c:15:e7:e3:87:bb:55:81:
         9e:eb:50:fe:8c:be:12:e8:0b:e5:98:e9:be:3d:2d:c0:b9:f3:
         de:26:52:e6:ce:ce:81:12:79:56:e8:32:93:5c:b6:d1:82:3a:
         b2:ca:c6:c0:24:fa:7d:96:82:ca:31:80:b3:d1:bd:19:d3:69:
         22:8c:97:1f:d1:54:80:66:fe:62:84:d6:df:61:d2:20:61:a8:
         ec:de:b6:99:30:9e:04:8f:81:2a:b1:81:79:bd:24:3d:d4:70:
         44:31:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:17 2024 by rpki-client on console-ams.rpki-client.org