Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          abzdZXdNBVoN12WhpgvdkOTSVstDKNLR4eo7cGRdFis=
Subject key identifier:   87:17:BE:B6:B7:60:29:17:14:0D:C0:B7:FE:DB:3B:3D:62:BE:61:66
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       01901F34F727896D0F2CA198FC02A63A09D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          0F06
Signing time:             Sun 16 Jun 2024 04:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:23 +0000
Files and hashes:         1: 1gQr0ybQ-gBN29oRSrPHTtqSZ88.roa (hash: TkS+CAb2c3LHwOZoRYgbTdEhc/r9sCLYmDke+48tK58=)
                          2: VMwY_NpCWEnE7CG5u4wc2vo9-DI.roa (hash: RhGxLmJ5bvzAKvbRwhTJx0t36GrYi/Y9JYK5p1SGuQ4=)
                          3: aQe1o6LYom6XD6x7a9v6eBtvOz0.roa (hash: fexR+Tp8gFdNq2PHPdcahtZZZa7CMT+g1Ge42akjqds=)
                          4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: NL2zBjPADAEiJxLMJQCbhEuC2fOnAkq2hejMF89cAUY=)
                          5: jyar0csf_JGzOdBJFGe22FNpt3g.roa (hash: Ji3Z1l5Jj+hhs3nFAmvypg/noAKiPaNpY3OwxzZJfpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f7:27:89:6d:0f:2c:a1:98:fc:02:a6:3a:09:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Jun 16 04:01:23 2024 GMT
            Not After : Jun 17 04:01:23 2024 GMT
        Subject: CN=8717beb6b7602917140dc0b7fedb3b3d62be6166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:25:b3:f1:39:c9:15:07:de:35:18:9d:94:
                    c4:c3:58:94:4c:95:c0:cc:5c:80:63:0e:b2:6e:a9:
                    6e:c6:21:73:9b:e2:f3:7e:e6:38:95:3a:de:55:a5:
                    ee:c8:7e:1e:4e:30:63:4a:da:ad:1c:fe:01:2c:d7:
                    aa:2d:6f:2b:8a:f3:2a:19:30:66:56:dc:8a:c2:88:
                    7b:a1:d1:23:14:70:dc:c8:4c:8b:76:ca:56:9d:ed:
                    06:ea:ff:28:6c:bb:b9:fe:25:4a:b8:44:1f:e6:06:
                    19:f3:d2:61:68:8a:84:32:1f:6a:09:ac:25:ef:13:
                    61:a1:fb:27:44:43:35:21:f5:18:9c:e4:54:57:64:
                    8e:c3:98:b0:c9:63:2c:2c:63:4e:69:23:f9:6f:ab:
                    ff:30:b7:35:95:58:0f:c7:72:6e:30:f4:11:72:8a:
                    78:f9:d5:da:e0:4a:1f:f4:ae:af:59:5f:ce:9a:bb:
                    4b:04:d4:4c:ce:3b:15:88:4a:30:c1:a2:a5:5e:f8:
                    5c:ea:7d:71:00:0a:4c:b3:30:a9:5c:ef:ae:14:00:
                    b9:8b:13:e9:1e:ea:c2:1f:e7:42:82:e5:27:e6:56:
                    61:c5:e5:63:06:0a:73:a5:a7:2f:15:0e:84:0a:a0:
                    d1:d4:d7:9a:e0:7b:ba:9d:92:89:be:a6:a0:b0:07:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:BE:B6:B7:60:29:17:14:0D:C0:B7:FE:DB:3B:3D:62:BE:61:66
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:ae:e2:0e:5e:5a:f3:42:db:dc:83:5c:c6:b5:c2:e6:eb:
         b2:2e:ea:e9:a7:08:ea:38:a7:69:f7:f3:cc:65:a1:c9:ce:4f:
         03:aa:87:25:82:20:16:05:24:00:64:c4:cd:89:ec:e9:98:ff:
         8a:c2:b1:c6:e1:47:b1:eb:f5:d5:2b:de:6b:29:7f:d5:70:0a:
         f9:e3:83:b3:50:26:8d:07:1a:ea:11:4a:7e:21:3f:0e:1d:94:
         95:4c:f2:98:41:4d:ff:b1:ed:6f:bb:58:6c:a5:0f:e2:8b:8e:
         18:3d:52:96:ba:9c:af:79:83:aa:0c:a6:38:ed:9f:a9:16:90:
         ce:30:0a:ad:6f:c7:a4:54:b6:b0:99:e5:e2:2b:c0:96:9f:7f:
         49:f9:f8:eb:a0:da:d7:62:97:42:b0:67:e9:7b:75:37:b6:32:
         aa:0c:94:9a:fd:60:3e:d1:cf:51:aa:e0:9a:44:c5:a2:67:43:
         1d:a2:25:fe:fc:ed:b7:ed:e3:c5:79:e7:08:b0:59:ef:b8:cd:
         24:48:3b:e9:f8:27:dc:a9:cf:da:8b:49:fc:84:65:ff:b7:12:
         35:0b:82:49:b3:58:f9:05:75:4b:cd:cd:e2:17:42:2f:98:aa:
         97:9d:ed:75:6c:01:fb:7e:45:38:f1:3e:ee:60:53:7f:14:fc:
         53:fd:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:28 2024 by rpki-client on console-fra.rpki-client.org