Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          r5hL2MTt/OIThvpdY1/XrqBnt659LSyotlmWniLfZDw=
Subject key identifier:   05:42:45:FD:90:B4:DC:D4:BE:E9:E8:3E:87:E7:9C:63:F4:08:3E:45
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       01901CA164295196E372001EAE858195B54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 16:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:57 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: O+V1mf1GHToyXrSpyezkqQk9XHTqXs3d54mPEX5jUME=)
                          2: 8OHRv5RyW0FKLMBVpJ7CJWfYtEM.roa (hash: 6qAFFMhREgdAe2I81oqcFoaxgk06wJRAWHZF0aBUnh4=)
                          3: MR_57AFXMXoRrUdCdmpkDltOtyE.roa (hash: bkFu0cEmDaP0SSpZYVEiVUsbn2ddv79F08eXyZggnx0=)
                          4: gAEvp1-KM4UOuiTMfXLLnP22VsU.roa (hash: TFGDocGw8j0tswS49YYRh7cl9NtHFJdmWzGKm8AHgRg=)
                          5: jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa (hash: dleyQRweaO5HWrXAd7te/yMUxo5v2A1Z0o+PNDuExvE=)
                          6: t9F8dY0PEBZp_VZ3YVBBc7CSe-o.roa (hash: h+k4HNy10swJtkhmU2Yv7+HS7rzLsWGT9CVEOoxeEMU=)
                          7: w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa (hash: nDyGmJ5Dat2CTwaK83rfZdo2YbcFBKkmBUZqH/fb4yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:64:29:51:96:e3:72:00:1e:ae:85:81:95:b5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Jun 15 16:00:57 2024 GMT
            Not After : Jun 16 16:00:57 2024 GMT
        Subject: CN=054245fd90b4dcd4bee9e83e87e79c63f4083e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:65:90:48:41:36:e3:39:86:67:1e:0b:c1:
                    d4:64:cb:4e:4d:cf:a7:f5:58:62:9c:d1:c9:1f:b1:
                    80:4c:b1:25:41:91:73:03:94:e9:3f:8c:9b:02:fa:
                    39:1c:36:51:1a:66:18:0c:ee:cb:a6:62:96:ef:e4:
                    6b:6b:6c:52:c4:f7:dd:e1:e1:40:f9:08:d0:55:09:
                    6e:22:a7:c3:ea:b0:92:39:42:bd:ec:43:d3:b6:86:
                    92:fb:15:73:e8:b6:7e:e9:e4:6f:23:dd:ef:b7:21:
                    2f:34:8a:e7:5e:42:78:b9:29:1e:47:38:ac:02:f9:
                    6a:cb:a4:c6:43:99:6d:37:2b:f1:2e:79:24:aa:fb:
                    21:30:f9:d8:15:0a:93:78:66:10:ba:ef:83:a1:4f:
                    38:1b:d0:2e:1f:fd:5e:2c:67:92:c1:3c:b8:2f:44:
                    6d:62:ff:c7:d3:c5:61:b9:0b:52:de:94:ef:dd:bc:
                    0c:c3:2e:fa:89:b1:c1:b5:ec:22:f7:cf:92:57:6c:
                    19:2c:da:58:5a:bb:87:51:2f:84:3e:b2:cd:20:ce:
                    fa:98:36:cb:59:36:50:13:a9:cc:99:25:13:9b:e0:
                    31:a4:db:ad:99:8b:be:1f:b6:43:21:f1:aa:7b:1c:
                    cd:15:9e:bc:d8:aa:63:21:e7:30:75:e9:66:f2:2c:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:45:FD:90:B4:DC:D4:BE:E9:E8:3E:87:E7:9C:63:F4:08:3E:45
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:ca:73:30:33:51:ff:86:c3:44:d7:66:5e:bc:9a:a0:57:
         61:aa:ee:eb:5c:dc:fa:3f:d6:b9:c8:88:5b:64:3a:78:f0:9a:
         9d:8b:b2:7f:9b:38:94:28:1c:b9:b1:54:4e:0c:fa:46:75:77:
         10:a7:18:61:8e:0d:ed:c6:a7:3a:92:78:ac:d3:df:b6:8d:22:
         45:b2:3b:42:c7:b3:04:6c:2f:8b:38:c9:97:c8:72:47:75:b1:
         1a:66:56:5f:ad:b4:53:83:f1:07:35:70:dc:51:3e:44:b8:44:
         17:5c:f9:70:f7:e5:5c:6c:b9:7d:d0:05:e8:62:52:7f:14:86:
         22:4e:fa:de:8e:90:49:10:45:d5:9c:d3:f7:79:96:0a:b9:f7:
         83:67:2a:94:97:7b:97:c2:eb:21:c4:ab:14:9d:08:d9:77:b4:
         a4:f2:c3:de:96:c6:2e:f4:5c:13:7e:da:e6:d8:19:ff:78:c9:
         3a:f6:2b:20:8b:4c:50:18:02:77:82:06:1a:98:8a:1c:d8:51:
         28:27:65:e6:a9:0a:a9:f3:07:bf:e8:74:c8:67:09:42:bd:aa:
         3b:04:17:92:c2:3a:a7:c6:79:2a:f7:a7:86:cb:d1:52:8d:6d:
         9e:6e:7c:61:90:7b:b7:e3:2c:c1:97:d0:cb:5e:bf:87:1b:08:
         d7:a2:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:13:05 2024 by rpki-client on console-ams.rpki-client.org