Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File:                     gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier:          0CRUR08NREdX15hy5lb/JdwIgGtkhgYLEuOAtGg7wgY=
Subject key identifier:   B0:30:51:88:3D:2A:1D:A3:9C:C0:6B:06:BD:4F:65:60:C0:33:06:5F
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer:       /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial:       01903518F07206D0662D3A948F5AEBF72145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number:          10A9
Signing time:             Thu 20 Jun 2024 10:02:25 +0000
Manifest this update:     Thu 20 Jun 2024 10:02:25 +0000
Manifest next update:     Fri 21 Jun 2024 10:02:25 +0000
Files and hashes:         1: 1fXlcBdfF3HOB3xveN9ziKdLyN8.roa (hash: L/o65DzVM/0L8tZIB6fhDPXabfwX3dSSHOCU5okMXgA=)
                          2: U2Hdk7w9woUVEnqwh9d8ZNnvOnA.roa (hash: 8geFcU2tUXM8vb3F1+L/lMveaxoLsgA6djsL6MIpK9E=)
                          3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: hD/bflOoDQSLFYQp/7WmVhmSii/P+f7rXwImAWFClrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:18:f0:72:06:d0:66:2d:3a:94:8f:5a:eb:f7:21:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
        Validity
            Not Before: Jun 20 10:02:25 2024 GMT
            Not After : Jun 21 10:02:25 2024 GMT
        Subject: CN=b03051883d2a1da39cc06b06bd4f6560c033065f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:03:3b:4f:30:3e:f6:0b:3b:d3:84:da:ad:
                    77:0a:b8:59:1a:8f:45:51:b2:e1:3b:df:c2:29:53:
                    0c:9a:0c:a8:02:f4:3d:96:a6:3f:5f:69:5d:20:3e:
                    b7:6a:82:8b:14:b1:a4:ad:80:a9:9f:d8:4e:3a:60:
                    43:f7:bc:c1:ef:56:ee:4e:dc:d8:20:de:a1:df:1e:
                    e8:74:a2:b7:7d:64:0e:11:b6:6f:1c:23:01:ae:1f:
                    65:29:43:51:34:4c:7b:2f:5c:7b:e4:26:0a:50:81:
                    d6:0f:7b:0b:57:83:59:ff:61:e2:ad:c7:e5:d6:67:
                    5e:7a:6c:85:a3:cc:8c:b5:8f:43:12:17:d9:16:7a:
                    91:c1:59:cd:89:a6:22:ed:28:82:54:81:df:10:34:
                    c6:44:00:f0:61:a1:5f:b5:e0:00:69:8c:01:d4:2b:
                    2e:1f:e9:c6:07:e1:1e:b8:92:88:04:18:8e:d4:6a:
                    c8:23:7e:7c:a3:de:5f:64:71:69:dc:e1:5b:a9:b6:
                    00:d6:9b:c9:60:63:c2:bf:6f:21:66:f3:45:85:90:
                    a9:ff:b8:66:3f:6a:2c:51:6a:d4:bb:79:a4:82:97:
                    d9:90:34:15:f6:2a:27:e9:dd:77:eb:60:98:ea:1c:
                    c2:86:c0:04:49:95:c8:81:86:38:16:7e:f3:5a:45:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:51:88:3D:2A:1D:A3:9C:C0:6B:06:BD:4F:65:60:C0:33:06:5F
            X509v3 Authority Key Identifier:
                keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:44:71:6d:98:ff:08:dc:62:92:ed:cf:6c:77:ba:78:85:d2:
         4f:21:2b:9a:96:6c:57:a4:e4:07:df:33:66:fa:19:52:1d:16:
         7a:4d:63:9a:97:fe:00:24:4e:5b:85:00:17:81:3a:1f:65:31:
         06:aa:ab:ab:53:ea:03:cc:b8:46:b9:34:93:d0:2c:a3:9a:6c:
         3c:7b:ee:7b:a4:1f:a8:a9:00:2e:9c:cf:3c:1e:3f:0c:dc:f5:
         57:92:60:51:17:ab:39:1f:e7:c6:fe:ae:ed:cb:d0:ec:bb:f3:
         7d:db:2d:27:1c:d9:43:2e:3f:bb:24:e7:03:9a:5d:29:94:f6:
         6a:f4:cd:a4:0c:39:fe:61:f1:30:8f:e7:6e:69:e5:91:ce:a9:
         2f:30:71:39:25:be:0d:01:0d:d9:01:ec:6a:f7:a6:4d:ef:d3:
         21:06:ca:dc:94:f9:93:af:49:e9:c9:c8:7e:4b:a0:01:fd:58:
         d0:50:29:b1:7a:c0:c0:c6:e0:c5:af:c3:00:c1:39:6a:d1:1c:
         62:02:c1:f6:27:e2:87:fb:ea:6a:d7:82:0e:77:cd:df:01:d9:
         5a:ef:5d:09:ec:c1:41:46:61:7e:e8:a1:b7:f3:c5:cd:cf:0f:
         72:9d:cc:10:d6:27:24:7a:e7:7f:3b:8d:4e:c7:0c:fa:99:28:
         44:27:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:12:42 2024 by rpki-client on console-ams.rpki-client.org