Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File:                     cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier:          fOjwrLep4Mm9eumMTodpj854pxZkITeJkSwo8gx3w1o=
Subject key identifier:   09:36:A3:2F:D9:31:70:F6:B1:4A:55:CA:6C:0C:45:0E:61:08:66:97
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer:       /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial:       01901EC6E5E9A271B4CF19B67D4C64E68CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:09 +0000
Files and hashes:         1: 2njOcV1Cmv4R1mJvrWN7awegq-k.roa (hash: RAhr+1dpMb8l03Ve1RTJLSW99gi6VduOYelD9GTCTho=)
                          2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: adOV6Ir+iUG6TZZiD0/OHEc0GBwTl/3ycvDPXvojQps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e5:e9:a2:71:b4:cf:19:b6:7d:4c:64:e6:8c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
        Validity
            Not Before: Jun 16 02:01:09 2024 GMT
            Not After : Jun 17 02:01:09 2024 GMT
        Subject: CN=0936a32fd93170f6b14a55ca6c0c450e61086697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:88:f7:41:30:b1:88:6a:56:ef:70:e9:ee:
                    bc:8e:5b:31:60:e1:48:52:d8:9f:b8:c0:6e:30:f5:
                    78:9d:9f:91:de:82:69:3f:24:1b:f3:0e:72:2b:d2:
                    83:14:5d:06:d1:39:74:91:dd:7f:e8:95:45:d0:cf:
                    f7:32:27:0c:4c:54:12:bb:df:b4:42:09:15:55:3f:
                    4e:62:1f:68:b1:ec:75:ff:39:d2:66:97:c6:e1:bd:
                    89:70:30:21:7e:47:fc:74:2a:73:a4:de:b3:e3:44:
                    5e:bd:56:b4:1a:ac:cd:e4:46:29:b3:33:2d:86:e4:
                    82:c3:24:5b:bc:a4:fe:bd:c7:39:65:e4:1e:42:9e:
                    bf:d7:89:85:2c:9d:8c:75:2f:df:2a:b0:0c:11:6b:
                    c3:0b:87:7c:8d:34:22:f5:aa:aa:79:8e:aa:8c:27:
                    06:4e:b4:63:23:8f:da:bd:a7:ad:f7:f4:d7:c7:c2:
                    82:54:5c:21:fb:02:65:65:01:85:cd:30:22:8c:66:
                    0f:31:31:8b:49:1c:59:6c:f5:68:0e:51:a0:26:37:
                    29:b2:ae:39:f0:52:df:49:ef:e2:7a:c6:e7:5d:e6:
                    50:d2:c7:de:68:84:d5:84:fe:83:01:05:89:21:59:
                    a5:c7:73:48:8c:3c:fe:f6:3c:07:32:59:54:2c:57:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:A3:2F:D9:31:70:F6:B1:4A:55:CA:6C:0C:45:0E:61:08:66:97
            X509v3 Authority Key Identifier:
                keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:78:0a:f9:40:97:f0:71:23:f9:e4:fc:b6:ad:cd:27:ef:f4:
         e6:b4:51:8e:3c:14:a6:40:78:3d:66:2b:12:24:2a:fe:4f:af:
         11:88:08:a0:ba:c9:64:1d:66:6a:4e:12:f1:ca:7d:ac:7a:18:
         b7:76:30:7c:99:88:ea:68:f7:51:14:91:38:56:f2:40:98:9c:
         17:60:20:c0:23:63:49:5b:e9:80:83:30:0d:ea:6c:b3:81:8c:
         cf:49:25:1b:20:ba:6d:16:6f:49:e2:bf:2a:69:82:e9:09:8e:
         76:b0:b2:0d:b5:4a:ee:c2:d6:35:6c:5f:94:65:ff:01:23:a9:
         63:e9:1a:17:74:1d:11:01:19:88:89:31:c0:8c:8e:b2:70:0f:
         a6:ab:81:96:f2:1d:1b:f1:d4:09:59:1f:ea:88:7a:bc:3a:45:
         3a:34:ba:58:7b:e8:9f:e5:39:70:98:c3:5f:e5:fb:8c:9e:cd:
         39:09:b7:c1:da:41:2d:cf:43:e6:55:03:f1:8d:71:8f:5c:f0:
         ca:37:18:dd:e2:e7:3a:0e:da:d2:8c:8d:30:f2:9b:bb:34:8e:
         7c:d5:64:5b:35:19:e8:d2:1d:36:e1:be:94:fa:ab:77:8a:44:
         7c:93:8e:00:37:5d:ca:08:04:f5:6a:82:5b:29:9a:75:ba:27:
         91:fb:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:45 2024 by rpki-client on console-fra.rpki-client.org