Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          E6kK+6jcsL3RD5IqXrpJhrnRY0pTBRfqBkIeAr9Qt7g=
Subject key identifier:   E8:AC:32:41:4F:72:84:79:F5:BF:45:C5:98:FB:D0:62:22:0B:B8:D1
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       01901DEB08507D9EFFC0CD633335BEB4D0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          0E79
Signing time:             Sat 15 Jun 2024 22:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:00 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: liwDYWiJorH3s8mu6pA0nLxNXiGD3aTXUMITlC1kVDU=)
                          2: DApSb9jn6XET_VUrY55xmf-V2XA.roa (hash: Ru5R7iZTVrAJXwtXlTENzh3X41tddRtMVP75pJvPtG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:08:50:7d:9e:ff:c0:cd:63:33:35:be:b4:d0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Jun 15 22:01:00 2024 GMT
            Not After : Jun 16 22:01:00 2024 GMT
        Subject: CN=e8ac32414f728479f5bf45c598fbd062220bb8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:09:04:e0:86:1d:6d:48:00:53:71:f2:1b:
                    67:1e:5f:50:67:84:9b:9e:8b:05:75:92:f1:1a:8b:
                    7b:5c:67:0c:d2:81:2f:11:3d:29:fd:cd:67:1b:4f:
                    ce:6d:6b:b0:4b:c6:5f:48:bf:e8:eb:7f:ac:6a:46:
                    63:ac:25:2a:79:eb:57:c4:7a:f7:51:ce:3f:aa:e7:
                    db:ae:40:92:c5:00:3e:6e:0a:10:fd:c7:59:3c:46:
                    e2:f2:50:be:91:fb:82:ce:be:64:43:0b:ed:24:62:
                    0b:13:61:c6:d6:5b:9b:3a:23:49:69:e9:8b:e2:54:
                    b7:ec:9e:f0:3a:19:c7:d6:b5:37:85:13:38:3f:d1:
                    e4:92:51:21:3f:5c:1a:60:69:a4:e4:1b:df:90:de:
                    cb:b6:70:b9:dc:b6:13:94:fc:ec:14:d4:56:02:f3:
                    29:38:aa:9a:22:7f:71:b0:7d:24:69:1a:5b:12:03:
                    ea:92:ae:7b:4f:82:0d:f5:74:6e:10:32:61:e4:b1:
                    be:94:41:47:fe:a3:5d:5d:9a:5d:d5:7e:79:34:04:
                    22:a3:a3:79:de:a7:3d:b7:aa:f5:7d:62:33:61:a4:
                    11:b6:0a:f2:e4:7b:3c:4b:f0:c5:80:5a:09:a5:e7:
                    68:5d:b4:81:51:75:b7:77:7d:3f:c6:7a:b1:a6:e5:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:32:41:4F:72:84:79:F5:BF:45:C5:98:FB:D0:62:22:0B:B8:D1
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:20:b8:95:73:89:79:6c:4f:ba:e8:e1:0e:33:95:f2:87:76:
         8e:37:c6:ed:ff:bf:5c:95:57:be:74:e8:b6:ca:75:a5:be:96:
         52:0d:d6:ef:5b:2b:b2:53:cf:5b:bc:c8:5b:b2:1e:14:85:a0:
         53:7b:1f:60:55:7a:b3:d3:8d:5f:d1:59:db:04:5c:54:76:8a:
         f4:a0:66:01:c3:42:5f:43:84:ec:70:4e:89:14:b9:97:2c:73:
         0a:ba:c2:fd:34:b4:58:55:36:77:37:c2:0b:ad:f8:33:47:0e:
         19:21:0f:03:89:e4:bd:4f:61:83:4c:a7:79:3e:ed:d3:68:73:
         f3:84:24:ca:29:2e:62:11:54:82:92:c0:61:91:cd:ea:4e:61:
         e6:cb:bc:9c:8e:21:5a:db:7a:a6:ab:c1:0f:a5:04:f3:34:5c:
         09:94:23:a0:01:4f:f5:cd:74:8f:07:70:38:09:f3:3b:22:1f:
         e9:d8:a6:7a:05:58:12:27:21:9e:b2:d3:33:9d:d3:3d:c5:00:
         56:44:a6:92:47:08:35:c7:00:8c:6c:44:dd:61:74:ef:5f:a3:
         55:83:2b:71:be:6f:22:2e:49:73:86:2c:9a:4f:3a:26:23:29:
         85:95:1f:69:3a:7c:ae:dd:0d:80:e0:bf:48:c7:87:fc:b1:d3:
         9e:ad:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:05 2024 by rpki-client on console-fra.rpki-client.org